Rechercher

1. Fri, 08 Jun 2018 14:44:02 GMT Searching empty directories... Fri, 08 Jun 2018 14:44:02 GMT Failed to access files in "C:\inetpub\history" Fri, 08 Jun 2018 14:44:02 GMT Failed to access subdirectories in "C:\inetpub\history" Fri, 08 Jun 2018 14:44:02 GMT Failed to access files in "C:\inetpub\logs" Fri, 08 Jun 2018 14:44:02 GMT Failed to access subdirectories in "C:\inetpub\logs" Fri, 08 Jun 2018...

Hi everybody,

I'am in trouble with an infection from a infected installation (all files, archives, download... from this has been removed).

After cleaning all suspicious programs on my compture (with CCleaner), I have clean up all caches files and repair the registre with it.

In third I do scan and clean up with the lasted version of Malwarebytes ; ADWcleaner ; Rkill and UnHackMe. Juste Male...

<p>C&ugrave;ng với Đại lộ Nguyễn Văn Linh mở ra cửa ng&otilde; th&ocirc;ng thương miền T&acirc;y với trung t&acirc;m Tp.HCM, Nguyễn Hữu Thọ được kỳ vọng l&agrave; trục giao th&ocirc;ng huyết mạch của khu Nam S&agrave;i G&ograve;n. L&agrave; một phần của tuyến đường trục Bắc - Nam c&oacute; điểm đầu l&agrave; Quốc lộ 22 (An Sương) đến Hiệp Phước (Nh&agrave; B&egrave;), đường Nguyễn Hữu T...

some google results say this is due to the free premium feature for 14days - true? also the registry warning inconsistently happens on the second pc too but the 90% cpu usage stuff doesnt (eventho both exact same as said before) should my adwcleaner find sth if 1pc is effected by a virus? edit2: just tested again on my second machine and i was wrong when "scan memory" starts the cpu there spike...

doublechecked too it goes likes this:

survey -> close browser -> run adwcleaner -> pups found -> dont repair -> open browser again AND delete cookies -> close browser -> run adw cleaner again -> no pups found - so 100% cookie related - probably just gathering personal data via those i would guess and making profit over those eventho they pay you for survey 

Hi,

Probably a false positive:

# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build:    04-27-2018
# Database: 2018-04-30.1
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    04-30-2018
# Duration: 00:00:11
# OS:       Windows 7 Professional
# ...

C'est OK pour ça ;)

Juste cette extension sur Firefox qui est douteuse :

FF Extension: (Flash Video Downloader) - C:\Users\pstar\AppData\Roaming\Mozilla\Firefox\Profiles\sovl3vhv.default\Extensions\artur.dubovoy@gmail.com.xpi [2018-03-29]

Bonjour,

• Télécharge Farbar Recovery Scan Tool (de Farbar) sur ton Bureau.

Attention : tu dois prendre la version compatible avec ton système : 32 ou 64 bits.

32 ou 64 bits - Comment savoir ?

• Lance FRST (Sous Windows Vista/7/8/10, clic droit sur FRST > Exécuter en tant qu'administrateur).
• Coche la case Addition.txt.
• Clique sur le bouton Analyser.
• Une fois le scan terminé, deux rapports FRS...

Bonjour, En lançant Rkill, il me détecte un truc bizarre à chaque fois savez-vous de quoi il peut s'agir ?

Performing miscellaneous checks:

 * Modified HKCU\...\Winlogon: [Shell] => explorer.exe, C:\Users\AppData\Roaming\fibril.exe

 * No issues found.

Quand je vais dans le chemin indiqué, il n'y a rien même dans les fichiers cachés...

Bonjour,

• Télécharge Farbar Recovery Scan Tool (de Farbar) sur ton Bureau.

Attention : tu dois prendre la version compatible avec ton système : 32 ou 64 bits.

32 ou 64 bits - Comment savoir ?

• Lance FRST (Sous Windows Vista/7/8/10, clic droit sur FRST > Exécuter en tant qu'administrateur).
• Coche la case Addition.txt.
• Clique sur le bouton Analyser.
• Une fois le scan terminé, deux rapports ...