Search

Hello,

Sorry for the delay !

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

While I'll read the logfile, please do the following:

Download fixlist.txt file and save it to the Desktop.

NOTE. It's imp...

Thanks fr33tux, here is the log:

1. ========================= SEAF 1.0.1.0 - C_XX 2.  3. Commencé à: 06:43:11 le 06/10/2016 4.  5. Valeur(s) recherchée(s): 6. dnsapi.dll 7.  8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès 9.  10.  11. ====== Fichier(s) ====== 12.  13.  14. "C:\Windows\System32\dnsapi.dll" [ ARCHIVE | 499 Ko ] 15. TC: 25/08/2016,07:11:35 | T...

Hello,

Can you do the following to look for "dnsapi.dll" files on your computer ?

• Download SEAF : https://toolslib.net/downloads/viewdownload/155-seaf/
• Right-click on the icon -> Execute as Administrator.
• In the search field, type "dnsapi.dll".
• Then, start the search. A report will open when the search is over (it contains the search results). Please share it here.

Best regards,

As the title suggests. I believe this virus is responsible for Windows Defender not being to update its definitions or run at all. Log:

# AdwCleaner v6.020 - Logfile created 05/10/2016 at 20:24:47
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-10-03.1 [Server]
# Operating System : Windows Embedded 8.1 Industry Pro  (X64)
# Username : Jamie - JAMIES-PC
# Running from : C:\Users\Jamie\Do...

~ ZHPDiag v2016.5.3.93 Par Nicolas Coolman (2016/05/03) ~ Démarré par thomas (Administrator)  (2016/05/03 17:06:16) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version:  Version OK ~ Mode: Scanner ~ Rapport: C:\Users\thomas\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\thomas\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du sys...

quand je clic sur la souris  elle fait au moin un double clic :

en suvant les instructions de  https://forum.malekal.com/souris-double-clic-toute-seule-t28169.html

j'ai utilsé  Hijackthis  ,le rapport donne:

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 03:45:34, on 27/04/2016 Platform: Windows 7  (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16514) Boot mode: Normal...

Comme prévu, AdwCleaner a detecté les fichiers infectés :

Fichier infecté : C:\WINDOWS\Sysnative\dnsapi.dll
Fichier infecté : C:\WINDOWS\SysWOW64\dnsapi.dll

On va donc lui demander de les réparer :

• Relance AdwCleaner.
• Clique sur Scanner puis patiente le temps du scan.
• Une fois le scan terminé, clique sur Nettoyer.
• Une fois la suppression terminée, un message de prévention va s'afficher...

# AdwCleaner v5.105 - Logfile created 23/03/2016 at 00:36:50
# Updated 21/03/2016 by Xplode
# Database : 2016-03-21.3 [Server]
# Operating system : Windows 8.1 Pro  (x64)
# Username : user - TOSHIBA
# Running from : C:\Users\user\Downloads\adwcleaner_5.105.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

File F...

Hello,

Please download and run the latest AdwCleaner's version ( v5.104 ). It should disinfect infected DNSApi.dll files. There was a bug in v5.103 which caused AdwCleaner to detect but not disinfect these files.

Regards.

After search again.. Its from shopperz who infect dnsapi.dll ( infected on safemode too)