Search

Hello,

Ok. You may use DelFix to remove the other tools we used, and then it's done for me.

If you have any questions, don't hesitate to ask !

Best regards,

I have done that and I have also run AdwCleaner to see if the acestream fle was definitely deleted. Everything seemds to be OK.

I was far from thinking that the Roxplayer application did use the Acestream technology. Maybe the Acestream software has no malware itself (although the Magicplayer Firefox plugin has got a malware) but the Roxplayer software does have a malware.

Anyway I will no lo...

Ok.

Can you manually uninstall "Rox Player" from the Windows Settings ?

Then,

1. Download CCleaner from here, and install it.
2. Start CCleaner (there should be a shortcut on your Desktop)
3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
4. Then in Options  tab > Surveillance, untick the both boxes.
5. In the Clean tab, click on "Clean".
6. When the cleanin...

Here is the log :

Résultats de correction de Farbar Recovery Scan Tool (x86) Version:18-04-2016
Exécuté par Paul (2016-04-19 20:58:21) Run:1
Exécuté depuis C:\Users\Paul\Desktop
Profils chargés: Paul (Profils disponibles: Paul)
Mode d'amorçage: Normal

==============================================

fixlist contenu:
*****************
CreateRestorePoint:
CloseProcesses:
EmptyTemp:
S3 avchv; \S...

Hello,

Great ! I reproduced the problem. It's due to Rox Player, which is really tendancious (showings random ads, not updated for a quite long time...).

I added the detections to AdwCleaner, and we'll remove it manually there.

Download the file fixlist.txt and save it as "fixlist.txt" to the Desktop or where FRST is located.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt...

Thank you very much.

I redacted the links to your logfiles in your precedent message since they contained some "sensitive"/"private" informations.

I analyze the logfile and come back to you with more informations.

Here are the logfiles (sorry for the delay to answer) :

https://up2sha.re/file?f=XXXXXX

https://up2sha.re/file?f=XXXXX

OK, I started it, just so you know I got this message, going to run anyway and let you know the results, just wanted to post this in case of BSOD http://screencast.com/t/DZpUxbJv0EGY

OK BSOD again with the new version you provided, I uploaded the minidump https://up2sha.re/file?f=Bt0lHd36k7X6

Hello,

Something else seems to recreate the key. I'll look with a ZHPDiag report :

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then post the link in your reply

Best regards,