Unable to delete Adware

Hey guys,

The scan works perfectly fine but after that the program doesn't react to any action. It doesn't freeze but the only think I can do is ticking files.

Edit: AV is deactivated

 

Log:

http://www.file-upload.net/download-11780634/AdwCleanerS10.txt.html

 

 

Key keeps coming back HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

on AdwCleaner by ****

The key below is marked by adwcleaner as PUP.  When I delete it, It keeps coming back, no matter what I do.

I delete, reboot and it is back. I manually delete, run the scan again and it is gone. Howevever, it comes back in 15-30 minutes, even if I do not reboot.

This is the key:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} 

Is this somethin...

Re: BugFixxer

After removing all the apps I mentioned in my previous email, BugFixxer came back again!

I found another folder (this one located in C:\Window\SysWOW64) called Policies that is another hahomedia product. I've quarantined this (along with all the others) and used regedit to remove their entries in HKLM:SYSTEM:CurrentControlSet:Services.  At the moment my computer is OK, but let's wait another 2...

Any chance of getting my bookmarks back?

on AdwCleaner by ****

Hi! I can't do much with computers but I used AdwCleaner anyway and it ended up deleting(?) Google Chrome and Mozilla Firefox. (yeah, I'm not sure if it deleted or not, I've opened quarantine and there are a lot of stuff in there but I don't understand much of it) I'd be fine without Chrome and Mozilla since I downloaded Opera and it runs much smoother but I really need some of my bookmarks. Ca...

AdwCleaner v5.201 > False Positives?

Bon Soir AdwCleaner software development experts,

I ran your tool for the first time today and I have a few 3 concerns [A, B & C]:

 

A. I noticed that it flags 2 Chrome extensions:

  1. ScriptBlock [ID: hcdjknjpbnhdoabbngpmfekaecnpajba] : https://chrome.google.com/webstore/detail/scriptblock/hcdjknjpbnhdoabbngpmfekaecnpajba?utm_source=chrome-app-launcher-info-dialog
  2. OneTab [ID: chphlpgkkbolifai...

Re: Adwcleaner broke my web browser

on AdwCleaner by ****

I don't know why it is French version but my network connection is fine and here is a report.

 

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015 Fichier d'export Registre :  Run by F at 10/7/2016 22:10:52 High Elevated Privileges : OK Windows 7 Ultimate Edition, 64-bit Service Pack 1 (Build 7601)

Recycle Bin emptied (00mn 03s) Prefetcher emptied

========== Elements ...

Re: Faux positif ? cknghehebaconkajgiobncfleofebcog

Ok.

Avant de passer à la suppression :

Est-ce qu'il est possible de me partager le fichier de préférences Chrome ?
C:\Users\Alexandre\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

 Merci,


fr33tux, 2016-07-06 20:59:34 (UTC)

Merci,

Re: Faux positif ? cknghehebaconkajgiobncfleofebcog

Bonjour,

Je ne connais pas ce dossier,il n'y a qu'un fichier de log à l'intérieur :

C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7\x64\DIFxInstallLog.txt

Un nouveau faux positif a fait son apparition :

***** [ Navigateurs ] *****

[C:\Users\Alexandre\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] trouvée : cknghehebaconkajgiobncfleofebcog [C:\Users\Alex...

Re: SearchScopes in my Internet Explorer Registry

on Disinfection by ****
# AdwCleaner v5.201 - Logfile created 06/07/2016 at 19:11:11 # Updated 30/06/2016 by ToolsLib # Database : 2016-07-06.1 [Server] # Operating system : Windows 10 Home  (X64) # Username : Aaron - AARON # Running from : C:\Users\Aaron\Downloads\adwcleaner_5.201.exe # Option : Scan # Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

***...

Re: Nettoyage suite à trojan

 

Super ! On va donc désinstaller les outils utilisés :

  • Téléchargez DelFix de Xplode sur votre bureau.
  • Exécutez-le
  • Cochez toutes les cases sauf "Effectuer une sauvegarde du registre"
  • Cliquez sur "Exécuter"
  • Lorsque les procédures seront terminées, l'outil va se fermer et disparaître du bureau
  • Un rapport s'ouvre, copiez son contenu dans votre prochaine réponse.

Vous pouvez maintenant finir...