Rechercher

J'avais pas vu ton PS, si adwcleaner ne trouve plus rien, et que ZHPFix dit avoir son boulot, on est bon pour terminer :

1. Pour gagner un peu d'espace en supprimant des fichiers inutiles :

• Télécharge et installe CCleaner --> lance le --> clique sur Nettoyeur --> Analyse --> Lancer le nettoyage --> OK.
• Ensuite, clique sur "Options" --> "Surveillance" --> décoche toutes les cases liées à la su...

DelFix report:

# DelFix v1.011 - Logfile created 13/12/2015 at 08:42:44
# Updated 18/08/2015 by Xplode
# Username : sjb - SJB-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\TDSSKiller.2.8.16.0_04.04.2014_16.38.42_log.txt
Deleted : C:\TDSSKiller.3.0.0.28_04.04.2014_16.40.0...

If reading the privously/lastly submitted ZHPFix report correctly, the Adobe Shockvawe 12.0 was removed according to the quote below:

"Recycle Bin emptied (07mn AMs)

========== Software ==========
REMOVES: Adobe Shockwave Player 12.0"

I was reffering to removal of ZHPFix itself in my Question while it was running the first time and generating report to desktop.

I have NO issues left anyway...

Seems to have been happening for awhile for geekbuddy

https://malwaretips.com/blogs/comodo-geekbuddy-removal/

Maybe your users can uncheck the removal of geekbuddy before cleaning, If they are sure it was installed for a legitimate program and not bundled with other software as mentioned in the article

Here's the Report after running the ZHPFix tool, but didn't select the ZHPFix REMOVAL while it was running. Was I right?

Script ZHPFix:

O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {0099B484-C24C-4D5F-8167-B0F6DF196E72} ©
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited
HKCU\SOFTWARE\BitDefender
HKCU\SOFTWARE\McAfe...

Hi Chapi,

This is ZHPFixReport without using Drop-box opton:

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015 Fichier d'export Registre : Run by My Computer at 11/27/2015 2:39:30 PM High Elevated Privileges : OK Windows Vista Business Edition, 64-bit  (Build 6000)

Recycle Bin emptied (14mn AMs) Prefetcher emptied

========== Software ========== REMOVES: Kaspersky Secu...

Ok, so I've made a more detailled explanation (all the links refer to a picture with what to do) :

• Go on the download page of ZhpFix, click on the blue button "Download Now".
• https://www.dropbox.com/s/miktm5xqucqn0fj/download1.png?dl=0
• Save the file where do you want :
• https://www.dropbox.com/s/olclwpis5hbdmds/download2.png?dl=0
• Launch it with right click : "launch as administrator" :
• htt...

Hi,

Sadly, that's not what I'm waitting for. Here is an example of a ZHPFix script :

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre : 
Run by Chapi at 27/11/2015 17:43:39
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Corbeille vidée (Annulé par l'utilisateur)


========== Récapitulatif =========...

Hi Chapi

Sorry about my confusing words, here's the ZHFixReport (1):

Script ZHPFix P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} HKCU\SOFTWARE...

Here's the original script:

Script ZHPFix
P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi
HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig
O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44}
HKCU\SOFTWARE\DriverSupport
O43 - CFD: 21/11/2015 - []...