AdwCleaner has stopped me from booting into safe mode

Hi,

I had some unwanted popups the other day and seemed to remove them.

As AdwCleaner is recommended for adware/pups, I thought I'd try it out to see if Malwarebytes found everything.

The scan itself was quick, but the removing part took longer, and when it got to the end it crashed (screen went wonky and discoloured, my disabled avira taskbar icon had a big red x through it) and restarted. ...

Re: ITS NOT RESPONDING

Hello,

Great ! So can you share me the file C:\AdwCleaner\AdwCleaner[Cxx].txt ?

We'll remove UCGuard then.

Thanks,

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Can you send me a zip of this shortcut to see what's wrong with it ? (right-click on it -> send to > compressed folder).

Best regards,

Re: ITS NOT RESPONDING

Hello,

Ok.

  • So please launch AdwCleaner.
  • Do a scan.
  • Then, in the "Services" tab, please unselect "UCGuard".
  • Click on "Clean", the computer will reboot.

Finally, please share the file C:\AdwCleaner\AdwCleaner[Cxx].txt (where xx is the highest number you have).

Best regards,


fr33tux, 2016-08-31 11:31:57 (UTC)

yeah. It work. but what is the "UCGuard"? How to delete it?

Thankss!

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

Can you share a logfile showing the "Trojan.Agent" detection ?

Thanks,

Re: ITS NOT RESPONDING

Hello,

Ok.

  • So please launch AdwCleaner.
  • Do a scan.
  • Then, in the "Services" tab, please unselect "UCGuard".
  • Click on "Clean", the computer will reboot.

Finally, please share the file C:\AdwCleaner\AdwCleaner[Cxx].txt (where xx is the highest number you have).

Best regards,

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

on AdwCleaner by ****

Every day, Windows Defender is detecting at least one Trojan on my PC.

MBAM is reporting that a copy of Windows' shortcut to the Messenger app in my Startup folder is a Trojan.Agent threat.  While it is possible that the recent attack has infected this shortcut, MBAM doesn't report any threat when I rename the shortcut or scan a copy of the same shortcut in a different location.

Is this a bug...