Search

Hello,

Thanks!

So, we'll remove the tools we've used:

• Download DelFix from Xplode on your desktop;
• Launch it with administrator rights;
• Select all the option except the one proposing to save the registry;
• Then click on the "Execute" button;
• When everything is finish, the software will close itself;
• Then a report appear on the notepad, please copy paste it's content in your answer.

Final...

Hello,

Fixlog:

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-11-2016 Ran by M2-1900 (26-11-2016 08:42:31) Run:1 Running from C:\Users\M2-1900\Downloads Loaded Profiles: M2-1900 (Available Profiles: M2-1900) Boot Mode: Normal ==============================================

fixlist content: ***************** CloseProcesses: R1 UCGuard; C:\WINDOWS\System32\DRIVERS\ucguard.sys [81792 ...

Thanks.

To remove the remaining service, can you do the following?

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Thanks,

Sorry, MBAM Scanlog (after restart): 

Malwarebytes Anti-Malware www.malwarebytes.org

Scan Date: 25-Nov-16 Scan Time: 09:14 Logfile:  Administrator: Yes

Version: 2.2.1.1043 Malware Database: v2016.11.25.02 Rootkit Database: v2016.11.20.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled

OS: Windows 10 CPU: x64 File System: NTFS User: ...

Hello,

Can you share AdwCleaner logfile? (Usually from C;\AdwCleaner\AdwCleaner[Sxx].txt)

Then, use MBAM:

• Please download MBAM: https://www.malwarebytes.com/mwb-download/thankyou/
• On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits".
• Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware
• Click o...

Hello,

Please wait for at least a day before asking for help again if you don't have any answer.

• Please download MBAM: https://www.malwarebytes.com/mwb-download/thankyou/
• On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits".
• Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware
• Click on the Scan...

Hello,

Indeed, it's a known bug that we are working on.

To remove the remaining service, can you do the fllowing?

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Best ...

Greetings,

Here is what we're going to try:

1. Download CCleaner from here, and install it.
2. Start CCleaner (there should be a shortcut on your Desktop)
3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
4. Then in Options  tab > Surveillance, untick the both boxes.
5. In the Clean tab, click on "Clean".
6. When the cleaning is done, go in the "Registry" tab...

Bonjour,

Tout d'abord, merci pour le retour. Un sujet similaire a été ouvert sur le forum de Malwarebytes, ici : https://forums.malwarebytes.org/topic/190441-fp-wecutilexe/

Je viens de corriger le problème, le fichier ne devrait plus être détecté à tort. Vous pouvez utiliser la quarantaine afin de restaurer celui-ci (menu Outils > Quarantaine).

Aussi, vous pouvez continuer à remonter les pro...

It's not an Administrator problem, it's something else..

I'll let you know if I find something new on that.

Thanks!