Search

Here is the log :

Résultats de correction de Farbar Recovery Scan Tool (x86) Version:18-04-2016
Exécuté par Paul (2016-04-19 20:58:21) Run:1
Exécuté depuis C:\Users\Paul\Desktop
Profils chargés: Paul (Profils disponibles: Paul)
Mode d'amorçage: Normal

==============================================

fixlist contenu:
*****************
CreateRestorePoint:
CloseProcesses:
EmptyTemp:
S3 avchv; \S...

Hello,

Something else seems to recreate the key. I'll look with a ZHPDiag report :

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then post the link in your reply

Best regards,

Yes, but your computer doesn't seem to have some remainings, so we need to spot what is re-creating this folder at each reboot.

Since I didn't see it with ZHPDiag, we'll try with FRST :

1. Download FRST
2. Right-click on the file -> "Execute as Administrator"
3. Click on the "Scan" button
4. The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
5. Please host them on Up2Sha...

Ok. It was a strange behaviour (and the first case like this) but it's solved.

Otherwise, your computer is clean.

You may use Delfix to remove every tools we used from your computer :

• Download DelFix from Xplode on your desktop.
• Launch it with administrator rights.
• Select all the option except the one proposing to save the registry.
• Then click on the "Execute" button.
• When everything is ...

Hello,

Can you create a zip archive of the folder

C:\Users\Paul\AppData\Roaming\.acestream

Then, host it on Up2Share and share the link here.

After that,

• Please download ZHPFix - Go on the download page of ZhpFix, click on the blue button "Download Now".
• Launch it with right click : "launch as administrator",
• Follow the instructions during the installation.
• Then click on the shortcut f...

Hello,

Thanks for the report.

Can you generate a ZHPDiag logreport to get more informations on your system ?

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then post the link in your reply

Best regards,

Hello,

Thanks for the reports. Does the ads pop-up are occuring with only one web-browser ?

Can you generate a ZHPDiag logreport to get more informations on your system ?

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then ...

2016-04-15 11:23:20 : [Notice]		Scan started
2016-04-15 11:23:20 : [Success]		Internet connection is UP
2016-04-15 11:23:22 : [Success]		Loaded C:\Users\tloft\AppData\Local\Temp\sqlite.dll
2016-04-15 11:23:22 : [Success]		Opened C:\AdwCleaner\adwcleaner.db
2016-04-15 11:23:22 : [Success]		Database v2016-04-15.1
2016-04-15 11:23:23 : [Success]		Retrieved 1711 elements from 'chrome_extensions' t...

I agree, not sure why this is only affecting edge. Internet Explorer and Chrome still work fine. I have a generic admin account on the PC that has the same issue and I am able to send you this via IE. Since I dont use this computer I dont know if this has been an issue prior to the suspicious activity ofr if it is new.

Windows IP Configuration

   Host Name . . . . . . . . . . . . : user    P...

I agree, not sure why this is only affecting edge. Internet Explorer and Chrome still work fine. I have a generic admin account on the PC that has the same issue and I am able to send you this via IE. Since I dont use this computer I dont know if this has been an issue prior to the suspicious activity ofr if it is new.

Windows IP Configuration

   Host Name . . . . . . . . . . . . : user    P...