Rechercher

Yes, but your computer doesn't seem to have some remainings, so we need to spot what is re-creating this folder at each reboot.

Since I didn't see it with ZHPDiag, we'll try with FRST :

1. Download FRST
2. Right-click on the file -> "Execute as Administrator"
3. Click on the "Scan" button
4. The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
5. Please host them on Up2Sha...

Sorry, it's the file beginning by "Debug" I need.

Thanks !

Sorry,

I got a BSOD on shutting down during clean but I do not see the file you are requesting, here is what I see http://screencast.com/t/xinesJFuY

Hello,

Thanks.

Relaunch AdwCleaner, and in the Options menu, be sure "Activate the debug mode" and "Reset Chrome preferences" are both checked.

Then, click on "Cleaning". If there is a BSOD, just reboot.

You'll then have a logfile in C:\AdwCleaner\AdwCleaner_dbg_xxxxxx.log, please share it as above.

Best regards,

OK Here it is:

# AdwCleaner v5.112 - Logfile created 19/04/2016 at 05:34:03
# Updated 17/04/2016 by Xplode
# Database : 2016-04-19.1 [Server]
# Operating system : Windows 10 Home  (X64)
# Username : Steve - STEVESPC
# Running from : C:\Users\Steve\Downloads\adwcleaner_5.112.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

Service Found : swdumon

***** [ Fo...

Hello,

Can you relaunch AdwCleaner, click on "Options" -> check "Activate the debug mode". Then, be sure the database is updated and click on "scan".

Please share the logfile here..

Hello,

No, I had just opened Firefox and Thunderbird. This acestream malware really seems difficult to get rid of. Have you already had problems after installing this software?

OK here it is:

Windows PowerShell Copyright (C) 2015 Microsoft Corporation. All rights reserved.

PS C:\Users\Steve> Get-Process

Handles  NPM(K)    PM(K)      WS(K) VM(M)   CPU(s)     Id  SI ProcessName
 -------  ------    -----      ----- -----   ------     --  -- -----------
    659      41    88744      20340   483    31.63   7860   1 Adguard
    1230      65   173272      44460   514    ...

Some bad news. I started my PC, ran AdwCleaner and here is the report :

# AdwCleaner v5.112 - Rapport créé le 19/04/2016 à 11:00:43 # Mis à jour le 17/04/2016 par Xplode # Base de données : 2016-04-17.1 [Serveur] # Système d'exploitation : Windows 10 Home  (X86) # Nom d'utilisateur : Paul - DESKTOP-AQACG2A # Exécuté depuis : C:\Users\Paul\AppData\Local\Temp\mozOpenDownload\adwcleaner_5.112.exe...

Hello,

Can you provide us the whole list of running processes ?

In powershell, enter the following command and copy/paste the content in your next answer :

Get-Process

Best regards,