ad hijacker not removed by any program - its hiding somewhere

on Désinfection by ****

Ugg... I have this stupid ad hijacker that i cannot find to remove and it is driving me crazy!   When browsing in Chrome  and you click on anything it opens a new tab wanting to you download some software to update files on your computer, or directs you to a buy a russian bride website, or tells you have a virus that must be removed in 60 seconds... if you get that one it locks up your computer...

Re: AdwCleaner v5.201 - Rapport créé le 31/07/2016 à 22:41:09

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre :
Run by client at 02/08/2016 08:02:21
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (10586)

Corbeille vidée (00mn 07s)
Dossier Prefetcher vidé

========== Processus mémoire ==========
SUPPRIMÉ: Memory Process: C:\Users\client\AppData\Roaming\inst.exe

=====...

Re: AdwCleaner v5.201 - Rapport créé le 31/07/2016 à 22:41:09

Bonjour,

Vous pouvez mettre à jour Windows 10 sans attendre, cela ne gênera pas le reste.

Je viens de relire le rapport, voici ce que je vous demande de faire dans un premier temps :

  • Si un raccourci portant le nom de ZHPFix sur trouve sur votre bureau, lancez-le.
  • Sinon, rendez-vous sur la page de téléchargement de ZHPFix, puis cliquez sur le bouton bleu "Nicolas Coolman - Télécharger" et in...

J'ai enfin réussi à booter sur ma framakey salix

j'ai enfin réussi à booter sur ma framakey salix,

 

donc je me suis embété pour rien sur les forums Nicolas Coolman, SosVirus, FAEI, FEI, PC Infopratique, Furum SalixOS, forum framakey (framagora), etc...

 

par contre, j'ai 2 suites de protection:

-comodo internet security premium by Comodo lien du site -> wwww.comodo.com

-Ad-Aware pro security by Avanquest (lavasoft est une marque d'avan...

Re: 1st time user, Should I delete the folowing windows files?

Thanks for the help...

# AdwCleaner v5.201 - Logfile created 01/08/2016 at 10:55:22
# Updated 30/06/2016 by ToolsLib
# Database : 2016-07-31.4 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (X64)
# Username : Owner - MYITP-SPARE-PC
# Running from : C:\Users\Owner\Desktop\adwcleaner_5.201.exe
# Option : Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****...

Re: 1st time user, Should I delete the folowing windows files? log

# AdwCleaner v5.201 - Logfile created 31/07/2016 at 15:11:51
# Updated 30/06/2016 by ToolsLib
# Database : 2016-07-31.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (X64)
# Username : Owner - MYITP-SPARE-PC
# Running from : C:\Users\Owner\Downloads\adwcleaner_5.201.exe
# Option : Scan
# Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] ***...

Re: Help...What is this?

# AdwCleaner v5.201 - Logfile created 30/07/2016 at 06:02:03 # Updated 30/06/2016 by ToolsLib # Database : 2016-07-21.2 [Local] # Operating system : Windows 7 Ultimate Service Pack 1 (X64) # Username : CQ62 - CQ62-PC # Running from : C:\Users\CQ62\Downloads\adwcleaner_5.201.exe # Option : Scan # Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ F...

Re: Help...What is this?

#2 

# AdwCleaner v5.201 - Logfile created 24/07/2016 at 03:15:42 # Updated 30/06/2016 by ToolsLib # Database : 2016-07-21.2 [Server] # Operating system : Windows 7 Ultimate Service Pack 1 (X64) # Username : CQ62 - CQ62-PC # Running from : C:\Users\CQ62\Downloads\adwcleaner_5.201.exe # Option : Clean # Support : https://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : rtop

*...

Re: Help...What is this?

my hronology of logs...

THE FIRST

 

# AdwCleaner v5.201 - Logfile created 24/07/2016 at 03:06:45 # Updated 30/06/2016 by ToolsLib # Database : 2016-07-21.2 [Server] # Operating system : Windows 7 Ultimate Service Pack 1 (X64) # Username : CQ62 - CQ62-PC # Running from : C:\Users\CQ62\Downloads\adwcleaner_5.201.exe # Option : Scan # Support : https://toolslib.net/forum

***** [ Services ] ***...

Re: Help...What is this?

HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh->C:\AdwCleaner\RegistryQuarantine\reg_ydizjatfjz.reg HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin->C:\AdwCleaner\RegistryQuarantine\reg_cbcvxanbun.reg HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}->C:\AdwCleaner\RegistryQuarantine\reg_owikavgyhh.reg H...