Rechercher

OK here it is:

Windows PowerShell Copyright (C) 2015 Microsoft Corporation. All rights reserved.

PS C:\Users\Steve> Get-Process

Handles  NPM(K)    PM(K)      WS(K) VM(M)   CPU(s)     Id  SI ProcessName
 -------  ------    -----      ----- -----   ------     --  -- -----------
    659      41    88744      20340   483    31.63   7860   1 Adguard
    1230      65   173272      44460   514    ...

Some bad news. I started my PC, ran AdwCleaner and here is the report :

# AdwCleaner v5.112 - Rapport créé le 19/04/2016 à 11:00:43 # Mis à jour le 17/04/2016 par Xplode # Base de données : 2016-04-17.1 [Serveur] # Système d'exploitation : Windows 10 Home  (X86) # Nom d'utilisateur : Paul - DESKTOP-AQACG2A # Exécuté depuis : C:\Users\Paul\AppData\Local\Temp\mozOpenDownload\adwcleaner_5.112.exe...

Hi there,

In some case i almost run AdwCleaner to scan my PC for more security but a few days that it finds suspicious registry keys.

Called:

HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}

I asked AdwCleaner to delete it, and it was indeed deleted after rebooting and the report said it was deleted. I ran a second scan and AdwCleaner found not...

Thank  you very much once again for your help. AdwCleaner is really a wonderful tool to eradicate malwares, and I have helped several friends to decontaminate their much-infected PCs with thiqs sofware whose scan is so fast and efficient.

Now I wonder if my problem with AceStream was purely individual or if I should report the presence of a malware, however mild it may be, on this download sit...

I had already launched Delfix before you asked me to do it : so the desinfection tools were deleted on that instance. I have just launched it once again and here is the report :

# DelFix v1.013 - Rapport créé le 18/04/2016 à 21:42:50
# Mis à jour le 17/04/2016 par Xplode
# Nom d'utilisateur : Paul - DESKTOP-AQACG2A
# Système d'exploitation : Windows 10 Home  (32 bits)

~ Activation de l'UAC ....

Ok. It was a strange behaviour (and the first case like this) but it's solved.

Otherwise, your computer is clean.

You may use Delfix to remove every tools we used from your computer :

• Download DelFix from Xplode on your desktop.
• Launch it with administrator rights.
• Select all the option except the one proposing to save the registry.
• Then click on the "Execute" button.
• When everything is ...

Here is the link to the .zip file :

https://up2sha.re/file?f=BLFpne1nlGSI

And here is the ZHPFix report :

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre :
Run by Paul at 18/04/2016 17:56:04
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 32-bit Service Pack 1 (10586)

Corbeille vidée (00mn 06s) Dossier Prefetcher vidé

======...

Hello,

Can you create a zip archive of the folder

C:\Users\Paul\AppData\Roaming\.acestream

Then, host it on Up2Share and share the link here.

After that,

• Please download ZHPFix - Go on the download page of ZhpFix, click on the blue button "Download Now".
• Launch it with right click : "launch as administrator",
• Follow the instructions during the installation.
• Then click on the shortcut f...

Hello,

Thanks for the report.

Can you generate a ZHPDiag logreport to get more informations on your system ?

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then post the link in your reply

Best regards,

Hello,

Thanks for the reports. Does the ads pop-up are occuring with only one web-browser ?

Can you generate a ZHPDiag logreport to get more informations on your system ?

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then ...