Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hi Chapi,

This is ZHPFixReport without using Drop-box opton:

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015 Fichier d'export Registre : Run by My Computer at 11/27/2015 2:39:30 PM High Elevated Privileges : OK Windows Vista Business Edition, 64-bit  (Build 6000)

Recycle Bin emptied (14mn AMs) Prefetcher emptied

========== Software ========== REMOVES: Kaspersky Secu...

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Ok, so I've made a more detailled explanation (all the links refer to a picture with what to do) :

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hello Chapi,

You are saying above

"Import" What does supposedly import?

"Copy (what?) paste (to where?) this script including "Script ZHPFix"(above line only?)". This statement reffers two items + ZHPFixReport.txt = 3 items?

barsim

 

 

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Hi,

Sadly, that's not what I'm waitting for. Here is an example of a ZHPFix script :

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre : 
Run by Chapi at 27/11/2015 17:43:39
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Corbeille vidée (Annulé par l'utilisateur)


========== Récapitulatif =========...

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hi Chapi

Sorry about my confusing words, here's the ZHFixReport (1):

Script ZHPFix P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} HKCU\SOFTWARE...

Ok, so i used ADW cleaner. Can someone help me explain?

dans AdwCleaner par ****

I used ADW cleaner today, since i accedently opened a link on Facebook. I paniced and scanned my pc with antivirus, then ADW. I did it twice and i always get the message 

:: "Tracing" keys removed :: Winsock settings cleared What does this mean? Is it a deffault to have this msg in the logg? After cleaning the pc?

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Hello,

What do you mean with "Then the imprved/imported" ?

Have you followed my instructions ? Can you give me the content of the report named ZHPFixReport.txt that is located on your desktop ?

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Here's the original script:

Script ZHPFix
P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi
HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig
O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44}
HKCU\SOFTWARE\DriverSupport
O43 - CFD: 21/11/2015 - []...

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Hi from France :)

We will use ZHPFix, another tool from Nicolas Coolman, in order to remove what remains of those softwares and the little thing AdwCleaner missed.

  • Go on the download page of ZhpFix, click on the blue button "Download Now".
  • Save the file where do you want and launch it with right click : "launch as administrator".
  • Follow the instructions during the installation.
  • Then click ...

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hello from Canada,

Ok, before using a script to eliminate all remaining threats, I need you to tell me about some software that I don't know :

Do you know :

  • BankId: keeper
  • Turbo Tax ( 2010 2013 2014): keeper
  • Quick Tax: keeper
  • Memorex exPressit Label Design Studio: keeper
  • arcadeparlorconfig: definetly remove Spying!!

You also have some uncommon Firefox's extensions such as video download...