Rechercher

User547952, "Note: La clé est temporaire et est supprimée à la fermeture de session." Note: The key is temporary and is deleted at logoff.

Thank you for that information . Yes a scan today with AdwCleaner v5.115 found No Problems

Rick

---\\ Modification Domaine/Adresses DNS (6) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 8.8.8.8,8.8.8.4  =>.Google Public DNS O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{37F650BF-BA0B-48A5-9CEA-54F1E05D1189}: DhcpNameServer = 82.163.142.7  =>PUP.Optional.DNSUnlocker O17 - HKLM\System\CC...

Ok.

Can you manually uninstall "Rox Player" from the Windows Settings ?

Then,

1. Download CCleaner from here, and install it.
2. Start CCleaner (there should be a shortcut on your Desktop)
3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
4. Then in Options  tab > Surveillance, untick the both boxes.
5. In the Clean tab, click on "Clean".
6. When the cleanin...

Can you temporary disable it, then launch AdwCleaner as administrator ?

(Then, reactivate it).

Hello,

Great !

Yes, please disable the synchronization temporary.

I'll need more information :

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then post the link in your reply

Sorry for the delay.

I reinstall firefox;

after that, I run these programs (really not sure if I run in this order):

1. Adware_Removal_Tool_by_TSA
2. Windows 10 Manager-1click cleaner
3. RegHunter
4. TFC (Ttemporary file cleaner by Old Timer)
5. CCcleaner
6. rkill
7. jrt

Now browser no redirect to newpoptab.

Think I remove it.

But adw cleaner still not found any malicious threats.

Thanks!

Here's the Fix report:

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015 Fichier d'export Registre : Run by sjb at 12/12/2015 9:05:30 AM High Elevated Privileges : OK Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Recycle Bin emptied (03mn AMs) Prefetcher emptied

========== Folders ========== REMOVES: c:\programdata\installmate Deletes temporary Win...

Hello,

As promised, here's my answer :

We need to delete a las thing wit a ZHPFix script. Please repeat the procedure above with the following content :

Script ZHPFix:

C:\ProgramData\InstallMate
EmptyTemp
EmptyFlash
EmptyPrefetch

Then, share me the logfile.

Then, we'll begin the cleaning part :

1. Start CCleaner (there should be a shortcut on your Desktop)
2. Go in Options tab > Advanced, un...

Hi

here is ZHPFix logfile;

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015 Fichier d'export Registre :  Run by Albert at 2015-12-05 11:23:04 AM High Elevated Privileges : OK Windows 8 Home Premium Edition, 64-bit Service Pack 1 (10240)

Recycle Bin emptied (04mn AMs) Prefetcher emptied

========== Registry keys ========== REMOVES: HKLM\SOFTWARE\Wow6432Node\McAfee.com...

The missing log-file:

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman,
Update du 19/10/2015
Fichier d'export Registre :
Run by sjb at 12/2/2015 10:12:58 AM
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Recycle Bin emptied (07mn AMs)

========== Software ==========
REMOVES: Adobe Shockwave Player 12.0

========== Registry keys ==========
R...