Here is the logfile. Two were actually made, 15 minutes apart. This is the later one:
# AdwCleaner v6.010 - Logfile created 01/09/2016 at 19:26:40 # Updated on 12/08/2016 by ToolsLib # Database : 2016-09-01.2 [Server] # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (X86) # Username : # Running from : C:\Users\Downloads\adwcleaner_6.010.exe # Mode: Clean # Support : https://...
Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:
MBAM later found StartGo123, which had been hijacking Chrome.
I imagine the malware writers reading our conversation and learning too, but HTH.
It's not really clear, but IOBit is usually considered as PUP, so you can remove them, especially if you do not have installed the software yourself.
Have now run CCleaner to clean Registry and remove many, but not all, references to BrowserAir.
Windows: Settings: System: Default apps: Choose default applications by file type: .htm no longer shows BrowserAir.
Ah, minor problems remain.
Opera now works again as my default browser. However, Opera could not see that it was the default browser until I used Windows: Control Panel: Default Programs to set it as the default.
Even then:
Ok thanks so much for the quick response
So they aren't malicious in any way?
Hello,
These keys are IOBit related.
Best regards,
***** [ Registry ] *****
Key Found: [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Key Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Key Found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Hello,
thanks. When you loose the file explorer, please do the following:
Can you unselect UCGuard and reclean ?
Thanks,
Hello,
Duplicate topic, I've answered here: https://toolslib.net/forum/viewthread/8057-adwcleaner-60-registry-threats/
Best regards,
