Search

Hello,

Can you redo a scan, and share me the generated logfile?

Thanks,

Hello,

Sorry to read this.

- Can you share the scan logfile?

Then, can you relaunch AdwCleaner, click on Tools -> Options and tick "Debug" in "Mode" section.

Do a scan and a clean, the crash should still occur. Simply exit the freezed window. Then, host the file "C:\AdwCleaner\AdwCleaner_Debug.log" on https://up2sha.re/ and copy/paste here the generated link.

Best regards,

Bonjour à tous ,

idem pour moi.

Je viens de le decouvrir à l'instant :

[ Registry ] *****

[#] Key deleted on reboot: KLM\SOFTWARE\CLASSES\APPID\{93469602-4134-4012-A6BC-3E73B9855F90} [#] Key deleted on reboot: KLM\SOFTWARE\CLASSES\APPID\WinZipSmartMonitorService.exe

+

une fenetre "LifeCam" qui s'ouvrait sans arret

Cordialement

Hello

I am also getting this error

# AdwCleaner v6.030 - Logfile created 28/11/2016 at 05:51:43 # Updated on 19/10/2016 by Malwarebytes # Database : 2016-11-28.1 [Server] # Operating System : Windows 7 Ultimate  (X64) # Username : Gamefan - Gamefan-PC # Running from : C:\Users\Gamefan\Desktop\adwcleaner_6.030.exe # Mode: Scan # Support : https://www.malwarebytes.com/support



***** [ Servic...

Greetings,

About KLM\SOFTWARE\CLASSES\APPID\{93469602-4134-4012-A6BC-3E73B9855F90}, this entry is related to a potentialy unwanted software (AuslogicsBoostSpeed).

About WinZip, it seems to come with nasty things (repack/bundle). Of course, we stands against such practices. We'll do some more research on that, I'll keep you informed.

Regards,

---

cocochepeau, 2016-11-28 08:52:31 (UTC)

I dont ...

Greetings,

About KLM\SOFTWARE\CLASSES\APPID\{93469602-4134-4012-A6BC-3E73B9855F90}, this entry is related to a potentialy unwanted software (AuslogicsBoostSpeed).

About WinZip, it seems to come with nasty things (repack/bundle). Of course, we stands against such practices. We'll do some more research on that, I'll keep you informed.

Regards,

Hello, Pelle!

It's sad to say, but all versions of Locky ransomware, including .shit can't be decrypted. The only thing that you can do is to delete the virus from your PC and try to avoid the suchlike infection next time. Of course, you should keep the encrypted files somewhere, to be able to decrypt them when the decryption tool will be released. If you're interested in this - this article m...

I am also getting this. It keeps appearring even after a clean and reboot. Anyone know whats up?

***** [ Registry ] *****

[#] Key deleted on reboot: KLM\SOFTWARE\CLASSES\APPID\{93469602-4134-4012-A6BC-3E73B9855F90}

[#] Key deleted on reboot: KLM\SOFTWARE\CLASSES\APPID\WinZipSmartMonitorService.exe  

Delfix.txt: 

# DelFix v1.013 - Logfile created 26/11/2016 at 21:14:24 # Updated 17/04/2016 by Xplode # Username : M2-1900 - DESKTOP-KCS8S2N # Operating System : Windows 10 Pro  (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\FRST Deleted : C:\AdwCleaner Deleted : C:\Users\M2-1900\Downloads\Addition.txt Deleted : C:\Users\M2-1900\Downloads\adwcleaner_6.000 (1...

Thanks.

To remove the remaining service, can you do the following?

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Thanks,