Search

Hello,

Can you provide the whole logfile please ?

Regards,

AdwCleaner

Zeigt mir ständig an: Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} aber bei der nächsten Prüfung ist der Schlüssel wieder da !?

Shows me all the time Key is erased : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} but by next search/ inspection the the programm find t...

voilà, le rapport après généré après l'opération évoquée :

WinUpdateFix  v1.3 - Rapport créé le 05/03/2016 à 15:43
Mis à jour le 06/02/11 à 20h par Xplode
Système d'exploitation : Windows 7 Professional (64 bits) [version 6.1.7601] Pas de données
Nom d'utilisateur : Utilisateur - UTILISATEUR-PC (Administrateur)
Exécuté depuis : C:\Users\Utilisateur\Desktop\logiciels\winupdatefix_1.3.exe

~~~~...

Hello,

Oh, sorry I misunderstood.

So these detections are linked to this entry : https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=SoftwareBundler%3aWin32%2fBesofter

Regards,

---

fr33tux, 2016-03-05 00:51:44 (UTC)

thanx a lot

voici :

WinUpdateFix  v1.3 - Rapport créé le 05/03/2016 à 14:38
Mis à jour le 06/02/11 à 20h par Xplode
Système d'exploitation : Windows 7 Professional (64 bits) [version 6.1.7601] Pas de données
Nom d'utilisateur : Utilisateur - UTILISATEUR-PC (Administrateur)
Exécuté depuis : C:\Users\Utilisateur\Desktop\logiciels\winupdatefix_1.3.exe

~~~~~ Windows Update ~~~~~

Paramètres du centre de séc...

Hello,

Oh, sorry I misunderstood.

So these detections are linked to this entry : https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=SoftwareBundler%3aWin32%2fBesofter

Regards,

Hallo,  

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0DC81A74-1FBD-4EF6-82B2-DE3FA05E8233}] @="IFDMFlashVideoDownloads"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0DC81A74-1FBD-4EF6-82B2-DE3FA05E8233}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0DC81A74-1FBD-4EF6-82B2-DE3FA05E8233...

Voici l'export de la seconde clé :

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection] "AllowTelemetry"=dword:00000003

La première (PushNotifications) n'existe pas

Cordialement

Hello,

If I can retrieve anything I'll post it up. There was nothing in my adwCleaner folders except a reference to 'Xplode', not sure if that was something to do with anything.

---

TzinProblems, 2016-03-01 22:02:31 (UTC)

To be sure, we can take a look if you want.

ZHPDiag is a software which retrieve a few informations on the system (such as installed software, configuration..). It requires ...

Thank you for your thoughts. 

I don't know what software it was.

I think I had just come off the SiteGrounds site but can't be sure. I've been in touch with their security today and they are convinced it was nothing to do with them.

Now that the shock is over, it could have been completely un-related to any other event that day, but it was shockingly easy for them to blag me into handing my ...