Re: AdwCleaner deletes acestream but it reappears after Windows start-up

on Disinfection by ****

Here is the log :

Résultats de correction de Farbar Recovery Scan Tool (x86) Version:18-04-2016
Exécuté par Paul (2016-04-19 20:58:21) Run:1
Exécuté depuis C:\Users\Paul\Desktop
Profils chargés: Paul (Profils disponibles: Paul)
Mode d'amorçage: Normal

==============================================

fixlist contenu:
*****************
CreateRestorePoint:
CloseProcesses:
EmptyTemp:
S3 avchv; \S...

Re: AdwCleaner deletes acestream but it reappears after Windows start-up

Hello,

Great ! I reproduced the problem. It's due to Rox Player, which is really tendancious (showings random ads, not updated for a quite long time...).

I added the detections to AdwCleaner, and we'll remove it manually there.

Download the file fixlist.txt and save it as "fixlist.txt" to the Desktop or where FRST is located.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt...

Re: AdwCleaner deletes acestream but it reappears after Windows start-up

Yes, but your computer doesn't seem to have some remainings, so we need to spot what is re-creating this folder at each reboot.

Since I didn't see it with ZHPDiag, we'll try with FRST :

  1. Download FRST
  2. Right-click on the file -> "Execute as Administrator"
  3. Click on the "Scan" button
  4. The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
  5. Please host them on Up2Sha...

Re: AdwCleaner deletes acestream but it reappears after Windows start-up

on Disinfection by ****

Thank  you very much once again for your help. AdwCleaner is really a wonderful tool to eradicate malwares, and I have helped several friends to decontaminate their much-infected PCs with thiqs sofware whose scan is so fast and efficient.

Now I wonder if my problem with AceStream was purely individual or if I should report the presence of a malware, however mild it may be, on this download sit...

Re: Issue with Microsoft Edge

I agree, not sure why this is only affecting edge. Internet Explorer and Chrome still work fine. I have a generic admin account on the PC that has the same issue and I am able to send you this via IE. Since I dont use this computer I dont know if this has been an issue prior to the suspicious activity ofr if it is new.

Windows IP Configuration

   Host Name . . . . . . . . . . . . : user    P...

Re: Issue with Microsoft Edge

I agree, not sure why this is only affecting edge. Internet Explorer and Chrome still work fine. I have a generic admin account on the PC that has the same issue and I am able to send you this via IE. Since I dont use this computer I dont know if this has been an issue prior to the suspicious activity ofr if it is new.

Windows IP Configuration

   Host Name . . . . . . . . . . . . : user    P...

Re: False Positive? C:\ProgramData\mntemp

Although AdwCleaner detects mntemp as being a folder, it is actually an extensionless file. I don't see any other signs of SearchProtect on my PC. After the cleanup/reboot with AdwCleaner, the files are gone, but they are literally immediately recreated every time I launch Breakaway Audio Enhancer. I don't understand why SearchProtect would be linked to the launch of Breakaway. I really hope it...

False Positives ?

All these keys are releted to the codecs (Haali Media Splitter,DirectVobSub,ffdshow etc.) :

 

***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\CLSID\{90C7D10E-CE9A-479B-A238-1A0F2396DE43} Key Found : HKLM\SOFTWARE\Classes\CLSID\{93A22E7A-5091-45EF-BA61-6DA26156A5D0} Key Found : HKLM\SOFTWARE\Classes\CLSID\{9A98ADCC-C6A4-449E-A8B1-0363673D9F8A} Key Found : HKLM\SOFTWARE\Classes\CLSI...

Renewal of remote files.

Did the program AdwCleaner delete the program GCC how to recover files?

 

AdwCleaner[C1]

# AdwCleaner v5.033 - Отчёт создан 16/02/2016 в 20:35:10
# Обновлено 07/02/2016 by Xplode
# База данных : 2016-02-15.1 [Сервер]
# Операционная система : Microsoft Windows XP Service Pack 3 (x86)
# Пользователь : sasha - WAREZ-5A905019C
# Запущено из : E:\ФИЛЬМЫ\кино\AdwCleaner 5.033 Portable.exe
# Настр...