Search

# AdwCleaner v6.020 - Logfile created 01/10/2016 at 07:53:28 # Updated on 14/09/2016 by ToolsLib # Database : 2016-09-30.1 [Server] # Operating System : Windows 7 Professional Service Pack 1 (X64) # Username : paulm - DESIGN2015 # Running from : C:\Users\Paulm.TOOLS\Downloads\adwcleaner_6.020.exe # Mode: Scan # Support : https://toolslib.net/forum



***** [ Services ] *****

No malicious serv...

Hello,

Can you share the whole logfile ?

Thanks,

Thanks.

• Download RogueKiller here
• Execute the file "setup.exe" as Administrator (right-click on the file -> Execute as Administrator"
• The pre-scan will occur, please wait until it ends.
• Then click on [Scan] on the right hand corner. Wait until the scan finish.
• Finally, host the generated logfile on Up2Sha.re and copy/paste here the provided link.

I've run adwcleaner multiple times and I keep getting a threat detected in HKLM/Software/Description.  After adwcleaner cleans and reboots and I rerun it, it keeps showing up the detection.  I have manually looked in the registry and cannot find that folder.  Hidden files/folder is set to show everything.  I have run rkill, tsskiller and mbam which do not find this.

how can I remove this since...

the tab that always shown is :

hxxp://iraqiads1.blogspot.com/

the log text file :

https://up2sha.re/file?f=5OhAuDaOio3l

sorry for late in replying 

Thank you for both your help.

Here is FRST.txt:

https://up2sha.re/file?f=9bmBOjvBMkSo

Here is Addition.txt:

https://up2sha.re/file?f=FgNuwG6LAtc0

# AdwCleaner v6.020 - Logfile created 30/09/2016 at 15:03:49
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-09-28.1 [Server]
# Operating System : Windows 7 Ultimate Service Pack 1 (X86)
# Running from : C:\Users\xxxxx\Desktop\Programs and Stuff\AdwCleaner\adwcleaner_6.020.exe
# Mode: Scan
# Support : https://toolslib.net/forum


***** [ Services ] *****

No malicious services found.

**...

Can you share the whole AdwCleaner logfile ?

Thanks,

Hello,

Please manually reset your Chrome profile like in this picture:

Then, click on "Reset", and everything should be ok.

Hello,

Sorry for the delay.

I do not reproduce this detections, is it possible to share the file "C:\Users\xxxxx\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\xxxxxxxx.default\prefs.js" ? You can zip it and sent it by email if you prefer.

Thanks,