Lag, video freezing, porn page, ads ...
Solved
Walte_White
Posted messages
1
Status
Member
-
Anonymous user -
Anonymous user -
Hello everyone
I'll explain my situation: I have porn pages and ads popping up all the time (like Citroën, how to make money easily, etc.)... everywhere on my internet, the videos on the side on YouTube no longer appear, as well as the comments, and videos generally freeze (for example, I visit a site and the page I'm on loads and it sends me to another site^^, etc.)
What software or method do you recommend to clean everything up effectively?
Thanks: PS I'm not a tech expert, but with a good tutorial, I can usually follow the instructions fairly well; the only problem is that I don't know the nature of my issues ^^
I'll explain my situation: I have porn pages and ads popping up all the time (like Citroën, how to make money easily, etc.)... everywhere on my internet, the videos on the side on YouTube no longer appear, as well as the comments, and videos generally freeze (for example, I visit a site and the page I'm on loads and it sends me to another site^^, etc.)
What software or method do you recommend to clean everything up effectively?
Thanks: PS I'm not a tech expert, but with a good tutorial, I can usually follow the instructions fairly well; the only problem is that I don't know the nature of my issues ^^
7 answers
-
Good evening
Download AdwCleaner (by Xplode) to your desktop.
Launch it, click on [Scan] and wait for the scan to complete.
Once the scan is finished, click on the [Clean] button
Wait during the cleaning process. Read the message that appears, then click on Ok. The PC will be restarted automatically and the report will open at the end of the restart.
Post the report
Note: The report is also saved under C:\AdwCleaner[S1].txt
To read:
Toolbars are not mandatory (by Malekal): https://forum.malekal.com/viewtopic.php?t=6173&start=
Potentially unwanted programs:
https://forum.malekal.com/viewtopic.php?t=33776&start=
https://www.malekal.com/adwares-pup-protection/
See you later
--
--------Security Contributor---------
We have all been beginners at something at some point.
But knowledge is the reward of diligence. -
# AdwCleaner v3.013 - Report created on 30/11/2013 at 03:26:29
# Updated on 24/11/2013 by Xplode
# Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)
# Username: Yuyu - YUYU-HP
# Executed from: C:\Users\Yuyu\Desktop\AdwCleaner(1).exe
# Option: Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted: C:\Kreapixel
Folder Deleted: C:\ProgramData\Babylon
Folder Deleted: C:\ProgramData\DSearchLink
Folder Deleted: C:\Program Files (x86)\Nosibay
Folder Deleted: C:\Program Files (x86)\Pricora
Folder Deleted: C:\Users\Yuyu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
Folder Deleted: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\Extensions\***@***
Folder Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
Folder Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
[!] Folder Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\algmakeomkafjglfhpomolfhjppoojff
File Deleted: C:\Windows\System32\roboot64.exe
File Deleted: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\invalidprefs.js
File Deleted: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\user.js
File Deleted: C:\Users\Yuyu\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Deleted: C:\Windows\Tasks\Pricora-chromeinstaller.job
File Deleted: C:\Windows\System32\Tasks\Pricora-chromeinstaller
File Deleted: C:\Windows\Tasks\Pricora-codedownloader.job
File Deleted: C:\Windows\System32\Tasks\Pricora-codedownloader
File Deleted: C:\Windows\Tasks\Pricora-enabler.job
File Deleted: C:\Windows\System32\Tasks\Pricora-enabler
File Deleted: C:\Windows\Tasks\Pricora-firefoxinstaller.job
File Deleted: C:\Windows\System32\Tasks\Pricora-firefoxinstaller
File Deleted: C:\Windows\Tasks\Pricora-updater.job
File Deleted: C:\Windows\System32\Tasks\Pricora-updater
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted: [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Value Deleted: [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Value Deleted: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [***@***]
Key Deleted: HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\HPSF_Tasks_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1 (2)_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1 (2)_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\toolbar_vit_sweetim_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\toolbar_vit_sweetim_RASMANCS
Key Deleted: HKCU\Software\5b53d88db539ee43
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_acdsee-photo-manager_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_acdsee-photo-manager_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_getdataback-for-ntfs_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_getdataback-for-ntfs_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_scp-087_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_scp-087_RASMANCS
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_xvid4psp_RASAPI32
