Re: Désinstallation de MPC Cleaner

dans AdwCleaner par Chapi

J'avais pas vu ton PS, si adwcleaner ne trouve plus rien, et que ZHPFix dit avoir son boulot, on est bon pour terminer :

 

  1. Pour gagner un peu d'espace en supprimant des fichiers inutiles :
  • Télécharge et installe CCleaner --> lance le --> clique sur Nettoyeur --> Analyse --> Lancer le nettoyage --> OK.
  • Ensuite, clique sur "Options" --> "Surveillance" --> décoche toutes les cases liées à la su...

Re: AdwCleaner Report

dans AdwCleaner par barsim

DelFix report:

# DelFix v1.011 - Logfile created 13/12/2015 at 08:42:44
# Updated 18/08/2015 by Xplode
# Username : sjb - SJB-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\TDSSKiller.2.8.16.0_04.04.2014_16.38.42_log.txt
Deleted : C:\TDSSKiller.3.0.0.28_04.04.2014_16.40.0...

Re: AdwCleaner Report

dans AdwCleaner par barsim

If reading the privously/lastly submitted ZHPFix report correctly, the Adobe Shockvawe 12.0 was removed according to the quote below:

"Recycle Bin emptied (07mn AMs)

========== Software ==========
REMOVES: Adobe Shockwave Player 12.0"

I was reffering to removal of ZHPFix itself in my Question while it was running the first time and generating report to desktop.

I have NO issues left anyway...

Re: False Positive for GeekBuddy

dans AdwCleaner par rufus415

Seems to have been happening for awhile for geekbuddy

https://malwaretips.com/blogs/comodo-geekbuddy-removal/

Maybe your users can uncheck the removal of geekbuddy before cleaning, If they are sure it was installed for a legitimate program and not bundled with other software as mentioned in the article

Re: AdwCleaner Report

dans AdwCleaner par barsim

Here's the Report after running the ZHPFix tool, but didn't select the ZHPFix REMOVAL while it was running. Was I right?

Script ZHPFix:

O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {0099B484-C24C-4D5F-8167-B0F6DF196E72} ©
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited
HKCU\SOFTWARE\BitDefender
HKCU\SOFTWARE\McAfe...

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hi Chapi,

This is ZHPFixReport without using Drop-box opton:

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015 Fichier d'export Registre : Run by My Computer at 11/27/2015 2:39:30 PM High Elevated Privileges : OK Windows Vista Business Edition, 64-bit  (Build 6000)

Recycle Bin emptied (14mn AMs) Prefetcher emptied

========== Software ========== REMOVES: Kaspersky Secu...

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Ok, so I've made a more detailled explanation (all the links refer to a picture with what to do) :

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Hi,

Sadly, that's not what I'm waitting for. Here is an example of a ZHPFix script :

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre : 
Run by Chapi at 27/11/2015 17:43:39
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Corbeille vidée (Annulé par l'utilisateur)


========== Récapitulatif =========...

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hi Chapi

Sorry about my confusing words, here's the ZHFixReport (1):

Script ZHPFix P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} HKCU\SOFTWARE...

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Here's the original script:

Script ZHPFix
P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi
HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig
O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44}
HKCU\SOFTWARE\DriverSupport
O43 - CFD: 21/11/2015 - []...