Search

Please help me,

# AdwCleaner v6.000 - Logfile created 30/08/2016 at 19:08:51 # Updated on 12/08/2016 by ToolsLib # Database : 2016-08-23.1 [Local] # Operating System : Windows 8.1 Pro  (X64) # Username : PT.NB - ACER # Running from : D:\NBKC\Komputer\Software\adwcleaner_6.000.exe # Mode: Clean # Support : https://toolslib.net/forum

***** [ Services ] *****

[!] Service not deleted: 2cad402bf3...

Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:

• First run
• Second run

MBAM later found StartGo123, which had been hijacking Chrome.

I imagine the malware writers reading our conversation and learning too, but HTH.

It's not really clear, but IOBit is usually considered as PUP, so you can remove them, especially if you do not have installed the software yourself.

Ah, minor problems remain.

Opera now works again as my default browser.  However, Opera could not see that it was the default browser until I used Windows: Control Panel: Default Programs to set it as the default.

Even then:

• Neither Windows: Settings: System: Default apps: Web browser nor Windows: Settings: System: Default apps: Choose default applications by protocol: HTTP shows any of the ...

Hello,

In complement, can you do the following ?

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If i...

I got infected with loads of adware after trying to install SUPER file converter.

I have run Windows Defender to remove trojans and a malware installer.

Whichever Prinicpal I give Full Control, there is always some other Principal's permission lacking to delete Program Files (x86)\MPC Cleaner.

Running AdwCleaner isn't managing to do so either.  Log file: https://up2sha.re/file?f=4pnRQn2e5du8...

***** [ Registry ] *****

Key Found:  [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}

Key Found:  [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}

Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}

Hello,

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If it asks you to reboot the computer, do it.
...

Sorry i cant do anything , everything crashes , cant even open file explorer all apps not responding because of this

Yes, sure. It seems to me like it tries to rid of the items found, but they are untrusted and should be there. In addition, when I just let it do its automatic thing, upon reboot, in Firefox the No-Script was completely reset and I have to allow again for each new site I visit. Thanks! https://www.dropbox.com/s/xy8rqxsqelrxb2z/AdwCleaner%5BS1%5D.txt?dl=0