Key Deleted: HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_xvid4psp_RASMANCS
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{079ef96e-3627-4d2f-b3dc-def690432851}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6f15bdd9-b74d-4caf-a596-1be5e47d642a}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77228d07-6d64-4bd0-8867-7f93a50ddc1b}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93c3395a-d228-438b-b8d4-aa8c71a898b9}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b8e781bb-da64-4917-8720-dce316e57975}
Key Deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Deleted: [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Deleted: HKCU\Software\Iminent
Key Deleted: HKCU\Software\installedbrowserextensions
Key Deleted: HKCU\Software\Nosibay
Key Deleted: HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted: HKCU\Software\AppDataLow\Software\Pricora
Key Deleted: HKCU\Software\AppDataLow\Software\simplytech
Key Deleted: HKLM\Software\DataMngr
Key Deleted: HKLM\Software\Iminent
Key Deleted: HKLM\Software\Pricora
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pricora
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16736
-\\ Mozilla Firefox v25.0.1 (fr)
[ File: C:\Users\Yuyu\AppData\Roaming\Mozilla\Firefox\Profiles\envz0gh7.default\prefs.js ]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.InstallationThankYouPage", false);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.InstallationTime", 1381080066);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.active", true);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.addressbar", "NA");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.addressbarenhanced", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncdb_dbWasSet", true);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncdb_dbWasSet_FF25_FIX", true);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncinternaldb_dbWasSet", true);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.asyncinternaldb_dbWasSet_FF25_FIX", true);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.backgroundver", 4);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.certdomaininstaller", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.changeprevious", false);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.InstallationTime.value", "1381080066");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_aoi.value", "%221384814679%22");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_parent_zoneid.value", "%22244137%22");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie._GPL_zoneid.value", "%22427675%22");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.jw_token.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.jw_token.value", "%225a781983-4c64-0199-86d4-df203f4a73b8%22");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.load_balancer.expiration", "Sat Nov 30 2013 09:21:20 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.load_balancer.value", "%22%7B%20%5C%22Status%5C%22%3A%201%2C%5C%22Endpoint%5C%22%3A%20%5C%2[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.previous_page.value", "%22hxxps%3A//www.facebook.com/%22");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.cookie.user_id.value", "%22136d45732061261114e6a2fe0dcc0610%22");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.description", "Services extension");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.domain", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.enablesearch", false);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.homepage", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.iframe", false);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000152%22%2C%22sub_id%22%3A%220%2[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%2256EBE77F874745CBB246[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_appVer.value", "139");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_lastVersion.value", "62");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_meta.value", "%7B%22cssOffre.css%22%3A%7B%22id%22%3A374976%2C%22ver%22%3A62%2[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_nextCheck.expiration", "Sat Nov 30 2013 09:21:19 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_nextCheck.value", "true");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_queue.value", "%7B%7D");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_resource_374976.expiration", "Tue Feb 18 2014 23:33:10 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.Resources_resource_374976.value", "%22%5Cr%5Cn%23offre_conteneur%7B%5Cr%5Cn%5Ct-moz-use[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb._country_code_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb._country_code_.value", "%22FR%22");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3Anull%2C%22i[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.monetization_plugin_last_executable_request.expiration", "Sat Nov 30 2013 14:33:04 GMT+[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//m.xp1.ru4.com/activity[...]
