Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Adware keeps reappearing. Cannot remove!
Message
<blockquote data-quote="FenixVictoria" data-source="post: 699668" data-attributes="member: 68418"><p>Fix log and this is the adware log after I rebooted.</p><p></p><p># AdwCleaner 7.0.6.0 - Logfile created on Sun Dec 24 14:40:33 2017</p><p># Updated on 2017/21/12 by Malwarebytes </p><p># Running on Windows 10 Home (X64)</p><p># Mode: clean</p><p># Support: <a href="https://www.malwarebytes.com/support" target="_blank">Customer Support & Help Center</a></p><p></p><p>***** [ Services ] *****</p><p></p><p>Deleted: mrupdsrv</p><p>Deleted: Updater.Mail.Ru</p><p></p><p></p><p>***** [ Folders ] *****</p><p></p><p>Deleted: C:\Users\Gerrage\AppData\Local\Поиcк в Интeрнете</p><p>Deleted: C:\ProgramData\Mail.Ru</p><p>Deleted: C:\ProgramData\Application Data\Mail.Ru</p><p>Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Mail.Ru</p><p>Deleted: C:\Program Files (x86)\Mail.Ru</p><p>Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Mail.Ru</p><p>Deleted: C:\Users\All Users\Mail.Ru</p><p>Deleted: C:\Users\Gerrage\AppData\Local\Mail.Ru</p><p>Deleted: C:\Program Files (x86)\FpGcSjfNZDUn</p><p>Deleted: C:\Program Files (x86)\vknAtWNPMhpU2</p><p>Deleted: C:\Program Files (x86)\gVEKLTxUjIE</p><p>Deleted: C:\Program Files (x86)\OGqwJxyzdjgEZIvrFER</p><p></p><p></p><p>***** [ Files ] *****</p><p></p><p>Deleted: C:\Users\Gerrage\Favorites\Mail.Ru.url</p><p>Deleted: C:\Users\Gerrage\Favorites\Mail.Ru Агент - используй для общения!.url</p><p>Deleted: C:\Users\Gerrage\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk</p><p></p><p></p><p>***** [ DLL ] *****</p><p></p><p>No malicious DLLs cleaned.</p><p></p><p>***** [ WMI ] *****</p><p></p><p>No malicious WMI cleaned.</p><p></p><p>***** [ Shortcuts ] *****</p><p></p><p>No malicious shortcuts cleaned.</p><p></p><p>***** [ Tasks ] *****</p><p></p><p>Deleted: boQbXxbEJPaDgWztw</p><p>Deleted: jVVcebPoCjhHKmi</p><p>Deleted: jVVcebPoCjhHKmi2</p><p>Deleted: BmHhCekqquvtRi</p><p>Deleted: boQbXxbEJPaDgWztw2</p><p></p><p></p><p>***** [ Registry ] *****</p><p></p><p>Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Microsoft\Gosearch</p><p>Deleted: [Key] - HKCU\Software\Microsoft\Gosearch</p><p>Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater</p><p>Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater</p><p>Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}</p><p>Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E8F97CD-60B5-456F-A201-73065652D099}</p><p>Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AE298D-7E8A-4F53-BE55-15D2B065F6C0}</p><p>Deleted: [Value] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Microsoft\Windows\CurrentVersion\Run|MailRuUpdater</p><p>Deleted: [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run|MailRuUpdater</p><p>Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\E3605470-291B-44EB-8648-745EE356599A</p><p>Deleted: [Key] - HKLM\SOFTWARE\Mail.Ru</p><p>Deleted: [Key] - HKU\.DEFAULT\Software\Mail.Ru</p><p>Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Mail.Ru</p><p>Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\AppDataLow\Software\Mail.Ru</p><p>Deleted: [Key] - HKU\S-1-5-18\Software\Mail.Ru</p><p>Deleted: [Key] - HKCU\Software\Mail.Ru</p><p>Deleted: [Key] - HKCU\Software\AppDataLow\Software\Mail.Ru</p><p>Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0D38E5A-7CF8-4105-8FE8-31B81443A114}</p><p></p><p></p><p>***** [ Firefox (and derivatives) ] *****</p><p></p><p>Plugin deleted: Домашняя страница Mail.Ru - </p><p>Plugin deleted: Поиск Mail.Ru - </p><p>Plugin deleted: __MSG_extName__ - </p><p></p><p></p><p>***** [ Chromium (and derivatives) ] *****</p><p></p><p>No malicious Chromium entries deleted.