Search

Hello,

I have encountered a problem. After Scanning and hitting the button Clean, it runs as if it is starting the cleaning process. Then after a few seconds the application doesn't respond. I read the instructions and this is my debug link: https://up2sha.re/file?f=T7RvW1RLQxPO

I use Win 10 64-bit.

Please help me. Thanks

Bonsoir ,

Depuis plusieurs jours je suis infecté par une extension dans Chrome trouvé par Adwcleaner que je colle ici  Chromium préf trouvée:  [C:\Users\AB\AppData\Local\Google\Chrome\User Data\Profile 3\Secure Preferences ] - hpdbfhoobgcmiffaheiedgepeipfcjpb 

Malgré Adwcleaner j n'arrive pas à m'en débaasser , pourriez-vous m'aider s'il vous plaît ?

Bonjour, désolé pour le retard vous pouvez me critiquer X)

he bien vous avez raison cocochepeau quelque jour après même problème , j'ai fait comme vous m'avez demander fr33tux celà a duré plusieurs heures et surprise toujours de google chrome alors que je l'ai désinstallé bizarre . voici l rapport de scan

# Mode: Scan # Support : https://www.malwarebytes.com/support



***** [ Services ] ***...

bonjour,

je viens d'en refaire un.le voici

https://up2sha.re/file?f=cO5XbxaUs12n

I created new firefox profile using Profile Manager, then I copied all files fromt the old profile to the new one. AdwCleaner did not detect any suspicious files in that new profile folder, so I guess I'm good?

Bonsoir

Ci joint les 2 fichiers

Merci pour votre implication

https://up2sha.re/file?f=1MzKOYnH3tfh

https://up2sha.re/file?f=p73CQ6rh1vZ8

Hello,

Thanks M-K-D-B, sorry for misunderstanding.

@Simplex: Can you zip me the folder "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1" and your profile: "4ui6vnjc.Simplex" ? I'll merge the two so that you'll find a clean profile, and you will be able to clean with AdwCleaner the malicious one.

Thanks,

You're right, nice catch! But that really is my main firefox profile. Did malware hacked its name, or what?

I searech for this profile ID and found in int he following places:

c:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41a66e7e5ee1

c:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41a66e7e5ee1

I am certain that when I told adwcleaner to delete this folder, my firefox pro...

This element seems to be a FP caused by a generic detection.  

Sorry, but I don't think so.

There are  - only at the german TB forum - at least 50 topics with this ff profilename "41A66E7E5EE1".

Usually, every ff profilename is almost unique, 41A66E7E5EE1 isn't unique.

It is related to Yondoo browser hijacker, I've seen multiple topics with this variant.

my suggestion:

Check profiles.i...

Hi all.

I googled before asking but never found anything relevant... So AdwCleaner found 1 threat, this is what is says:

Firefox pref Found:  [E:\Profiles\Firefox\prefs.js] - "extensions.quick_start.sd.closeWindowWithLastTab_prev_state" -  false

Anyone knows what this config option does and why is it dangerous?

Thanks.