Rechercher

Bonjour,

Un PUP nommé DriverAgentPlus installe ce fichier DRVAGENT64.SYS (DrvAgent32.sys sur un Windows 32 bits). Lien VirusTotal de l'analyse de l'installateur :

https://www.virustotal.com/fr/file/244b50458be045ec3ca37760b5a053e63b9dcdf93fcf8dc3890f4085ec63d9d1/analysis/1492370289/

# AdwCleaner v6.045 - Rapport créé le 16/04/2017 à 20:03:02
# Mis à jour le 28/03/2017 par Malwarebytes
# Bas...

I'm still having problems with Firefox, I think there's some URL malware that keeps infecting the shortcuts.

I uninstalled Firefox, deleted those folders causing problems ( C:\Users\Vaishnavi\AppData\Local\Firefox ) but still my shorcuts get infected with "www.qtipr.com". This doesn't just happen on startup. I have manually fixed the Target of the shortcuts but still after like an hour it gets...

# AdwCleaner v6.045 - Rapport créé le 15/04/2017 à 10:48:27 # Mis à jour le 28/03/2017 par Malwarebytes # Base de données : 2017-04-14.1 [Serveur] # Système d'exploitation : Windows 10 Home  (X64) # Nom d'utilisateur : antoine - DESKTOP-AGA2HP0 # Exécuté depuis : C:\Users\antoi\Downloads\adwcleaner_6.045.exe # Mode: Scan # Support : https://www.malwarebytes.com/support

***** [ Services ] **...

IT WORKED!!!

Thanks a lot. It completed the cleaning and rebooted.

Here's the log file: https://up2sha.re/file?f=Yq8OSrWpA6Kg

What about the folder I unchecked? Is it gonna cause any problems? (It was " C:\Users\Vaishnavi\AppData\Local\Firefox " when I scanned it)

Thanks again, had been trying to get rid of the malware for ages, helped me out a lot!

Hello,

Can you please try to uncheck the following element (in the folders tab) and then press the clean button.

• C:\Users\Vaishnavi\AppData\Roaming\Firefox

Please, tell me what happens.

Regards.

What criterias are you targeting Advanced System Care for more specificly? Their programs have saved my and my friends computers several times. It feels like there must be a reason for this? Your program and their program have been my 2 go to programs but now all of a sudden you remove it? Can you be really specific about why so that future users searching for this reason can understand why? It...

@NotAnnieMore: Please open your own topic, thanks!

Hello,

AkamaiHD installe d'autres logiciels douteux.

La suite :

• Rendez-vous sur la page de téléchargement de ZHPFix, puis cliquez sur le bouton bleu "Télécharger";
• Enregistrez le fichier sur votre bureau et lancez-le (par un clic-droit -> Exécuter en temps qu'administrateur);
• Laissez-vous guider pendant l'installation, à la fin, un raccourci se crée sur votre bureau, lancez-le (clic-droit ...

RogueKiller V12.10.2.0 (x64) [Mar 27 2017] (Gratuit) par Adlice Software

email : http://www.adlice.com/contact/

Remontées : https://forum.adlice.com

Site web : http://www.adlice.com/fr/download/roguekiller/

Blog : http://www.adlice.com

Système d'exploitation : Windows 10 (10.0.14393) 64 bits version

Démarré en  : Mode normal

Utilisateur : ALAIN [Administrateur]

Démarré depuis : C:\Pr...

I figure by now you probably have figured it out, but I came across this when I was still looking for answers.  3 hours later I was finally free of that crap. 

I basically ran malwarebytes (I turned on search for rootkits under settings just to be sure), AdwCleaner, HitmanPro until nothing was found before finally removing google chrome completely.  And the real problem was that the url redire...