Jump to content

both Adware cleaner and RKIll find PUP.Winlogon.Heuristic but it respawns


arkhaan
 Share

Recommended Posts

both Adware Cleaner and Rkill(used as file name iexplorer.exe/iexplore64) continually find PUP.Winlogon.Heuristic          HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon|Shell.  RKill detects it as * Empty HKLM\...\Winlogon: [Shell]! Value reset to explorer.exe
when removed it respawns. oh and both program tools also detects these values in WIndows 10 Pro 64's "safe mode". I also ran MBAM and Norton Power Eraser, though I only use Windows default Antivirus/firewall Microsoft Defender. when I use Power Eraser I notice the it dectects nothing and stops responding and when I scan with Adware Cleaner and Rkill, the PUP goes into its "hide E Hole" also Norton and Zemana detect notihng at all. nor does MBAM.  I reboot and then a bit later, I scan and again, the stupid thing respawns after rebooting into normal mode and running Adware Cleaner and Rkill respectively. I go into safe mode and again it detects the PUP I run Power Eraser and abra-kadabra it is gone, until I reboot into normal mode again and scan with Adware cleaner and Rkill! here are the Farbar Logs. if you reply and wish for the ADW and RKill logs I will gladly send them as well.

FRST.txt

Addition.txt

Link to post
Share on other sites

  • Root Admin

Hello @arkhaan

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron

 

Link to post
Share on other sites

  • 1 month later...
  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.