Lag, video freezing, porn page, ads ...

Solved
Walte_White Posted messages 1 Status Member -  
 Anonymous user -
Hello everyone
I'll explain my situation: I have porn pages and ads popping up all the time (like Citroën, how to make money easily, etc.)... everywhere on my internet, the videos on the side on YouTube no longer appear, as well as the comments, and videos generally freeze (for example, I visit a site and the page I'm on loads and it sends me to another site^^, etc.)
What software or method do you recommend to clean everything up effectively?
Thanks: PS I'm not a tech expert, but with a good tutorial, I can usually follow the instructions fairly well; the only problem is that I don't know the nature of my issues ^^

7 answers

  1. Anonymous user
     
    Good evening

    Download AdwCleaner (by Xplode) to your desktop.
    Launch it, click on [Scan] and wait for the scan to complete.
    Once the scan is finished, click on the [Clean] button
    Wait during the cleaning process. Read the message that appears, then click on Ok. The PC will be restarted automatically and the report will open at the end of the restart.
    Post the report

    Note: The report is also saved under C:\AdwCleaner[S1].txt

    To read:
    Toolbars are not mandatory (by Malekal): https://forum.malekal.com/viewtopic.php?t=6173&start=
    Potentially unwanted programs:
    https://forum.malekal.com/viewtopic.php?t=33776&start=
    https://www.malekal.com/adwares-pup-protection/

    See you later

    --
    --------Security Contributor---------
    We have all been beginners at something at some point.
    But knowledge is the reward of diligence.
    0
  2. walter_white
     
    # AdwCleaner v3.013 - Report created on 30/11/2013 at 03:26:29
    # Updated on 24/11/2013 by Xplode
    # Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username: Yuyu - YUYU-HP
    # Executed from: C:\Users\Yuyu\Desktop\AdwCleaner(1).exe
    # Option: Clean

    ***** [ Services ] *****

    ***** [ Files / Folders ] *****

    Folder Deleted: C:\Kreapixel
    Folder Deleted: C:\ProgramData\Babylon
    Folder Deleted: C:\ProgramData\DSearchLink
    Folder Deleted: C:\Program Files (x86)\Nosibay
    Folder Deleted: C:\Program Files (x86)\Pricora
    Folder Deleted: C:\Users\Yuyu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
    Folder Deleted: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\Extensions\***@***
    Folder Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
    Folder Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
    [!] Folder Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
    File Deleted: C:\Windows\System32\roboot64.exe
    File Deleted: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\invalidprefs.js
    File Deleted: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\user.js
    File Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
    File Deleted: C:\Windows\Tasks\Pricora-chromeinstaller.job
    File Deleted: C:\Windows\System32\Tasks\Pricora-chromeinstaller
    File Deleted: C:\Windows\Tasks\Pricora-codedownloader.job
    File Deleted: C:\Windows\System32\Tasks\Pricora-codedownloader
    File Deleted: C:\Windows\Tasks\Pricora-enabler.job
    File Deleted: C:\Windows\System32\Tasks\Pricora-enabler
    File Deleted: C:\Windows\Tasks\Pricora-firefoxinstaller.job
    File Deleted: C:\Windows\System32\Tasks\Pricora-firefoxinstaller
    File Deleted: C:\Windows\Tasks\Pricora-updater.job
    File Deleted: C:\Windows\System32\Tasks\Pricora-updater

    ***** [ Shortcuts ] *****

    ***** [ Registry ] *****

    Value Deleted: [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
    Value Deleted: [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
    Value Deleted: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [***@***]
    Key Deleted: HKLM\SOFTWARE\Classes\Prod.cap
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1 (2)_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1 (2)_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\toolbar_vit_sweetim_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\toolbar_vit_sweetim_RASMANCS
    Key Deleted: HKCU\Software\5b53d88db539ee43
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_acdsee-photo-manager_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_acdsee-photo-manager_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_getdataback-for-ntfs_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_getdataback-for-ntfs_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_scp-087_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_scp-087_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_xvid4psp_RASAPI32
    Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_xvid4psp_RASMANCS
    Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
    Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
    Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Key Deleted: HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
    Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
    Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
    Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
    Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
    Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{079ef96e-3627-4d2f-b3dc-def690432851}
    Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6f15bdd9-b74d-4caf-a596-1be5e47d642a}
    Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77228d07-6d64-4bd0-8867-7f93a50ddc1b}
    Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93c3395a-d228-438b-b8d4-aa8c71a898b9}
    Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b8e781bb-da64-4917-8720-dce316e57975}
    Key Deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Key Deleted: HKCU\Software\Iminent
    Key Deleted: HKCU\Software\installedbrowserextensions
    Key Deleted: HKCU\Software\Nosibay
    Key Deleted: HKCU\Software\AppDataLow\Software\Crossrider
    Key Deleted: HKCU\Software\AppDataLow\Software\Pricora
    Key Deleted: HKCU\Software\AppDataLow\Software\simplytech
    Key Deleted: HKLM\Software\DataMngr
    Key Deleted: HKLM\Software\Iminent
    Key Deleted: HKLM\Software\Pricora
    Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pricora
    Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

