Re: Can't delete UCGuard

I'm sorry, but I couldn't open https://up2sha.re/ for the second day so I couldn't review your last logs. Would you please upload them to another share - http://zippyshare.com/ for example. Thanks.

Re: fake anti-malware Target your adware cleaner tool

Hello,

can you give us some more details like the name of the fake anti-malware ?

Thanks.


cocochepeau, 2016-10-09 13:40:24 (UTC)

Hi

Can I share the info here in public or share it with you in elsewhere ?

Re: Can't delete UCGuard

3) Do you want me to run the program again?


pedromatt, 2016-10-07 17:04:20 (UTC)

Yes, run FRST again and share links on new logs.

 

Re: Infected LNK, False positive ?

Hello,

Sorry, the logfile extract is shrunked. Is it possible to host the whole logfile on https://up2sha.re/ and share the generated link here ?

Best regards,

Re: File not disinfected: C:\WINDOWS\System32\dnsapi.dll

Hello,

Can you do the following to look for "dnsapi.dll" files on your computer ?

  • Download SEAF : https://toolslib.net/downloads/viewdownload/155-seaf/
  • Right-click on the icon -> Execute as Administrator.
  • In the search field, type "dnsapi.dll".
  • Then, start the search. A report will open when the search is over (it contains the search results). Please share it here.

Best regards,

Re: Can't get rid of few malwares (yessearches)

Hello,

Can you stop the Chrome synchronization if you're using it ?

-> https://support.google.com/chrome/answer/1181420?hl=en

Then, reuse AdwCleaner, reboot, and see if the problem reappear. Also, can you share me the whole logfile ?

Best regards,

Re: i need help please!

Hello,

Sorry for the delay. Please relaunch Roguekiller and do a [clean]. Then, please share the logfile as above.

Best regards,

Re: ADWcleaner Remove and returned next day after cleaning

Hello,

Sorry for the delay.

Can you share more informations with FRST ?

  • Download FRST
  • Right-click on the file -> "Execute as Administrator"
  • Click on the "Scan" button
  • The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
  • Please host them on Up2Share and share the generated link.

Best regards,

Re: A whole lot of damage

Hello,

Yes, there is a quarantine in which is copied each removed element.

Can you share the logfiles ? I find quite odd that AdwCleaner has removed those elements, and I'd like to check. The logfile is usually located in C:\AdwCleaner\AdwCleaner[Cxx].txt.

Best regards,

Re: Adwcleaner false positive?

Can you share the logfile ? (at least the header)