Search

Hello,

@anhthe2812: Can you generate FRST logs for a final check ?

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated links.

Thanks,

There are two files. First the one of 8.52 AM

# AdwCleaner v6.010 - Logbestand aangemaakt 06/09/2016 op 08:52:48 # *Updated on 12/08/2016 by ToolsLib # Gebruik lokale database : 2016-08-24.2 [Lokaal] # Besturingssysteem : Windows 10 Home  (X64) # Gebruikersnaam : Test - W10-HAH-TEST-PC # Gestart vanuit : C:\Users\Test\Downloads\AdwCleaner.exe # *Mode: Scan # Ondersteuning : https://toolslib.ne...

# AdwCleaner v6.010 - Logfile created 06/09/2016 at 10:27:47
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-09-05.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : samsung - TEAMALPHA
# Running from : C:\Users\samsung\Downloads\adwcleaner_6.010.exe
# Mode: Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *...

I used adwcleaner to clean these viruses but they just keep on returning after boot-up.

Here are the names:

-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz

-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...

Hello,

Great ! So can you share me the file C:\AdwCleaner\AdwCleaner[Cxx].txt ?

We'll remove UCGuard then.

Thanks,

---

fr33tux, 2016-08-31 16:08:42 (UTC)

its here https://up2sha.re/file?f=diRbPZ8EDo67 sorry for late reply

It here: https://up2sha.re/file?f=AC13Sy5Qg47S

---

anhthe2812, 2016-08-31 16:13:42 (UTC)

^who is this guy ? sorry moderator but its not my file this guy just bumped in and...

Ahh yes, my mistake. Here are the two logfiles from a scan I just ran in Debug mode.

AdwCleaner_debug:

2016-09-03 18:38:49 :     <INFO>    [main] - Saving current options to the configuration file 2016-09-03 18:38:50 :     <INFO>    [main.gui] - Scan requested 2016-09-03 18:38:50 :     <INFO>    [scan] - Running from: C:\AdwCleaner 2016-09-03 18:38:50 :     <INFO>    [scan] - Progress: 0% 20...

Good morning! So I re-ran AdwCleaner in Safe Mode, pressed Clean when it found 30 threats, and was once again prevented from a boot menu upon pressing F8 at startup. Argh!  

There is not a file called C:\AdwCleaner\AdwCleaner_Debug.log.

AdwCleaner[C2] looks like this:

# AdwCleaner v6.010 - Logfile created 03/09/2016 at 09:13:48 # Updated on 12/08/2016 by ToolsLib # Database : 2016-09-03.1 [S...

Hello,

So, restoring your modifications prior to AdwCleaner processing has re-enabled the safe-mode access ?

Regarding the crash:

Can you launch AdwCleaner (redownload it if needed), click on Tools > Options, and tick "Debug" in "Mode" section. Then, do a scan, and please share the two logfiles:

• C:\AdwCleaner\AdwCleaner_Debug.log
• C:\AdwCleaner\AdwCleaner[Sxx].txt (where xx is the greatest ...

Hey there,

I'm damn lucky because I had backed up my registry 2 days ago (I forgot until coming across another forum thread.) I just imported it into my registry and although the import did not fully complete (as some elements were currently in use), I WAS able to access the boot menu with F8 and choose Safe Mode after. Whew!

Next thing: AdwCleaner crashed on me at the end as I said, and it h...

Hello,

You can keep the quarantined elements from now, we'll see to delete them when the problems will be solved.

You can make the test to restore the registry elements from AdwCleaner. I doubt it will restore your access to the safe-mode, but we'll see and we'll proceed according to your results.

Best regards,