Search

Not sure about file restore function, but if you are desperate to recover files I have found this tool to be effective (I am not affiliated with them.) www.stellarinfo.com/partition-recovery-software.php

Hi / Salut,

2 détections :

***** [ Fichiers ] *****

Fichier Trouvé : C:\WINDOWS\Sysnative\drivers\mcaudrv_x64.sys Fichier
Trouvé : C:\WINDOWS\Sysnative\drivers\mcvidrv.sys

Virustotal :

https://www.virustotal.com/fr/file/609f805a80e535b7b1bc01a6e63377a78d7c72ea8de8d44730a29e5d9f516c22/analysis/1441911053/

https://www.virustotal.com/fr/file/b4b06b17f687be591275d80d63e3f648cac9d34dd83c80af5...

I have downloaded the adwcleaner.exe from this website, but after I install the .exe and try to click scan,

I get the pop up saying the database files are corrupt and to uninstall and download again.  I have tried

this 3 times and I keep getting the same thing?  What can I do?

it's the same thing :

i have to scan with debug mod, and unfortunetely, the pc restart with blue screen :

Here is the LOG :

# AdwCleaner v5.007 - Rapport créé le 09/09/2015 à 21:29:53
# Mis à jour le 08/09/2015 par Xplode
# Base de données : 2015-09-08.2 [Serveur]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (x64)
# Nom d'utilisateur : Philippe - PHILIPPE-HP
# Exécuté de...

I just discovered that the Quarantine Manager did NOT return all the files that it said were returned. And all the files are gone from Quarantine Manager now. Not happy.

Bonjour Xplode,

Est-ce que tu as eu l'occasion de regarder les détails du mail que je t'ai envoyé ?

J'espère qu'il ne s'est pas perdu parmi les nombreux autres mails que tu reçois ou parmi les spams.

Bonjour,

Sous windows 8.1 x64

L'analyse de adwcleaner me trouve dans le registre un  "[x64] HKCU\Software\Conduit" mais il ne me le supprime pas au nettoyage

***** [ Registre ] *****

[-] Clé Supprimée : HKCU\Software\Conduit [!] Clé Non Supprimée : [x64] HKCU\Software\Conduit

Quand je refais tout de suite après une seconde analyse il ne trouve pas de "HKCU\Software\Conduit"

Quelqu'un pou...

Hi, in the support channel we often see the extension "Download Protect"

The install path, the file name is every time different.

For example:  http://pastebin.com/raw.php?i=nb1KRrh8

here one of the extension | Download: https://www.msi.to/file/86323

Please can you check it for Malware?

Thanks Andy

hi!

first thxs so much for yr great job!!

so you state that is not a false positive?

i totally trust in you and yr suggestion!

you are our guardian angels!!

thxs so much indeed again!!

cheers!!

Hello,

Torch browser is often bundled with other PUPs, that's why it is flagged by AdwCleaner. Moreover, their privacy policy is not that clean.

Regards,