Just a little more feedback. After scanning the pop up no malicious software found comes up, but also shown is uncheck what you want to keep. Checking the logfile shows that nothing was found. Checking all the tabs also lists nothing to remove.
Edit here is link to pic
http://postimg.org/image/417a2fu61/
i appreciated the adwcleaner and jrt.exe files. the hitman pro site let me use download.com. I clicked the direct link instead. I thought download.com injects pup software? should a warning be on your site ot to use download.com?
I also cleaned everything the adw and jrt exes showed me and crossed my fingers that it would not crash my system. is that safe?
i already had malware bytes M...
Bonjour,
Excusez-moi du délai de ma réponse. Si vous voyez que le délai de réponse ou prise en charge dépasse trois jours, n'hésitez pas à poster un petit rappel.
Ensuite, désinstallez McAfee via le panneau de configuration.
Une fois fait, on va...
Hello,
Can you provide the GeekBuddy detections from AdwCleaner ?
As rufus415 said, GeekBuddy is often bundled with other software and installed without any user consent. If you are a Product Manager, I hope that you'll take note of this remark and stop to distribute GeekBuddy using such a tendancious way.
Regards,
Bonjour,
Hm, c'est étrange. Est-ce qu'il fait un bruit particulier lors du "freeze" ? (ou une absence de bruit justement)
Avez-vous réussi à démarrer via une clé USB Linux ?
Bon couurage,
Bonjour Maxjules.
Pour commencer, on va faire l'export du dossier d'Extensions de Google Chrome.
C:\Users\max\AppData\Local\Google\Chrome\User Data\Default\Bonjour,
On est reparti :
Alors d'abord une petite question, es-tu sûr que le pop-up se lance au démarage du navigateur Google Chrome et pas de Mozilla Firefox. En effet, tes messages MBAM indiquent une connection vers statsweb.proxad.net démarré par Mozilla Firefox.
A noté que statsweb.proxad.net appartenant à Free, il est probable qu'il s'agisse d'un Faux Positif. J'ai donc contacté quelqu...
The missing log-file:
Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman,
Update du 19/10/2015
Fichier d'export Registre :
Run by sjb at 12/2/2015 10:12:58 AM
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Recycle Bin emptied (07mn AMs)
========== Software ==========
REMOVES: Adobe Shockwave Player 12.0
========== Registry keys ==========
R...Seems to have been happening for awhile for geekbuddy
https://malwaretips.com/blogs/comodo-geekbuddy-removal/
Maybe your users can uncheck the removal of geekbuddy before cleaning, If they are sure it was installed for a legitimate program and not bundled with other software as mentioned in the article
Just a suggestion. Since the adware is known as Interstat (as is your software) change the installation of your software to InterstatSAS or something besides just Interstat. Might help.