Re: I'm not sure what to clean/remove.

Hi,

Sadly, that's not what I'm waitting for. Here is an example of a ZHPFix script :

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre : 
Run by Chapi at 27/11/2015 17:43:39
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Corbeille vidée (Annulé par l'utilisateur)


========== Récapitulatif =========...

Re: I'm not sure what to clean/remove.

Hi Chapi

Sorry about my confusing words, here's the ZHFixReport (1):

Script ZHPFix P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} HKCU\SOFTWARE...

Ok, so i used ADW cleaner. Can someone help me explain?

on AdwCleaner by ****

I used ADW cleaner today, since i accedently opened a link on Facebook. I paniced and scanned my pc with antivirus, then ADW. I did it twice and i always get the message 

:: "Tracing" keys removed :: Winsock settings cleared What does this mean? Is it a deffault to have this msg in the logg? After cleaning the pc?

Re: I'm not sure what to clean/remove.

Hello,

What do you mean with "Then the imprved/imported" ?

Have you followed my instructions ? Can you give me the content of the report named ZHPFixReport.txt that is located on your desktop ?

Re: I'm not sure what to clean/remove.

Here's the original script:

Script ZHPFix
P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi
HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig
O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44}
HKCU\SOFTWARE\DriverSupport
O43 - CFD: 21/11/2015 - []...

Re: I'm not sure what to clean/remove.

Hi from France :)

We will use ZHPFix, another tool from Nicolas Coolman, in order to remove what remains of those softwares and the little thing AdwCleaner missed.

  • Go on the download page of ZhpFix, click on the blue button "Download Now".
  • Save the file where do you want and launch it with right click : "launch as administrator".
  • Follow the instructions during the installation.
  • Then click ...

Re: I'm not sure what to clean/remove.

Hello from Canada,

Ok, before using a script to eliminate all remaining threats, I need you to tell me about some software that I don't know :

Do you know :

  • BankId: keeper
  • Turbo Tax ( 2010 2013 2014): keeper
  • Quick Tax: keeper
  • Memorex exPressit Label Design Studio: keeper
  • arcadeparlorconfig: definetly remove Spying!!

You also have some uncommon Firefox's extensions such as video download...

Re: I'm not sure what to clean/remove.

Ok, before using a script to eliminate all remaining threats, I need you to tell me about some software that I don't know :

Do you know :

  • BankId
  • Turbo Tax ( 2010 2013 2014)
  • Quick Tax
  • Memorex exPressit Label Design Studio
  • arcadeparlorconfig

You also have some uncommon Firefox's extensions such as video downloader, a new theme... Do you want them ?

You have a lot of security software. Some...

Re: I'm not sure what to clean/remove.

Ok, If i understand, you upload the report on the upshare platform.

Sadly we can't access it if you don't give us a link to it.

So can you repeat the upload, and give us the link.

To do that, just follow fr33tux instructions. If you block on any of those instructions, just tell me, and I will make them clearer.

Hello,

Just to help you for the logfile part :