Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Hi,

Sadly, that's not what I'm waitting for. Here is an example of a ZHPFix script :

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre : 
Run by Chapi at 27/11/2015 17:43:39
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Corbeille vidée (Annulé par l'utilisateur)


========== Récapitulatif =========...

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hi Chapi

Sorry about my confusing words, here's the ZHFixReport (1):

Script ZHPFix P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} HKCU\SOFTWARE...

Ok, so i used ADW cleaner. Can someone help me explain?

dans AdwCleaner par ****

I used ADW cleaner today, since i accedently opened a link on Facebook. I paniced and scanned my pc with antivirus, then ADW. I did it twice and i always get the message 

:: "Tracing" keys removed :: Winsock settings cleared What does this mean? Is it a deffault to have this msg in the logg? After cleaning the pc?

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Hello,

What do you mean with "Then the imprved/imported" ?

Have you followed my instructions ? Can you give me the content of the report named ZHPFixReport.txt that is located on your desktop ?

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Here's the original script:

Script ZHPFix
P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi
HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig
O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44}
HKCU\SOFTWARE\DriverSupport
O43 - CFD: 21/11/2015 - []...

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Hi from France :)

We will use ZHPFix, another tool from Nicolas Coolman, in order to remove what remains of those softwares and the little thing AdwCleaner missed.

  • Go on the download page of ZhpFix, click on the blue button "Download Now".
  • Save the file where do you want and launch it with right click : "launch as administrator".
  • Follow the instructions during the installation.
  • Then click ...

Re: I'm not sure what to clean/remove.

dans Disinfection par barsim

Hello from Canada,

Ok, before using a script to eliminate all remaining threats, I need you to tell me about some software that I don't know :

Do you know :

  • BankId: keeper
  • Turbo Tax ( 2010 2013 2014): keeper
  • Quick Tax: keeper
  • Memorex exPressit Label Design Studio: keeper
  • arcadeparlorconfig: definetly remove Spying!!

You also have some uncommon Firefox's extensions such as video download...

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Ok, before using a script to eliminate all remaining threats, I need you to tell me about some software that I don't know :

Do you know :

  • BankId
  • Turbo Tax ( 2010 2013 2014)
  • Quick Tax
  • Memorex exPressit Label Design Studio
  • arcadeparlorconfig

You also have some uncommon Firefox's extensions such as video downloader, a new theme... Do you want them ?

You have a lot of security software. Some...

Re: I'm not sure what to clean/remove.

dans Disinfection par Chapi

Ok, If i understand, you upload the report on the upshare platform.

Sadly we can't access it if you don't give us a link to it.

So can you repeat the upload, and give us the link.

To do that, just follow fr33tux instructions. If you block on any of those instructions, just tell me, and I will make them clearer.

Hello,

Just to help you for the logfile part :