Jump to content

ADW Cleaner Airplane Mode not Turning off!


muthucool

Recommended Posts

Hey Everyone,
My Windows PC has been affected multiple times with a adware program called "Ads by Counterflix", I have fought and won against it every single time. But, this time I ran ADWCleaner because it was recommended by many experts, it successfully removed the Adware, but on a reboot, I discovered my network adapter was not recognized and the audio service stopped running, Microsoft Security Client also refuses to start. I have already tried to reinstall the drivers, no luck. This led me to discover that the problem was that Airplane Mode was turned on, when I proceeded to turn it off, it wouldn't turn off, it keeps reverting back to on instantly! Please Help!

Link to post
Share on other sites

Thanks for your prompt reply!

 

# AdwCleaner v6.030 - Logfile created 27/10/2016 at 19:50:35
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-10-27.1 [Local]
# Operating System : Windows 10 Home  (X64)
# Username : Muthu - MUTHUS-PC
# Running from : C:\Users\Muthu\Downloads\adwcleaner_6.030.exe
# Mode: Clean
# Support : hxxps://www.malwarebytes.com/support
 
 
 
***** [ Services ] *****
 
[-] Service deleted: bsdriver
 
 
***** [ Folders ] *****
 
[-] Folder deleted: C:\ProgramData\1a59891e-0f81-0
[-] Folder deleted: C:\ProgramData\1a59891e-2e95-1
[-] Folder deleted: C:\ProgramData\1a59891e-44a7-0
[-] Folder deleted: C:\ProgramData\1a59891e-6163-0
[-] Folder deleted: C:\ProgramData\1a59891e-6e87-0
[-] Folder deleted: C:\ProgramData\1a59891e-6fe1-1
[-] Folder deleted: C:\ProgramData\{1f3f060d-412c-1}
[-] Folder deleted: C:\ProgramData\{2d2f1da9-012c-0}
[-] Folder deleted: C:\ProgramData\{45bb33a1-512c-1}
[-] Folder deleted: C:\ProgramData\{4a235ed8-312c-0}
[-] Folder deleted: C:\Users\mmees\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi
 
 
***** [ Files ] *****
 
[#] File deleted: C:\WINDOWS\SysNative\drivers\bsdriver.sys
[#] File deleted: C:\WINDOWS\SysNative\drivers\cherimoya.sys
[-] File deleted: C:\Users\Muthu\AppData\Local\uninstallssl.exe
[-] File deleted: C:\Users\Muthu\AppData\Roaming\Mozilla\Firefox\Profiles\ajajkr2k.default\searchplugins\Search Provided by Bing.xml
[-] File deleted: C:\Users\mmees\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage
[-] File deleted: C:\Users\mmees\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal
[#] File deleted: C:\Users\mmees\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage
[#] File deleted: C:\Users\mmees\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal
 
 
***** [ DLL ] *****
 
 
 
***** [ WMI ] *****
 
 
 
***** [ Shortcuts ] *****
 
 
 
***** [ Scheduled Tasks ] *****
 
 
 
***** [ Registry ] *****
 
[!] Key not deleted: [x64] HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[!] Key not deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[!] Key not deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cmptch.com
[!] Key not deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\static.cmptch.com
[!] Key not deleted: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cmptch.com
[!] Key not deleted: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\static.cmptch.com
[!] Key not deleted: HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E
[-] Key deleted: HKU\S-1-5-21-3400997102-1619497214-2563167854-1001\Software\PRODUCTSETUP
[-] Key deleted: HKU\S-1-5-21-3400997102-1619497214-2563167854-1001\Software\csastats
[-] Key deleted: HKU\S-1-5-21-3400997102-1619497214-2563167854-1001\Software\winmnt
[#] Key deleted on reboot: HKCU\Software\PRODUCTSETUP
[#] Key deleted on reboot: HKCU\Software\csastats
[#] Key deleted on reboot: HKCU\Software\winmnt
[#] Key deleted on reboot: [x64] HKCU\Software\PRODUCTSETUP
[#] Key deleted on reboot: [x64] HKCU\Software\csastats
[#] Key deleted on reboot: [x64] HKCU\Software\winmnt
[-] Key deleted: HKCU\Software\Google\Chrome\Extensions\bahkljhhdeciiaodlkppoonappfnheoi
[#] Key deleted on reboot: [x64] HKCU\Software\Google\Chrome\Extensions\bahkljhhdeciiaodlkppoonappfnheoi
[-] Key deleted: [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\bahkljhhdeciiaodlkppoonappfnheoi
 
 
***** [ Web browsers ] *****
 
[-] [C:\Users\Muthu\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: aol.com
[-] [C:\Users\Muthu\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com
 
 
*************************
 
:: "Tracing" keys deleted
:: Winsock settings cleared
 
*************************
 
C:\AdwCleaner\AdwCleaner[C1].txt - [19583 Bytes] - [26/06/2016 18:28:56]
C:\AdwCleaner\AdwCleaner[C2].txt - [6535 Bytes] - [27/10/2016 18:01:30]
C:\AdwCleaner\AdwCleaner[C3].txt - [4216 Bytes] - [27/10/2016 19:50:35]
C:\AdwCleaner\AdwCleaner[S1].txt - [20657 Bytes] - [26/06/2016 18:24:33]
C:\AdwCleaner\AdwCleaner[S2].txt - [6576 Bytes] - [27/10/2016 17:59:58]
C:\AdwCleaner\AdwCleaner[S3].txt - [4306 Bytes] - [27/10/2016 19:49:12]
 
########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [4509 Bytes] ##########

Link to post
Share on other sites

  • Staff

Thank you,

We'll try to recover network this way:

  • Launch your Start Menu;
  • Click on Settings (cog-wheel);
  • Take yourself to the Network & Internet category;
  • Click on WiFi and then follow "Change adapter options" link;
  • Find your Wi-Fi network adapter and then right-click on it and choose "Disable";
  • Finally, do the exact same thing but with "Enable".

Please, let me know if Airplane mode is still stuck. If it's still the case, we'll work on Device Manager..

Regards,

Edited by cocochepeau
Link to post
Share on other sites

Hi,

I tried that but, the field where I would usually see my WiFi and Ethernet connections is empty, I have checked device manager and it says my Network Adapter is "Working Properly". I was browsing Control Panel and it says that "Network List Service" is not running, when I proceeded to start the service it said "Dependencies failed to start".

Link to post
Share on other sites

  • Staff

Hello,

It seems like "Network List Service" needs other services (dependencies) in order to run correctly.

Can you please verify if these services are running:

  • Network Location Awareness
  • Remote Procedure Call (RPC)
  • Network List Service

To do so:

  • Click Start, type Services.msc in Start Search bar, and then press Enter.

If one of them is not running (see the state column), please do as follow:

  • Right-click on it and go to Properties, select Automatic, click Apply, click Start, and then click OK.

Tell me if it's better now.

 

Regards,

Edited by cocochepeau
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.