Re: Désinstallation de MPC Cleaner

J'avais pas vu ton PS, si adwcleaner ne trouve plus rien, et que ZHPFix dit avoir son boulot, on est bon pour terminer :

 

  1. Pour gagner un peu d'espace en supprimant des fichiers inutiles :
  • Télécharge et installe CCleaner --> lance le --> clique sur Nettoyeur --> Analyse --> Lancer le nettoyage --> OK.
  • Ensuite, clique sur "Options" --> "Surveillance" --> décoche toutes les cases liées à la su...

Re: AdwCleaner Report

DelFix report:

# DelFix v1.011 - Logfile created 13/12/2015 at 08:42:44
# Updated 18/08/2015 by Xplode
# Username : sjb - SJB-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activating UAC ... OK

~ Removing disinfection tools ...

Deleted : C:\AdwCleaner
Deleted : C:\TDSSKiller.2.8.16.0_04.04.2014_16.38.42_log.txt
Deleted : C:\TDSSKiller.3.0.0.28_04.04.2014_16.40.0...

Re: AdwCleaner Report

If reading the privously/lastly submitted ZHPFix report correctly, the Adobe Shockvawe 12.0 was removed according to the quote below:

"Recycle Bin emptied (07mn AMs)

========== Software ==========
REMOVES: Adobe Shockwave Player 12.0"

I was reffering to removal of ZHPFix itself in my Question while it was running the first time and generating report to desktop.

I have NO issues left anyway...

Re: False Positive for GeekBuddy

Seems to have been happening for awhile for geekbuddy

https://malwaretips.com/blogs/comodo-geekbuddy-removal/

Maybe your users can uncheck the removal of geekbuddy before cleaning, If they are sure it was installed for a legitimate program and not bundled with other software as mentioned in the article

Re: AdwCleaner Report

Here's the Report after running the ZHPFix tool, but didn't select the ZHPFix REMOVAL while it was running. Was I right?

Script ZHPFix:

O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {0099B484-C24C-4D5F-8167-B0F6DF196E72} ©
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited
HKCU\SOFTWARE\BitDefender
HKCU\SOFTWARE\McAfe...

Re: I'm not sure what to clean/remove.

Hi Chapi,

This is ZHPFixReport without using Drop-box opton:

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015 Fichier d'export Registre : Run by My Computer at 11/27/2015 2:39:30 PM High Elevated Privileges : OK Windows Vista Business Edition, 64-bit  (Build 6000)

Recycle Bin emptied (14mn AMs) Prefetcher emptied

========== Software ========== REMOVES: Kaspersky Secu...

Re: I'm not sure what to clean/remove.

Ok, so I've made a more detailled explanation (all the links refer to a picture with what to do) :

Re: I'm not sure what to clean/remove.

Hi,

Sadly, that's not what I'm waitting for. Here is an example of a ZHPFix script :

Rapport de ZHPFix 2015.10.19.9 par Nicolas Coolman, Update du 19/10/2015
Fichier d'export Registre : 
Run by Chapi at 27/11/2015 17:43:39
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Corbeille vidée (Annulé par l'utilisateur)


========== Récapitulatif =========...

Re: I'm not sure what to clean/remove.

Hi Chapi

Sorry about my confusing words, here's the ZHFixReport (1):

Script ZHPFix P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44} HKCU\SOFTWARE...

Re: I'm not sure what to clean/remove.

Here's the original script:

Script ZHPFix
P2 - EXT FILE: (...) -- C:\Users\My Computer\AppData\Roaming\Mozilla\Firefox\Profiles\8kyk8yzd.default-1436897542862\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi
HKCU\SOFTWARE\AppDataLow\Software\arcadeparlorconfig
O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\{65AB91D4-DDD0-48D4-804D-C24E1FC90D44}
HKCU\SOFTWARE\DriverSupport
O43 - CFD: 21/11/2015 - []...