Search

Hello,

Please download and run the latest AdwCleaner's version ( v5.104 ). It should disinfect infected DNSApi.dll files. There was a bug in v5.103 which caused AdwCleaner to detect but not disinfect these files.

Regards.

Here we go : 

***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\microsoft\windows nt\currentversion\Image File Execution Options\MsMpEng.exe

Even if this .exe could result of some performance hit on some PC i don't think delete this registry will have good result for the OS. 

Win10 x64

So ?

La clé appartient a l'antivirus bitdefender: HKLM\SOFTWARE\microsoft\windows nt\currentversion\Image File Execution Options\bdagent.exe

Bonjour, apres etre restee longtemps sans ordi, enfin je vous reponds. je me suis trompee en exterminant tout une 1ere fois, mais en gardant l'analyse des 96 menaces. puis j'ai refait l'analyse et en voila le resultat.
Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'analyse: 21/03/2016
Heure de l'analyse: 13:16:24
Fichier journal: malware2.txt
Administrateur: Oui

Version: 2.2.0.1024...

I downloaded the new ADWCleaner 5.103 this morning, and ran it.  It found one registry key:

HKLM\SOFTWARE\microsoft\windows nt\currentversion\Image File Execution Options\egui.exe

I went to the key in the Registry, and the key has no value.

I have ESet Smart Security 8.0.319,0 installed, and I believe that this key could be part of the ESet registry setup. Could you tell me whether or not th...

Bonjour, je viens de m'inscrire car j'ai un résultat qui m'inquiète après analyse avec adwcleaner. D'habitude je sais quoi faire mais vu que la c'est dans le dossier windows je préfère pas me risquer à tout crasher sachant qu'en ce moment déjà il a des problème de démarrage.

Voici les fichiers en question :

Clé Trouvée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA3...

Hello,

Can you post AdwCleaner's cleaning report ?

Also, can you download RegToolExport, run it, then on the text field copy/paste this text :

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2

Click on "Exporter" then save the file to your desktop.

Please attach the exported file to your next reply.

Regards,

---

Xplode, 2016-03-19 19:49:52 (UTC)

I've fixed it now anyway!

Bonjour,

Ces clés sont-elles vraiment nuisibles ?

Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{0DC81A74-1FBD-4EF6-82B2-DE3FA05E8233}

Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{1B26E4A2-7F09-4365-9AB8-13E6891E42CB}

Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{21402197-BB5B-476C-AA1D-3FFED8ED813A}

Clé Trouvée : HKLM\SOFTWARE\Classes\Interface\{42E8D680-A18B-4CAA-ACE0-18EA05E4A056}

...

Hello,

@avonshire,

I added "RAVBg64" to processes whitelist. Please tell me if it's ok now.

@Kotoura55,

Please run again this version, not v5.102 which is online : http://sd-1.archive-host.com/membres/up/17959594961240255/AdwCleaner.exe

And post the content of the debug logfile.

Regards,

Hi Xplode, 

Downloaded ver. 5.102, ran it in debug mode but still getting BSOD. Also, debug txt file no longer created.