Search

---\\ Liste des pilotes du système (63) - 13s O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys   [108896]  =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport  Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys   [782176]  =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41...

---\\ Modification Domaine/Adresses DNS (6) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 8.8.8.8,8.8.8.4  =>.Google Public DNS O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{37F650BF-BA0B-48A5-9CEA-54F1E05D1189}: DhcpNameServer = 82.163.142.7  =>PUP.Optional.DNSUnlocker O17 - HKLM\System\CC...

Hello,

The problem is definitely solved thanks to your kind help. I ran AdwCleaner this morning after switching on my PC and ther was no malware at all. Thank you very much once again.

Hello,

Ok. You may use DelFix to remove the other tools we used, and then it's done for me.

If you have any questions, don't hesitate to ask !

Best regards,

I have done that and I have also run AdwCleaner to see if the acestream fle was definitely deleted. Everything seemds to be OK.

I was far from thinking that the Roxplayer application did use the Acestream technology. Maybe the Acestream software has no malware itself (although the Magicplayer Firefox plugin has got a malware) but the Roxplayer software does have a malware.

Anyway I will no lo...

Ok.

Can you manually uninstall "Rox Player" from the Windows Settings ?

Then,

1. Download CCleaner from here, and install it.
2. Start CCleaner (there should be a shortcut on your Desktop)
3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
4. Then in Options  tab > Surveillance, untick the both boxes.
5. In the Clean tab, click on "Clean".
6. When the cleanin...

Here is the log :

Résultats de correction de Farbar Recovery Scan Tool (x86) Version:18-04-2016
Exécuté par Paul (2016-04-19 20:58:21) Run:1
Exécuté depuis C:\Users\Paul\Desktop
Profils chargés: Paul (Profils disponibles: Paul)
Mode d'amorçage: Normal

==============================================

fixlist contenu:
*****************
CreateRestorePoint:
CloseProcesses:
EmptyTemp:
S3 avchv; \S...

Hello,

Great ! I reproduced the problem. It's due to Rox Player, which is really tendancious (showings random ads, not updated for a quite long time...).

I added the detections to AdwCleaner, and we'll remove it manually there.

Download the file fixlist.txt and save it as "fixlist.txt" to the Desktop or where FRST is located.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt...

Thank you very much.

I redacted the links to your logfiles in your precedent message since they contained some "sensitive"/"private" informations.

I analyze the logfile and come back to you with more informations.