Search

1) Using ClearLNK tool repair following links and attach tool's report to your message.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Lau...

Hello,

Download fixlist.txt file and save it to the Desktop (with the name "fixlist.txt")

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Run FRST/FRST64...

FRST.txt:  https://up2sha.re/file?f=NRQTQ4o1PVXr

Addition.txt:  https://up2sha.re/file?f=pQxqmrNnfolG

Shortcut.txt: https://up2sha.re/file?f=DSQ4KCp7MQOO

1)  I recommend to uninstall this:

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Unity Web Player (HKU\S-1-5-21-336042120-3881833094-1070839671-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)

2)   

Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/F...

Here are the links to the logfiles from FRST.

FRST.txt:  https://up2sha.re/file?f=NRQTQ4o1PVXr

Addition.txt:  https://up2sha.re/file?f=pQxqmrNnfolG

Here are the links to the logfiles from FRST.

FRST.txt:  https://up2sha.re/file?f=NRQTQ4o1PVXr

Addition.txt:  https://up2sha.re/file?f=pQxqmrNnfolG

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Hello,

Thanks M-K-D-B, sorry for misunderstanding.

@Simplex: Can you zip me the folder "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1" and your profile: "4ui6vnjc.Simplex" ? I'll merge the two so that you'll find a clean profile, and you will be able to clean with AdwCleaner the malicious one.

Thanks,

Bonjour,

Nous allons utiliser Farbar Recovery Scan Tool, voici la marche à suivre :

• Téléchargez FRST;
• Effectuez un clique-droit sur le fichier téléchargé, puis "Exécuter en tant qu'administrateur";
• Cliquez sur le bouton "Scan";
• Un rapport est sauvegardé, il se nomme "FRST.txt" et quelques informations supplémentaires sont proposées dans le fichier "Addition.txt";
• S'il vous plait, utilisez...

This element seems to be a FP caused by a generic detection.  

Sorry, but I don't think so.

There are  - only at the german TB forum - at least 50 topics with this ff profilename "41A66E7E5EE1".

Usually, every ff profilename is almost unique, 41A66E7E5EE1 isn't unique.

It is related to Yondoo browser hijacker, I've seen multiple topics with this variant.

my suggestion:

Check profiles.i...