Search

Bonjour,

Merci.

On va donc supprimer les éléments avec ZHPFix cette fois:

• Rendez-vous sur la page de téléchargement de ZHPFix, puis cliquez sur le bouton bleu "Nicolas Coolman - Télécharger".
• Enregistrez le fichier sur votre bureau et lancez-le (par un clic-droit -> Exécuter en temps qu'administrateur).
• Laissez-vous guider pendant l'installation, à la fin, un raccourci se crée sur le burea...

Hello,

We'll need to do a small search on your system:

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Enter AdwCleaner.jpg in the text-field
• Click on the "Search Files" button
• The logfile is saved as Search.txt
• Please host it on Up2Share and share the generated link.

Thanks,

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Hello,

Thanks M-K-D-B, sorry for misunderstanding.

@Simplex: Can you zip me the folder "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1" and your profile: "4ui6vnjc.Simplex" ? I'll merge the two so that you'll find a clean profile, and you will be able to clean with AdwCleaner the malicious one.

Thanks,

Bonjour,

Nous allons utiliser Farbar Recovery Scan Tool, voici la marche à suivre :

• Téléchargez FRST;
• Effectuez un clique-droit sur le fichier téléchargé, puis "Exécuter en tant qu'administrateur";
• Cliquez sur le bouton "Scan";
• Un rapport est sauvegardé, il se nomme "FRST.txt" et quelques informations supplémentaires sont proposées dans le fichier "Addition.txt";
• S'il vous plait, utilisez...

You're right, nice catch! But that really is my main firefox profile. Did malware hacked its name, or what?

I searech for this profile ID and found in int he following places:

c:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41a66e7e5ee1

c:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41a66e7e5ee1

I am certain that when I told adwcleaner to delete this folder, my firefox pro...

Hello,

Sorry I was unclear. You can deselect the element "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1" from the "Folders", and do a clean.

This element seems to be a FP caused by a generic detection.

Best regards,

Hello, this is my fist post. AdwCleaner is an amazing tool which saved my skin multiple times, but now I have an issue.

This is from the log:

***** [ Folders ] *****

Folder Found:  C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1

When I don't uncheck it, then AdwCleaner removes my whole Firefox profile folder, so I lose all my seetings, browsing history, etc. I had to ...

 Sorry Administrator, please find attached again.

Though it says deleted, but it always there when I scan it again and again.

Thank you.

# AdwCleaner v6.030 - Logfile created 22/10/2016 at 18:13:41
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-10-22.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : Robin
# Running from : C:\Users\Robin\Downloads\downloads\adwcl...

Greetings,

Sorry for the late answer.

Firstly, I'll need you to run a scan with AdwCleaner:

• Download AdwCleaner from here: https://toolslib.net/downloads/viewdownload/1-adwcleaner/
• Launch it and then click on "Scan" button;
• At the end of the scan, a logfile will be generated;
• Please, click on "Logfile" button;
• Then, double-click on the most recent entry from the list and past its content...