Rechercher

 Hello Mrmodo ,

Booting problem is common issue which we usually face. There is several issue of booting problem. Some of them is a single corrupt byte on your hard drive, buggy boot driver or missing registry key. Because the master boot record can become corrupt, damage and disappear. There is some manual recovery option like safe mode, start up repair. It these option works it is good for u...

Bonjour, En lançant Rkill, il me détecte un truc bizarre à chaque fois savez-vous de quoi il peut s'agir ?

Performing miscellaneous checks:

 * Modified HKCU\...\Winlogon: [Shell] => explorer.exe, C:\Users\AppData\Roaming\fibril.exe

 * No issues found.

Quand je vais dans le chemin indiqué, il n'y a rien même dans les fichiers cachés...

SysNative, means System32.

I found it here:

C>Windows>System32>drivers

Name                     Size

mrxsmb.22.sys       57 KB

And

C\AdwCleaner\Quarantine\

I then tracked it thru Manic Time to the exact time in seconds and found what happened at that time as confirmed adw, installer wnd.

What this was is a fake Cedrick Collomb Portable. Unlocker is only an Install.

Would not delete man...

Hi fr33tux, thanks for your reply and analysis. Here both logs A_Laptop and B_Desktop

(I hope that you may want to delete Symantec from boot process, see please my first post, part #2; on Google Drive I shared a memory.dump file too, hope this helps).

Malwarebytes
www.malwarebytes.com

-Dettagli log-
Data scansione: 26/05/17
Ora scansione: 13:43
File di log: MBAM_for__A_Laptop.txt
Amministra...

# AdwCleaner v6.044 - Creato file registro eventi 13/03/2017 in 22:00:54
# Aggiornato su 28/02/2017 da Malwarebytes
# Database : 2017-03-13.1 [Server]
# Sistema operativo : Windows 7 Home Premium Service Pack 1 (X86)
# Utente : Gakutenou - FROSTIE
# In esecuzione da : C:\Documents\Downloads\adwcleaner_6.044.exe
# Modo: analisi
# Supporto : https://www.malwarebytes.com/support



***** [ Ser...

bonjour oui il sont connu aucun risque sauf pour la menace vient de Peace Barre avec ce bout de code qui dis qu'il y a un virus

j'ai tenter de supprimer le virus puis de relancer la barre et la couper sa detecte direct une menace

sa provient donc que de ce fichier la menace c'est pour cella que je voulais savoir si c'etait une vrai menace ou pas

***** [ Dossiers ] *****

Dossier trouvé...

Samwellajackson, Until instructed otherwise. I can try and help you out until Fr33tux or cocochepeau respond. 

Have you tried booting into safemode and Deleting the C:\WINDOWS\SysNative\drivers\ucguard.sys file manually? If not I'd create a system restore point and try that.

Bonsoir c'est ceux que je fais mais il revient a chaque fois mais je sais d'ou provient la menace mais je ne pense pas que sa soit a cause de cella

j'ai une barre de surf a chaque fois que je la demarre j'ai la menace et dans le dossier de la barre j'ai juste ce fichier nommer user.config

voici ceux quil  y a dedans

<?xml version="1.0" encoding="utf-8"?> <configuration>     <configSect...

Hello,

v6 nice, light and fast. Kudos.

However, scan (attached below) detected 2 PUP in DYMOLabelFrameworkIEPlugin.dll, shown by VirusTotal as "clean".

Question: FP or deleteable ?

Thanks and best regards,

Bellacoscia

=================================================

# AdwCleaner v6.000 - Logfile created 13/08/2016 at 13:08:33
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-08-12....

Hello,

Can you tick the option "Activate the debug mode" before clicking on "Clean" ? Then, a logfile will appears in C:\AdwCleaner, even if the software freezes.

Also, can you provide me the scan logfile ?

1. First question-does adware scan everything on the top line-services, files, folders or do I have to select?

---

nellatap, 2016-07-10 06:58:48 (UTC)

Yes, AdwCleaner scans services, file...