Search

Hi from France :)

We will use ZHPFix, another tool from Nicolas Coolman, in order to remove what remains of those softwares and the little thing AdwCleaner missed.

• Go on the download page of ZhpFix, click on the blue button "Download Now".
• Save the file where do you want and launch it with right click : "launch as administrator".
• Follow the instructions during the installation.
• Then click ...

Hello,

All theses entries are about : toolbars, extensions and potentially unwanted programs.

You can remove them all by launching again AdwCleaner and choosing the cleaning button.

Can you then post here the cleanning report ?

As AdwCleaner only check for a category of malware, can you follow those instruction to make a deeper analysis of your computer :

• Download ZHPDiag from Nicolas on h...

Hello,

An administrator of the forum just forward me your message containing the log file. I understand your fears, but in that case, they are not founded. The developpers of the softwares that we use for curing computers on forum are conceived to be respectful of the user privacy. The only potentially private datas are : the name of the user, of the computer and a list of the software that yo...

Hello,

Ok. We'll do a small analysis to check something..

• Download RogueKiller here
• Execute the file "setup.exe" as Administrator (right-click on the file -> Execute as Administrator"
• The pre-scan will occur, please wait until it ends.
• Then click on [Scan] on the right hand corner. Wait until the scan finish.
• Finally, host the generated logfile on Up2Sha.re and copy/paste here the provide...

-Et voici la fin !

--\\ ShellIconOverlayIdentifiers (SIOI) (2) - 0s O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Extension d'environnement du périphérique d.) -- C:\Windows\System32\EhStorShell.dll © O106 - SIOI:  [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corpor...

Comme convenu voici Zhpdiag

Merci

Oswaldo

~ ZHPDiag v2015.11.1.160 Par Nicolas Coolman (2015/11/01) ~ Démarré par Administrateur (Administrator)  (2015/11/03 20:21:29) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version:  Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Administrateur\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Administrat...

Hello Alexander13,

If I understand, you have use ADWCleaner but this isn't enough ?

Can you please post the log file ?

To understand what's happening on your conputer, can you use ZHPDiag :

• Download ZHPDiag from Nicolas on his website.
• Then run it with administrator's rights (with right click).
• Then upload the log file on up2share.
• Then post the link in your reply.

With that log file we ...

Hello,

So, a few things needs to be removed :

- Please uninstall the followings programs first :

• AVG Web TuneUp
• Spybot - Search & Destroy
• SpywareTerminatorShield

- We need to remove other stuff manually :

• Download ZHPFix here,
• Copy the whole lines below, including "Script ZHPFix" :

Script ZHPFix:

O4 - HKLM\..\Run: [SpywareTerminatorShield] E:\Downloads\Spyware\4f50n.Spyware.Terminat...

Hello,

Indeed, still some elements need to be removed.

• Download ZHPFix here,
• Copy the whole lines below, including "Script ZHPFix" :

Script ZHPFix:

HKLM\SOFTWARE\Better Surf Plus
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wp-adinject-adk
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Media Player Packages
EmptyTemp

• Right-click on the ZHPFix -> "Start as Administr...

Thanks.

Please, we'll use another tool to check what AdwCleaner missed :

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share
• Then post the link in your reply

Regards,