Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - Curson

Pages: 1 2 [3] 4 5 ... 171
Hi fairycn,

Welcome to Forum.
Do you mean that you can't access Google Captcha (reCaptcha) ? Are you located in China by any chance ?


UCheck / Re: errorlevel
« on: April 28, 2021, 05:31:53 pm »

Could you please try to add the "-debuglog "C:/debug.log" parameters to UChechCMD ?
UCheckCMD - Command Line Reference


RogueKiller / Re: Should I remove this?
« on: April 14, 2021, 09:38:54 am »
Hi Rez,

Welcome to Forum.

PUM stands for Potentially Unwanted Modification. In your case, this entry are perfectly legit.
To be more specific, the ConsentPromptBehaviorAdmin ones show up because you disabled the UAC.


Note : This thread has been moved to the "RogueKiller" section for clarity.

RogueKiller / Re: Translations!
« on: April 13, 2021, 03:13:02 am »
Hi eagleman,

Welcome to Forum and thanks a lot for helping us with translations.
To my knowledge, no one is currently working on an Italian translation at the moment.



Pour rappel :
Quote from: Curson
Au vu de ceci et de la totale désorganisation de vos propos, je ne peux qu'en déduire que vous êtes incapable de suivre des instructions / recevoir de l'aide via un forum.
Aussi, je vous demande instamment de plus ouvrir de nouveaux sujets / de poster des propos qui ne concernent pas directement les produits Adlice.

Meilleures salutations.

Malware removal help / Re: Error [5]
« on: April 05, 2021, 02:35:00 pm »
Hi Kurstah,

I'm glad it seems to be gone.
You are very welcome.


Malware removal help / Re: Error [5]
« on: April 05, 2021, 01:06:36 am »
Hi Kurstah,

1) Please uninstall the following software :
NodeJS (the oldest one)

2) Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system !

Run FRST and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please attach it to your reply.

3) Please download Kaspersky Virus Removal Tool and save it on your desktop..
Right click on KVRT.exe and select Run as Administrator.
Read the EULA, then select Accept.
Wait for Kaspersky Virus Removal Tool to initialize.
In the main screen, select Change parameters, place a checkmark in System drive, then click OK.
Click Start scan.
Wait for Kaspersky Virus Removal Tool to complete scanning.
When the scan is finished, select Neutralize all for all detected objects.
Close Kaspersky Virus Removal Tool when done.

Please then informe me if something is detected.
How is your computer running ?


Hi Phil,

Thank you.
That's mean a lot.


Malware removal help / Re: Error [5]
« on: April 04, 2021, 04:13:50 pm »
Hi arikpik,

This is probably nothing, but to be on the safe side, we will be doing a full system investigation.

Please download Farbar Recovery Scan Tool (x64) and save it to your Desktop.
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please attach log back here using the "Attachments and other options > Attach" feature.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe). Please also attach that along with the FRST.txt into your reply.

Hi Phil,

Thanks for your feedback.

We identified the issue. UCheck was checking for the presence of a ".0" at the end of the version's number.
This will be fixed in UCheck next release.

Have a nice week-end.


Malware removal help / Re: Error [5]
« on: April 03, 2021, 10:23:04 pm »
Hi Kurstah,

Download TCPView x64, save it on your desktop and run it with administrator rights.
Locate the column "Local Port" and copy/paste the line that has the value 86 (you can sort the column) in your next reply.


Malware removal help / Re: Error [5]
« on: April 01, 2021, 11:02:39 pm »
Hi Kurstah,

Welcome to Forum.
Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :
Code: [Select]
REG EXPORT HKEY_LOCAL_MACHINE\System\ControlSet001\Services\NlaSvc\Parameters\Internet\ManualProxies "%USERPROFILE%\Desktop\export.txt"
A new file named export.txt should has been created on your desktop. Please attach it with your next reply.


Hi Mark,

Welcome to forum.

We were not able to get any Purple Fox malware payloads, so I can't answer you with certainty.
However, I can provide you some insights at what point, RogueKiller will trigger an alert. I will refer to the Guardicore tehnical as a reference.

The MSI/MOE installer being launched from a SMB drive will normally be detected as [Suspicious.Path].
The encrypted file containing the rootkit will be detected by MalPE, our heuristic engine.

Unfortunately, Guardicore does not provide any indication about the DLL payloads (winupdate64/winupdate32), so I don't have any clue about them.


UCheck / Re: TeamViewer Updates Not Being Reported
« on: March 28, 2021, 11:14:47 pm »
Hi Phil,

I was wondering if there were two TeamViewer entries on your system, which may confuse UCheck.
According to the report you provided, that's not the case.

I honestly don't know why it was not detected this time.

Have nice week.

UCheck / Re: TeamViewer Updates Not Being Reported
« on: March 26, 2021, 10:09:42 pm »
Hi Phil,

Could you please update UCheck to the latest version, do a scan, than attach the report with your next reply ?


Pages: 1 2 [3] 4 5 ... 171