Re: HELP !! infecté par hijack.autoconfigurl qui a ensuite chargé d'autres daubes.......

le voici FR33TUX

https://justpaste.it/adwcleaner

j'ai aussi des soucis avec un SW supposé nettoyer les malwares SpyHunter et un autre RegHunter qui doit réparer les registres. Impossible de les désinstaller... Ras le bol des PCs :-(

Re: Scan result

on AdwCleaner by ****

My relationship is what I had linked the beginning of this topic, in the first post, which is different than the one shown by "skorp22"; to be clear to 100% copy it and paste it directly here:

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------

# AdwCleaner v5.032 - Creato f...

Re: adwcleaner_5.029 can not identify and delete newpoptab.com

Hello,

Ok, thanks !

I encourage you to use DelFix to remove every tool you used :

  • Download DelFix from Xplode on your desktop.
  • Launch it with administrator rights.
  • Select all the option except the one proposing to save the registry.
  • Then click on the "Execute" button.
  • When everything is finish, the software will close itself.
  • Then a report appear on the notepad, please copy paste it's c...

Re: Too Many Steps? Help!

Hello,

I'm going to help you to scan and disinfect your computer. I'm not an english native speaker, and I might be unclear, if so, don't hesitate to ask for more details.

First can you do a scan with AdwCleaner and post here the repport :

  • Download AdwCleaner from Xplode on your desktop.
  • Launch in and accept the Terms of Service.
  • Then click on the "Scan" button and wait during the scan.
  • A...

Re: adwcleaner_5.029 can not identify and delete newpoptab.com

Ok. I do that.

I opened with notepad, and paste it at link that you sugested.

I try to find in that file "newpoptab"

but no find that string.

Thanks for the great interest granted.

Hope to identify that stupid adware.

Re: adwcleaner_5.029 can not identify and delete newpoptab.com

Hello,

We'll need to dig a little bit further :

  1. Launch Firefox
  2. Open the menu, click on "Help", "Troubleshooting information".
  3. In the row "Profile Directory", click on "Show folder"
  4. A file is named "prefs.js" (it may be shown as "prefs" only). Please open it, and copy/paste the content here : http://pad.fr33tux.org/p/_ovidiusava

Thanks,

Re: CRITICAL_PROCESS_DIED

Hello,

Press Windows + R , then type eventvwr.msc /s

Search for events related to "Critical process died" ( it should be under "Critical category" )

Can you tell me if you find events related to it ? If so, can you provide me with those informations ( double click on the event, then on "Details" and copy/paste the content )

Regards,

Re: False Positive - C:\Ap

Hello,

Ah! :)  How can I delete the original quarantine files.  I no longer have access, and I restored via copy and paste then renamed the .vir extension via batch.  Now I no longer have access to the original quarantine directory to delete it.


level2, 2016-01-05 00:36:28 (UTC)

You should use the quarantine manager instead. Please refer to the documentation to see how to use it.

Regards,

Re: False Positive - C:\Ap

Ah! :)  How can I delete the original quarantine files.  I no longer have access, and I restored via copy and paste then renamed the .vir extension via batch.  Now I no longer have access to the original quarantine directory to delete it.

Re: Nettoyage en profondeur ...

Bonsoir FR33TUX

je t'ai posté le rapport ZHPDIAG sous PasteBin   http://pastebin.com/bAxTgTmk

Johan