Search

Hello,

Can you share me the logfile for the working cleaning you've made ?

Then we'll take care of UCGUard.

Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:

• First run
• Second run

MBAM later found StartGo123, which had been hijacking Chrome.

I imagine the malware writers reading our conversation and learning too, but HTH.

Hello,

Oh. It would have been interesting to get all the references to BrowserAir, so that I would have added them to AdwCleaner.

But thanks for the feedback :)

Have now run CCleaner to clean Registry and remove many, but not all, references to BrowserAir.

Windows: Settings: System: Default apps: Choose default applications by file type: .htm no longer shows BrowserAir.

Ah, minor problems remain.

Opera now works again as my default browser.  However, Opera could not see that it was the default browser until I used Windows: Control Panel: Default Programs to set it as the default.

Even then:

• Neither Windows: Settings: System: Default apps: Web browser nor Windows: Settings: System: Default apps: Choose default applications by protocol: HTTP shows any of the ...

Ok thanks so much for the quick response

So they aren't malicious in any way?

Hello,

In complement, can you do the following ?

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If i...

I got infected with loads of adware after trying to install SUPER file converter.

I have run Windows Defender to remove trojans and a malware installer.

Whichever Prinicpal I give Full Control, there is always some other Principal's permission lacking to delete Program Files (x86)\MPC Cleaner.

Running AdwCleaner isn't managing to do so either.  Log file: https://up2sha.re/file?f=4pnRQn2e5du8...

Bonjour,

Désolé de remonter un vieux topic, mais l'infection est toujours d'actualité (ce qui montre que les dires des développeurs de ce logiciels sont bidons).

---

christophedlr, 2016-08-29 09:31:44 (UTC)

Pouvez-vous détailler ?

J'ai moi aussi le problème depuis le début de la matinée (6h du matin quand même), j'ai tenté ce qui est dit sur les 3 premières pages de ce topic sans succès. ...

***** [ Registry ] *****

Key Found:  [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}

Key Found:  [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}

Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}