Search

Thanks for the feedback !

ran a registry cleaner to clean up some dead software links etc.  this seemed to remove that registry entry that was throwing off adwcleaner.  reran adwcleaner and there are now no threats picked up.

Hi

I Clean my PC wit ADW and the next day the same Ad comme back

[-] [C:\Users\roma\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: speccy.en.softonic.com

[-] [C:\Users\roma\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: the-punisher.fr.softonic.com

[-] [C:\Users\roma\AppData\Local\Google\Chrome\User Data\Default\Web...

Succesfully removed malware from my browser "kilogalikxyz" with adwcleaner

10/2016

I've run adwcleaner multiple times and I keep getting a threat detected in HKLM/Software/Description.  After adwcleaner cleans and reboots and I rerun it, it keeps showing up the detection.  I have manually looked in the registry and cannot find that folder.  Hidden files/folder is set to show everything.  I have run rkill, tsskiller and mbam which do not find this.

how can I remove this since...

SimpleHelp still works / stays connected to remote session with javaw.exe removed from AdwCleaner whitelist!!!

Thank you again for your time!!!!!!!!!!!!!!

case closed!

I had to ran Roguekiller first in the safe mode . and I have to remove all found malware/adware and reboot the system after Roguekiller was asking me to do it . but when I have in the safe mode all malware and adware that I removed it is still in there and there was nothing in Quarantine ! and I had once again to run it this time in normal mode and Roguekiller have found those malware ithem and...

okay then let’s move to a great anti-malware here https://www.zemana.com/Download

download it and make sure to run it as an admin it will found a lot of "UC browser files" then after the scan is done go to remove all found malware and after that ran adwcleaner and see if still found any of "UC adware " and let me know how it goes with you !

the problem is that it actually found the ucguard.sys.. and then it asked me to restart the computer to remove it but it is still there

---

pedromatt, 2016-09-30 12:37:05 (UTC)

that bad news ! I just to ran Roguekiller and I will see what report ! did you ran a scan with your AV ?

which mode did you ran Roguekiller ? normal or safe mode ?

the problem is that it actually found the ucguard.sys.. and then it asked me to restart the computer to remove it but it is still there