    ***** [ Browsers ] *****

    -\\ Internet Explorer v10.0.9200.16736

    -\\ Mozilla Firefox v25.0.1 (fr)

    [ File: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\prefs.js ]

    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.InstallationThankYouPage", false);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.InstallationTime", 1381080066);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.active", true);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.addressbar", "NA");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.addressbarenhanced", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncdb_dbWasSet", true);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncdb_dbWasSet_FF25_FIX", true);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncinternaldb_dbWasSet", true);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncinternaldb_dbWasSet_FF25_FIX", true);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.backgroundver", 4);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.certdomaininstaller", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.changeprevious", false);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.InstallationTime.value", "1381080066");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_aoi.value", "%221384814679%22");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_parent_zoneid.value", "%22244137%22");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_zoneid.value", "%22427675%22");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.jw_token.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.jw_token.value", "%225a781983-4c64-0199-86d4-df203f4a73b8%22");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.load_balancer.expiration", "Sat Nov 30 2013 09:21:20 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.load_balancer.value", "%22%7B%20%5C%22Status%5C%22%3A%201%2C%5C%22Endpoint%5C%22%3A%20%5C%2[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.previous_page.value", "%22hxxps%3A//www.facebook.com/%22");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.user_id.value", "%22136d45732061261114e6a2fe0dcc0610%22");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.description", "Services extension");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.domain", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.enablesearch", false);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.homepage", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.iframe", false);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000152%22%2C%22sub_id%22%3A%220%2[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%2256EBE77F874745CBB246[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_appVer.value", "139");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_lastVersion.value", "62");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_meta.value", "%7B%22cssOffre.css%22%3A%7B%22id%22%3A374976%2C%22ver%22%3A62%2[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_nextCheck.expiration", "Sat Nov 30 2013 09:21:19 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_nextCheck.value", "true");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_queue.value", "%7B%7D");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_resource_374976.expiration", "Tue Feb 18 2014 23:33:10 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_resource_374976.value", "%22%5Cr%5Cn%23offre_conteneur%7B%5Cr%5Cn%5Ct-moz-use[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb._country_code_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb._country_code_.value", "%22FR%22");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3Anull%2C%22i[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.monetization_plugin_last_executable_request.expiration", "Sat Nov 30 2013 14:33:04 GMT+[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//m.xp1.ru4.com/activity[...]
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.lastDailyReport", "1385778078985");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.lastUpdate", "1385778078485");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.manifesturl", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.name", "Pricora");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.newtab", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.opensearch", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/35329/plugins/093/ff/plugins.json");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.pluginsversion", 76);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.publisher", "Corporate Inc");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.searchstatus", 0);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.setnewtab", false);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.thankyou", "");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.updateinterval", 360);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.ver", 139);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.apps", "35329");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.bic", "136d45732061261114e6a2fe0dcc0610");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.cid", 35329);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.firstrun", false);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.hadappinstalled", true);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.installationdate", 1381080064);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.modetype", "production");
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.reportInstall", true);
    Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.statsDailyCounter", 147);
    Line Deleted: user_pref("extensions.crossrider.bic", "136d45732061261114e6a2fe0dcc0610");
    Line Deleted: user_pref("extensions.delta.admin", false);
    Line Deleted: user_pref("extensions.delta.aflt", "babsst");
    Line Deleted: user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
    Line Deleted: user_pref("extensions.delta.autoRvrt", "false");
    Line Deleted: user_pref("extensions.delta.dfltLng", "fr");
    Line Deleted: user_pref("extensions.delta.excTlbr", false);
    Line Deleted: user_pref("extensions.delta.ffxUnstlRst", true);
    Line Deleted: user_pref("extensions.delta.id", "0e6d15220000000000002c41388c7d22");
    Line Deleted: user_pref("extensions.delta.instlDay", "15984");
    Line Deleted: user_pref("extensions.delta.instlRef", "sst");
    Line Deleted: user_pref("extensions.delta.newTab", false);
    Line Deleted: user_pref("extensions.delta.prdct", "delta");
    Line Deleted: user_pref("extensions.delta.prtnrId", "delta");
    Line Deleted: user_pref("extensions.delta.rvrt", "false");
    Line Deleted: user_pref("extensions.delta.smplGrp", "none");
    Line Deleted: user_pref("extensions.delta.tlbrId", "base");
    Line Deleted: user_pref("extensions.delta.tlbrSrchUrl", "");
    Line Deleted: user_pref("extensions.delta.vrsn", "1.8.24.6");
    Line Deleted: user_pref("extensions.delta.vrsnTs", "1.8.24.613:04:57");
    Line Deleted: user_pref("extensions.delta.vrsni", "1.8.24.6");
    Line Deleted: user_pref("extensions.delta_i.babExt", "");
    Line Deleted: user_pref("extensions.delta_i.babTrack", "affID=123702&tsp=5027");
    Line Deleted: user_pref("extensions.delta_i.srcExt", %22);
    0
  3. Anonymous user
     
    Re

    Download Malwarebytes Anti-Malware here
    https://www.malwarebytes.com/

    * Install it (make sure to choose "French"; do not change the installation settings) and update it.

