Rechercher

Used to be able to remove hao123 browser hijacking and it is once my favourite tools to use to remove it. But since yesterday i tried to use it to remove it but it seem like unable to detect the registry of hao123 thus it failed to remove it. I hope there will be update for it so that i can remove the annoying hao123 browser hijack.

This file includes only the updated strings. I hope that will make your work easier.

(Please don't use the text viewer on that hosting site as it doesn't display some characters properly, download the file instead and open it in any text editor)

C:\Program Files\KaseyaAgent\{GUID}\AgentMon.exe

C:\Program Files\KaseyaAgent\{GUID}\curl.exe

C:\Program Files\KaseyaAgent\{GUID}\DLLRunner32.exe

C:\Program Files\KaseyaAgent\{GUID}\DLLRunner64.exe

C:\Program Files\KaseyaAgent\{GUID}\KASetup.exe

C:\Program Files\KaseyaAgent\{GUID}\Kaseya.AgentEndpoint.exe

C:\Program Files\KaseyaAgent\{GUID}\KaseyaRemoteControlHost.exe

C:\Program Files\Ka...

I'm sorry if I was annoying, but you could have told me this before instead of ignoring me. So you need to add the strings one by one? Why does it work that way? Maybe I could send you them in some other format?

About the submitted files: what do you mean? I don't understand how the path can be more precise than it is now.

OK, great, it works again with 5.035. Many thanks. Nevertheless, pls have a look into the "suncult" Firefox Add-On.

Many thanks

File Found : C:\Users\xxxxx\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\xxxxxxxx.default\searchplugins\yandex.xml

https://www.virustotal.com/en/file/ab3b247fa04a01754d3f99f316ddace02605532d87ed68ae55f42f6ba9a8b60e/analysis/1455822342/

File Found : C:\Users\xxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xxxxxxxx.default\Extensions\{c72c0c73-4eb0-4fb3-af0f-074e97326cfd}.xpi

htt...

Nice fix !!! Thanks. A scan with 5.035 was about as fast as 5.033 with the entire scan taking about 2 and a half minutes with it zipping through the browsers quickly.

Hello,

Can you provide me with the processes name instead of the directories ?

Regards,

Hey Xplode,

I've been using this to nuke malware for a LONG time, and I'd like to thank you for the time and energy you put into this. Is there any chance you can whitelist Kaseya software in your process killer so that remote techs don't lose connection while running this? The directories it runs from are below:

"%programfiles(x86)%\Kaseya Remote Control"

"%programfiles%\Kaseya Remote Contr...

Hello,

First of all, sorry if we are not quick enough but it's due to 3 things :

1) I'm alone to develop and maintain AdwCleaner

2) I prioritize bug fixes over translations update

3) The way you told me to update the translation means that I will need to rewrite every translations according to this new model, and it will take a lot of time to contact every other translation and ask them to ...