Hi everybody,
I'am in trouble with an infection from a infected installation (all files, archives, download... from this has been removed).
After cleaning all suspicious programs on my compture (with CCleaner), I have clean up all caches files and repair the registre with it.
In third I do scan and clean up with the lasted version of Malwarebytes ; ADWcleaner ; Rkill and UnHackMe. Juste Male...
<p>Cùng với Đại lộ Nguyễn Văn Linh mở ra cửa ngõ thông thương miền Tây với trung tâm Tp.HCM, Nguyễn Hữu Thọ được kỳ vọng là trục giao thông huyết mạch của khu Nam Sài Gòn. Là một phần của tuyến đường trục Bắc - Nam có điểm đầu là Quốc lộ 22 (An Sương) đến Hiệp Phước (Nhà Bè), đường Nguyễn Hữu T...
some google results say this is due to the free premium feature for 14days - true? also the registry warning inconsistently happens on the second pc too but the 90% cpu usage stuff doesnt (eventho both exact same as said before) should my adwcleaner find sth if 1pc is effected by a virus? edit2: just tested again on my second machine and i was wrong when "scan memory" starts the cpu there spike...
doublechecked too it goes likes this:
survey -> close browser -> run adwcleaner -> pups found -> dont repair -> open browser again AND delete cookies -> close browser -> run adw cleaner again -> no pups found - so 100% cookie related - probably just gathering personal data via those i would guess and making profit over those eventho they pay you for survey
Hi,
Probably a false positive:
# -------------------------------
# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build: 04-27-2018
# Database: 2018-04-30.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 04-30-2018
# Duration: 00:00:11
# OS: Windows 7 Professional
# ...C'est OK pour ça ;)
Juste cette extension sur Firefox qui est douteuse :
FF Extension: (Flash Video Downloader) - C:\Users\pstar\AppData\Roaming\Mozilla\Firefox\Profiles\sovl3vhv.default\Extensions\artur.dubovoy@gmail.com.xpi [2018-03-29]
Bonjour,
Attention : tu dois prendre la version compatible avec ton système : 32 ou 64 bits.
32 ou 64 bits - Comment savoir ?
Bonjour, En lançant Rkill, il me détecte un truc bizarre à chaque fois savez-vous de quoi il peut s'agir ?
Performing miscellaneous checks:
* Modified HKCU\...\Winlogon: [Shell] => explorer.exe, C:\Users\AppData\Roaming\fibril.exe
* No issues found.
Quand je vais dans le chemin indiqué, il n'y a rien même dans les fichiers cachés...
Bonjour,
Attention : tu dois prendre la version compatible avec ton système : 32 ou 64 bits.
32 ou 64 bits - Comment savoir ?