    * Go through the tutorial to familiarize yourself with the program:

    https://forum.pcastuces.com/sujet.asp?f=31&s=3

    (That said, it is very easy to use).

    Restart Malwarebytes by carefully following these instructions:

    ! Disconnect and close all running applications!

    * Launch Malwarebytes. On Vista, Seven or Windows 8 (right-click "run as administrator")

    * Proceed with an update

    * Perform a "Quick" scan

    --> Let the program work (and do not use the PC for anything else during the scan).
    --> At the end, click on "Show results".
    --> Make sure all infected items are checked, then click on "remove selected".

    Note: if you need to restart your PC to finish cleaning, do it!

    Post the saved report after deleting the infected items (in the "report/log" tab of Malwarebytes, the most recent one)

    See you later

    --
    --------Security Contributor---------
    We have all been beginners at something at some point.
    But knowledge is the reward for diligence.
    0
  4. walter_white
     
    Malwarebytes Anti-Malware 1.75.0.1300
    www.malwarebytes.org

    Database version: v2013.11.30.03

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 10.0.9200.16736
    Yuyu :: YUYU-HP [administrator]

    30/11/2013 13:43:25
    mbam-log-2013-11-30 (13-43-25).txt

    Scan type: Quick scan
    Enabled scan options: Memory | Startup | Registry | File system | Heuristic/Extra | Heuristic/Shuriken | PUP | PUM
    Disabled scan options: P2P
    Item(s) scanned: 257160
    Elapsed time: 9 minute(s), 38 second(s)

    Memory processes detected: 0
    (No harmful items detected)

    Memory modules detected: 0
    (No harmful items detected)

    Registry key(s) detected: 0
    (No harmful items detected)

    Registry value(s) detected: 0
    (No harmful items detected)

    Registry data item(s) detected: 0
    (No harmful items detected)

    Folder(s) detected: 0
    (No harmful items detected)

    File(s) detected: 0
    (No harmful items detected)

    (end)

    And YouTube is now loading recommended videos and comments normally actually ^^ Thanks a lot
    0
  5. Anonymous user
     
    Hello

    We are finalizing.

    Download DelFix from Xplode

    Run it.
    You have 5 choices:

    Reactivate UAC
    Remove disinfection tools (checked by default)

    Make a registry backup
    Clean system restore
    Factory reset

    Check the ones in bold
    and execute
    The report is usually found here
    C:\DelFix.txt

    The rest of the security: http://forum.malekal.com/comment-securiser-son-ordinateur.html

    @+
    --
    --------Security Contributor---------
    We have all been beginners at something.
    But knowledge is the reward of diligence.
    0
  6. walter_white
     
    Re
    # DelFix v10.6 - Report created on 30/11/2013 at 14:54:38
    # Updated on 11/11/2013 by Xplode
    # Username: Yuyu - YUYU-HP
    # Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)

    ~ UAC activation ... OK

    ~ Removal of disinfecting tools ...

    Deleted: C:\Qoobox
    Deleted: C:\ZHP
    Deleted: C:\AdwCleaner
    Deleted: C:\Program Files (x86)\ZHPDiag
    Deleted: C:\ComboFix.txt
    Deleted: C:\PhysicalDisk0_MBR.bin
    Deleted: C:\Users\Yuyu\Desktop\AdwCleaner(1).exe
    Deleted: C:\Users\Public\Desktop\MBRCheck.lnk
    Deleted: C:\Users\Public\Desktop\ZHPDiag.lnk
    Deleted: C:\Users\Public\Desktop\ZHPFix.lnk
    Deleted: C:\Windows\grep.exe
    Deleted: C:\Windows\PEV.exe
    Deleted: C:\Windows\NIRCMD.exe
    Deleted: C:\Windows\MBR.exe
    Deleted: C:\Windows\SED.exe
    Deleted: C:\Windows\SWREG.exe
    Deleted: C:\Windows\SWSC.exe
    Deleted: C:\Windows\SWXCACLS.exe
    Deleted: C:\Windows\Zip.exe
    Deleted: HKLM\SOFTWARE\AdwCleaner
    Deleted: HKLM\SOFTWARE\Swearware
    Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
    Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

    ~ System restore purge ...

    Deleted: RP #118 [Scheduled checkpoint | 11/30/2013 04:18:56]
    Deleted: RP #119 [Windows Update | 11/30/2013 04:42:25]

    New restore point created!

    ########## - EOF - ##########

    There you go, thanks for everything and for the useful links
    0
  7. Anonymous user
     
    Re

    I suggest we mark this topic as resolved

    @+

    --
    --------Security Contributor---------
    We've all been beginners at something at some point.
    But knowledge is the reward for diligence.
    0