Search

Bjr fr33tux, c'est très juste, le rapport mentionne effectivement ces points. Merci et à bientôt.

Laurent.

ps : où et comment indiqué le sujet résolu et/ou clos ?

Bonjour,

Juste pour préciser un point en plus de l'explication de Destrio, le rapport contient toujours l'ensemble des sections (Services, fichiers, dossiers, registre, ...) qu'ils aient ou non des éléments détectés.

Merci,

Hi Xplode, sorry for dropping off the map like that. Life has been crazy.

Kaseya changed their paths; here's their current paths (I included our GUID, but other companies will have a different one):

C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\AgentMon.exe
C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\curl.exe
C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\DLLRunner32.exe
C:\P...

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-09-2016
Ran by samsung (14-09-2016 06:57:02) Run:1
Running from C:\Users\samsung\Desktop
Loaded Profiles: samsung (Available Profiles: samsung & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
[code]start
CreateRestorePoint:
bl (x32 Version: 1.0.0 - Your Company Name) ...

Eh.. I don't think my computer is free from them. My password just got deactivated again. Here is the DelFix content:

# DelFix v1.013 - Logfile created 11/09/2016 at 15:14:27
# Updated 17/04/2016 by Xplode
# Username : samsung - TEAMALPHA
# Operating System : Windows 10 Home  (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Delet...

I used AdwCleaner v6.010 and it came up clean.  I used it ten days later and it came up with

*****  [ Registry ] *****

[ - ] Key deleted:  HKLM\SOFTWARE\Classes\SAVI.SAVI

[ - ] Key deleted:  HKLM\SOFTWARE\Classes\SAVI.SAVI.3

I checked in my control panel and I have had 4 programs installed on my computer during that time period:

NetBeans IDE 8.1

Java 8 Update 101 (64-bit)

Java SE Develop...

Hi,

1.Ran avast! full scan-->no threats found.

2.Ran F-secure online scan-->1 threat removed

3.Ran eset online scan-->3 threats found, did not finish because the UI turned into black lines where the instructions were.

4.Ran MalwareBytesAntiMalware full scan (not the recommended one)-->no threats found.

5.Ran the latest AdwareCleaner-->15 threats found and cleaned, see the copy of log file....

# AdwCleaner v6.010 - Logfile created 06/09/2016 at 10:27:47
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-09-05.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : samsung - TEAMALPHA
# Running from : C:\Users\samsung\Downloads\adwcleaner_6.010.exe
# Mode: Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *...

I used adwcleaner to clean these viruses but they just keep on returning after boot-up.

Here are the names:

-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz

-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...

Hello,

You can keep the quarantined elements from now, we'll see to delete them when the problems will be solved.

You can make the test to restore the registry elements from AdwCleaner. I doubt it will restore your access to the safe-mode, but we'll see and we'll proceed according to your results.

Best regards,