Search

Ok.

Can you manually uninstall "Rox Player" from the Windows Settings ?

Then,

1. Download CCleaner from here, and install it.
2. Start CCleaner (there should be a shortcut on your Desktop)
3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
4. Then in Options  tab > Surveillance, untick the both boxes.
5. In the Clean tab, click on "Clean".
6. When the cleanin...

Here is the log :

Résultats de correction de Farbar Recovery Scan Tool (x86) Version:18-04-2016
Exécuté par Paul (2016-04-19 20:58:21) Run:1
Exécuté depuis C:\Users\Paul\Desktop
Profils chargés: Paul (Profils disponibles: Paul)
Mode d'amorçage: Normal

==============================================

fixlist contenu:
*****************
CreateRestorePoint:
CloseProcesses:
EmptyTemp:
S3 avchv; \S...

Hello,

Thanks for your help !

The second BSOD is caused by the same processus. It's probably my fault, I made a mistake when I added this case to the database.. Can you retry now (with the v5.112) ? (and be sure to get a network connection to get the latest database update)

Best regards,

Hello,

Great ! I reproduced the problem. It's due to Rox Player, which is really tendancious (showings random ads, not updated for a quite long time...).

I added the detections to AdwCleaner, and we'll remove it manually there.

Download the file fixlist.txt and save it as "fixlist.txt" to the Desktop or where FRST is located.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt...

I redacted the links to your logfiles in your precedent message since they contained some "sensitive"/"private" informations.

I analyze the logfile and come back to you with more informations.

Hello,

Something else seems to recreate the key. I'll look with a ZHPDiag report :

• Download ZHPDiag from Nicolas on his website
• Then run it with administrator's rights (with right click)
• Then upload the log file on up2share (you will find it on your desktop, just drop the file on the upload zone)
• Then post the link in your reply

Best regards,

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

[-] File Deleted : C:\WINDOWS\SysWOW64\h@tkeysh@@k.dll

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}

***** [ Web browsers ] *****

*************...

OK Sorry,

I've never used this utility before, when I did as you asked, the following opened in Edge (which I never personally use) and I have zero idea what to upload, can you please explain further.  Also I may not reply for a few hours as I now have something I need to do http://screencast.com/t/XlvyzyRH8

It's the debug report for the scan mode, but nevertheless we'll use BlueScreenView, it will be easier for both of us :

Can you download BlueScreenView here, run it, then click on "View" , "HTML Report - All Items".

Then, upload the report here and post the link.

I don't think that is the correct file because the time isn't correct but I could be wrong so here it is:

2016-04-19 05:33:59 : [Notice]        Scan started 2016-04-19 05:33:59 : [Success]        Internet connection is UP 2016-04-19 05:34:01 : [Success]        Loaded C:\Users\Steve\AppData\Local\Temp\sqlite.dll 2016-04-19 05:34:01 : [Success]        Opened C:\AdwCleaner\adwcleaner.db 2016-04-1...