Search

Bonjour,

Effectivement, excusez-moi pour mon message en anglais ci-dessus..

Pouvez-vous retenter en suivant bien les instructions ? J'ai changé le lien également:

Téléchargez   fixlist.txt

NOTE. Il est important de placer les fichiers FRST/FRST64 et fixlist.txt dans le même répertoire, sinon cela ne fonctionnera pas. (si FRST.exe est sur votre bureau, fixlist.txt doit être également sur vo...

Hello,

Download fixlist.txt file and save it to the Desktop (with the name "fixlist.txt")

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Run FRST/FRST64...

1)  I recommend to uninstall this:

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Unity Web Player (HKU\S-1-5-21-336042120-3881833094-1070839671-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)

2)   

Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/F...

 Shortcut.txt also host them on Up2Share and share the generated link.  

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Bonjour,

C'est corrigé, désolé de la gêne occasionnée,

Hello,

Before pressing the clean button, can you unselect the elements below:

• "UCGuard" from the "Services" tab
• "C:\WINDOWS\SysNative\drivers\ucguard.sys" from the "Files" tab

Then, press the Clean button, and share the generated logfile.

Thanks,

Hello,

Before doing the clean, can you:

• unselect the element "UCGuard" from the "Services" tab
• unselect the element "C:\Windows\SysNative\drivers\ucguard.sys" from the "Files" tab

Then, do a clean, and share the generated logfile.

Thanks,

You're right, nice catch! But that really is my main firefox profile. Did malware hacked its name, or what?

I searech for this profile ID and found in int he following places:

c:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41a66e7e5ee1

c:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41a66e7e5ee1

I am certain that when I told adwcleaner to delete this folder, my firefox pro...

This element seems to be a FP caused by a generic detection.  

Sorry, but I don't think so.

There are  - only at the german TB forum - at least 50 topics with this ff profilename "41A66E7E5EE1".

Usually, every ff profilename is almost unique, 41A66E7E5EE1 isn't unique.

It is related to Yondoo browser hijacker, I've seen multiple topics with this variant.

my suggestion:

Check profiles.i...