Rechercher

Bonjour

Merci de suivre ce dossier. Recuva me dit, pour de nombreux fichiers qu'ils ont été remplacés par d'autres dont il donne les noms et que ceux d'origine sont irrécupérables.

Merci

Oswaldo

Hello,

Can you share the whole logfile please ?

Regards,

I have a couple of false positives to report that keep getting flagged, but shouldn't be.

1. Under Scheduled Tasks, RunAsStdUser Task is C:\Program Files\GPSoftware\Directory Opus\dopus.exe This is a legit Directory Opus entry.

2. Under Shortcuts, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeraByte Unlimited\TeraByte OSD Tool Suite Pro\Ready To Run Scripts\INISTART - Reset Windows S...

Thank you. The FP should be fixed now.

Regards,

Pardon the possibly obvious question, but by "session" do you mean browser session or OS session?

---

Clovers, 2016-05-07 17:08:50 (UTC)

After some tests, the key remains during the current OS session only.

Hello,

Can you upload on https://up2sha.re/ the file called "manifest.json" which should be inside this folder ( or one of its subfolders ) : C:\Users\PCUser\AppData\Roaming\Opera Software\Opera Stable\Extensions\ipiopppcaojnchgoepoemlbdccogeije

Then post up2share's link.

Regards,

Hello,

This FP should be fixed now.

Regards,

Hello,

Can you share the whole logfile ? (from C:\AdwCleaner\)

Regards,

Hello,

@User547952 : this key does not belong to Mozilla Firefox only. Mozilla Firefox creates this key only for a limited time (the current session). However, we target the same key created by several malwares, which is not deleted when the current session is terminated.

It's a corner case, but we'll look deeper to see what we can do about that..

Best regards,

---

fr33tux, 2016-05-06 18:45:56...

Ok.

-> Vous me confirmez que la version 5.109 fonctionnait correctement ?

-> Pouvez-vous activer l'option "Activer le mode déboguage", lancez le scan (le message va également s'afficher) et copier/coller ici le fichier C:\AdwCleaner\AdwCleaner_dbg_xxxxxx.log généré.

Merci pour votre aide,