Search

Thank you very much.

I redacted the links to your logfiles in your precedent message since they contained some "sensitive"/"private" informations.

I analyze the logfile and come back to you with more informations.

Here are the logfiles (sorry for the delay to answer) :

https://up2sha.re/file?f=XXXXXX

https://up2sha.re/file?f=XXXXX

OK, I started it, just so you know I got this message, going to run anyway and let you know the results, just wanted to post this in case of BSOD http://screencast.com/t/DZpUxbJv0EGY

OK BSOD again with the new version you provided, I uploaded the minidump https://up2sha.re/file?f=Bt0lHd36k7X6

Hello,

Something else seems to recreate the key. I'll look with a ZHPDiag report :

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then post the link in your reply

Best regards,

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

[-] File Deleted : C:\WINDOWS\SysWOW64\h@tkeysh@@k.dll

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}

***** [ Web browsers ] *****

*************...

The file which has been opened by Edge is the BlueScreenView report (you can see the path to the file in the adressbar on the top).

Can you copy this file to your Desktop : C:\WINDOWS\Minidump\041916-112203-01.dmp and create a zip archive from this file ?

Then, host it on https://up2sha.re, and paste here the generated link.

Best regards,

OK Sorry,

I've never used this utility before, when I did as you asked, the following opened in Edge (which I never personally use) and I have zero idea what to upload, can you please explain further.  Also I may not reply for a few hours as I now have something I need to do http://screencast.com/t/XlvyzyRH8

It's the debug report for the scan mode, but nevertheless we'll use BlueScreenView, it will be easier for both of us :

Can you download BlueScreenView here, run it, then click on "View" , "HTML Report - All Items".

Then, upload the report here and post the link.

I don't think that is the correct file because the time isn't correct but I could be wrong so here it is:

2016-04-19 05:33:59 : [Notice]        Scan started 2016-04-19 05:33:59 : [Success]        Internet connection is UP 2016-04-19 05:34:01 : [Success]        Loaded C:\Users\Steve\AppData\Local\Temp\sqlite.dll 2016-04-19 05:34:01 : [Success]        Opened C:\AdwCleaner\adwcleaner.db 2016-04-1...