</p><p></p><p>*************************</p><p></p><p>::Tracing keys deleted</p><p>::Winsock settings cleared</p><p>::Additional Actions: 0</p><p></p><p></p><p></p><p>*************************</p><p></p><p>C:/AdwCleaner/AdwCleaner[C0].txt - [12941 B] - [2017/5/6 11:50:56]</p><p>C:/AdwCleaner/AdwCleaner[C1].txt - [4623 B] - [2017/9/18 10:5:6]</p><p>C:/AdwCleaner/AdwCleaner[C2].txt - [1588 B] - [2017/11/22 19:54:56]</p><p>C:/AdwCleaner/AdwCleaner[S0].txt - [11969 B] - [2017/5/6 11:49:28]</p><p>C:/AdwCleaner/AdwCleaner[S1].txt - [4970 B] - [2017/9/18 10:4:4]</p><p>C:/AdwCleaner/AdwCleaner[S2].txt - [1471 B] - [2017/11/22 19:54:36]</p><p>C:/AdwCleaner/AdwCleaner[S3].txt - [4461 B] - [2017/12/24 14:39:44]</p><p></p><p></p><p>########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt ##########</p></blockquote><p></p>
[QUOTE="FenixVictoria, post: 699668, member: 68418"] Fix log and this is the adware log after I rebooted. # AdwCleaner 7.0.6.0 - Logfile created on Sun Dec 24 14:40:33 2017 # Updated on 2017/21/12 by Malwarebytes # Running on Windows 10 Home (X64) # Mode: clean # Support: [URL="https://www.malwarebytes.com/support"]Customer Support & Help Center[/URL] ***** [ Services ] ***** Deleted: mrupdsrv Deleted: Updater.Mail.Ru ***** [ Folders ] ***** Deleted: C:\Users\Gerrage\AppData\Local\Поиcк в Интeрнете Deleted: C:\ProgramData\Mail.Ru Deleted: C:\ProgramData\Application Data\Mail.Ru Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Mail.Ru Deleted: C:\Program Files (x86)\Mail.Ru Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Mail.Ru Deleted: C:\Users\All Users\Mail.Ru Deleted: C:\Users\Gerrage\AppData\Local\Mail.Ru Deleted: C:\Program Files (x86)\FpGcSjfNZDUn Deleted: C:\Program Files (x86)\vknAtWNPMhpU2 Deleted: C:\Program Files (x86)\gVEKLTxUjIE Deleted: C:\Program Files (x86)\OGqwJxyzdjgEZIvrFER ***** [ Files ] ***** Deleted: C:\Users\Gerrage\Favorites\Mail.Ru.url Deleted: C:\Users\Gerrage\Favorites\Mail.Ru Агент - используй для общения!.url Deleted: C:\Users\Gerrage\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** Deleted: boQbXxbEJPaDgWztw Deleted: jVVcebPoCjhHKmi Deleted: jVVcebPoCjhHKmi2 Deleted: BmHhCekqquvtRi Deleted: boQbXxbEJPaDgWztw2 ***** [ Registry ] ***** Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Microsoft\Gosearch Deleted: [Key] - HKCU\Software\Microsoft\Gosearch Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E8F97CD-60B5-456F-A201-73065652D099} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AE298D-7E8A-4F53-BE55-15D2B065F6C0} Deleted: [Value] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Microsoft\Windows\CurrentVersion\Run|MailRuUpdater Deleted: [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run|MailRuUpdater Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\E3605470-291B-44EB-8648-745EE356599A Deleted: [Key] - HKLM\SOFTWARE\Mail.Ru Deleted: [Key] - HKU\.DEFAULT\Software\Mail.Ru Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\Mail.Ru Deleted: [Key] - HKU\S-1-5-21-2552103195-1593805477-2402279128-1001\Software\AppDataLow\Software\Mail.Ru Deleted: [Key] - HKU\S-1-5-18\Software\Mail.Ru Deleted: [Key] - HKCU\Software\Mail.Ru Deleted: [Key] - HKCU\Software\AppDataLow\Software\Mail.Ru Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} ***** [ Firefox (and derivatives) ] ***** Plugin deleted: Домашняя страница Mail.Ru - Plugin deleted: Поиск Mail.Ru - Plugin deleted: __MSG_extName__ - ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[C0].txt - [12941 B] - [2017/5/6 11:50:56] C:/AdwCleaner/AdwCleaner[C1].txt - [4623 B] - [2017/9/18 10:5:6] C:/AdwCleaner/AdwCleaner[C2].txt - [1588 B] - [2017/11/22 19:54:56] C:/AdwCleaner/AdwCleaner[S0].txt - [11969 B] - [2017/5/6 11:49:28] C:/AdwCleaner/AdwCleaner[S1].txt - [4970 B] - [2017/9/18 10:4:4] C:/AdwCleaner/AdwCleaner[S2].txt - [1471 B] - [2017/11/22 19:54:36] C:/AdwCleaner/AdwCleaner[S3].txt - [4461 B] - [2017/12/24 14:39:44] ########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt ########## [/QUOTE]
Insert quotes…
Verification
Post reply
Top