Search

Bjr fr33tux, c'est très juste, le rapport mentionne effectivement ces points. Merci et à bientôt.

Laurent.

ps : où et comment indiqué le sujet résolu et/ou clos ?

Bonjour,

Juste pour préciser un point en plus de l'explication de Destrio, le rapport contient toujours l'ensemble des sections (Services, fichiers, dossiers, registre, ...) qu'ils aient ou non des éléments détectés.

Merci,

Hi Xplode, sorry for dropping off the map like that. Life has been crazy.

Kaseya changed their paths; here's their current paths (I included our GUID, but other companies will have a different one):

C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\AgentMon.exe
C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\curl.exe
C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\DLLRunner32.exe
C:\P...

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-09-2016
Ran by samsung (14-09-2016 06:57:02) Run:1
Running from C:\Users\samsung\Desktop
Loaded Profiles: samsung (Available Profiles: samsung & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
[code]start
CreateRestorePoint:
bl (x32 Version: 1.0.0 - Your Company Name) ...

Eh.. I don't think my computer is free from them. My password just got deactivated again. Here is the DelFix content:

# DelFix v1.013 - Logfile created 11/09/2016 at 15:14:27
# Updated 17/04/2016 by Xplode
# Username : samsung - TEAMALPHA
# Operating System : Windows 10 Home  (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\AdwCleaner
Delet...

I used AdwCleaner v6.010 and it came up clean.  I used it ten days later and it came up with

*****  [ Registry ] *****

[ - ] Key deleted:  HKLM\SOFTWARE\Classes\SAVI.SAVI

[ - ] Key deleted:  HKLM\SOFTWARE\Classes\SAVI.SAVI.3

I checked in my control panel and I have had 4 programs installed on my computer during that time period:

NetBeans IDE 8.1

Java 8 Update 101 (64-bit)

Java SE Develop...

# AdwCleaner v6.010 - Logfile created 06/09/2016 at 10:27:47
# Updated on 12/08/2016 by ToolsLib
# Database : 2016-09-05.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : samsung - TEAMALPHA
# Running from : C:\Users\samsung\Downloads\adwcleaner_6.010.exe
# Mode: Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *...

I used adwcleaner to clean these viruses but they just keep on returning after boot-up.

Here are the names:

-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz

-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...

Hello,

Ok. So copy paste the following content in the settings.ini file (overwrite the current content):

[Properties]
Language=en
EulaAccepted=1

[Options]
DebugMode=1

Then, launch AdwCleaner as usual, do a scan and share the file mentionned above.

Best regards,

not sure if i did it right but here you go

https://up2sha.re/file?f=ZJuDDE319701