Here is a log showing what was found on a PC that I had it crash on.
# AdwCleaner v3.303 - Report created 07/08/2014 at 15:00:51
# Updated 06/08/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Robert - MAINPC
# Running from : C:\A.I.R\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
Service Found : CltMngSvc
***** [ Files / Folders ] *****
File Found : C:\Users\Public\Desktop\eBay.lnk
File Found : C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage
File Found : C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal
File Found : C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found : C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Folder Found : C:\Program Files (x86)\SearchProtect
Folder Found : C:\ProgramData\374311380
Folder Found : C:\ProgramData\Trymedia
Folder Found : C:\Users\Robert\AppData\Local\SearchProtect
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Key Found : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : HKCU\Software\Optimizer Pro
Key Found : HKCU\Software\Trymedia Systems
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : [x64] HKCU\Software\Optimizer Pro
Key Found : [x64] HKCU\Software\Trymedia Systems
Key Found : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Found : HKLM\Software\SearchProtect
Key Found : HKLM\Software\Trymedia Systems
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17126
-\\ Google Chrome v36.0.1985.125
[ File : C:\Users\Guest\AppData\Local\Google\Chrome\User
After running the program twice, it's still not managed to get rid of the Trvoi pup. I've tried many other programs as well and this still evades all of then. Any thought on how to get rid of this?
Bonjour,
Version 3.302......trouve à nouveau des tâches planifiée:
***** [ Tâches planifiées ] *****
Tâche Présente : GoforFilesUpdate
Tâche Présente : ProgramRefresh-ATFST
Tâche Présente : ProgramUpdateCheck
La version précédente 3.301 ne trouvait pas ces tâches planifiées.
Conclusion: Version à revoir.....
Bonne journée
@cramnorg Le fichier téléchargé depuis ToolsLib est sain. Quel est le nom de votre antivirus?
Re bonjour :
En fait à chaque tentative le fichier change de nom :
KHk2CR_h.exe.part ou WI_vCK9e.exe.part
La version 3.301 proposée, comporte un virus que mon logiciel de sécurité détecte en interdisant le téléchargement et ce quelque soit le site où je tente de le télécharger.
Virus : Trojan généric 11592248
Fichier : jlsGDksk.part
Hotspot Shield
https://gambetto.de/image/OF
https://gambetto.de/image/O0
https://gambetto.de/image/O3
***** [ Dienste ] *****
Dienst Gefunden : hshld
Dienst Gefunden : hsstrayservice
Dienst Gefunden : hsswd
***** [ Dateien / Ordner ] *****
Ordner Gefunden : C:\Program Files (x86)\hotspot shield
Ordner Gefunden : C:\ProgramData\hotspot shield
Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hotspot shield
Ordner Gefunden : C:\Users\Waldijs\AppData\Roaming\hotspot shield
Ordner Gefunden : C:\Windows\SysWOW64\hotspot shield
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\anchorfree
Schlüssel Gefunden : [x64] HKCU\Software\anchorfree
Schlüssel Gefunden : HKLM\Software\hotspotshield
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\hotspotshield
Hallo
Bedankt
heb al wel 3 verschillende programatjes laten draaien,en niets kon die rommel verwijderen
thank you , thank jou
sonia
Is there a way to get this with instructions and window dialog in English? I'd be very grateful. Unfortunately that's my singular language. Would love to use this program. Upgraded my hard drive and when cloned from smaller drive, lost ability to do Windows Update. Thinking it thinks it's a pirated copy of Windows Vista. However, it is a valid copy. Just moving to bigger drive. Thanks for any help.
Re Tom1110: Try NOT to reformat your hard disk so soon unless you absolutely have to -- it's like doing brain surgery for a hangnail -- use this challenge as an exercise to discover, quarantine and delete the culprit -- whatever malware you got is annoying BUT try doing more research online using search terms combined with "Movie Mode" before you resort to reformatting. Combine your troubleshooting techniques with Safe Mode. Do you have a real security program that you've paid for and subscribe to? -- With it you'll be able to get some real professional tech support. Good Luck.