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.lastDailyReport", "1385778078985");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.lastUpdate", "1385778078485");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.manifesturl", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.name", "Pricora");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.newtab", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.opensearch", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/35329/plugins/093/ff/plugins.json");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.pluginsversion", 76);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.publisher", "Corporate Inc");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.searchstatus", 0);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.setnewtab", false);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.thankyou", "");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.updateinterval", 360);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.35329.ver", 139);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.apps", "35329");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.bic", "136d45732061261114e6a2fe0dcc0610");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.cid", 35329);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.firstrun", false);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.hadappinstalled", true);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.installationdate", 1381080064);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.modetype", "production");
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.reportInstall", true);
Line Deleted: user_pref("extensions.a94ae097689df434797715371c6e203bf3796dc63d06d4575a9979b5c935fe915com35329.statsDailyCounter", 147);
Line Deleted: user_pref("extensions.crossrider.bic", "136d45732061261114e6a2fe0dcc0610");
Line Deleted: user_pref("extensions.delta.admin", false);
Line Deleted: user_pref("extensions.delta.aflt", "babsst");
Line Deleted: user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted: user_pref("extensions.delta.autoRvrt", "false");
Line Deleted: user_pref("extensions.delta.dfltLng", "fr");
Line Deleted: user_pref("extensions.delta.excTlbr", false);
Line Deleted: user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted: user_pref("extensions.delta.id", "0e6d15220000000000002c41388c7d22");
Line Deleted: user_pref("extensions.delta.instlDay", "15984");
Line Deleted: user_pref("extensions.delta.instlRef", "sst");
Line Deleted: user_pref("extensions.delta.newTab", false);
Line Deleted: user_pref("extensions.delta.prdct", "delta");
Line Deleted: user_pref("extensions.delta.prtnrId", "delta");
Line Deleted: user_pref("extensions.delta.rvrt", "false");
Line Deleted: user_pref("extensions.delta.smplGrp", "none");
Line Deleted: user_pref("extensions.delta.tlbrId", "base");
Line Deleted: user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted: user_pref("extensions.delta.vrsn", "1.8.24.6");
Line Deleted: user_pref("extensions.delta.vrsnTs", "1.8.24.613:04:57");
Line Deleted: user_pref("extensions.delta.vrsni", "1.8.24.6");
Line Deleted: user_pref("extensions.delta_i.babExt", "");
Line Deleted: user_pref("extensions.delta_i.babTrack", "affID=123702&tsp=5027");
Line Deleted: user_pref("extensions.delta_i.srcExt", %22);
-
Re
Download Malwarebytes Anti-Malware here
https://www.malwarebytes.com/
* Install it (make sure to choose "French"; do not change the installation settings) and update it.
* Go through the tutorial to familiarize yourself with the program:
https://forum.pcastuces.com/sujet.asp?f=31&s=3
(That said, it is very easy to use).
Restart Malwarebytes by carefully following these instructions:
! Disconnect and close all running applications!
* Launch Malwarebytes. On Vista, Seven or Windows 8 (right-click "run as administrator")
* Proceed with an update
* Perform a "Quick" scan
--> Let the program work (and do not use the PC for anything else during the scan).
--> At the end, click on "Show results".
--> Make sure all infected items are checked, then click on "remove selected".
Note: if you need to restart your PC to finish cleaning, do it!
Post the saved report after deleting the infected items (in the "report/log" tab of Malwarebytes, the most recent one)
See you later
--
--------Security Contributor---------
We have all been beginners at something at some point.
But knowledge is the reward for diligence. -
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Database version: v2013.11.30.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16736
Yuyu :: YUYU-HP [administrator]
30/11/2013 13:43:25
mbam-log-2013-11-30 (13-43-25).txt
Scan type: Quick scan
Enabled scan options: Memory | Startup | Registry | File system | Heuristic/Extra | Heuristic/Shuriken | PUP | PUM
Disabled scan options: P2P
Item(s) scanned: 257160
Elapsed time: 9 minute(s), 38 second(s)
Memory processes detected: 0
(No harmful items detected)
Memory modules detected: 0
(No harmful items detected)
Registry key(s) detected: 0
(No harmful items detected)
Registry value(s) detected: 0
(No harmful items detected)
Registry data item(s) detected: 0
(No harmful items detected)
Folder(s) detected: 0
(No harmful items detected)
File(s) detected: 0
(No harmful items detected)
(end)
And YouTube is now loading recommended videos and comments normally actually ^^ Thanks a lot -
Hello
We are finalizing.
Download DelFix from Xplode
Run it.
You have 5 choices:
Reactivate UAC
Remove disinfection tools (checked by default)
Make a registry backup
Clean system restore
Factory reset
Check the ones in bold
and execute
The report is usually found here
C:\DelFix.txt
The rest of the security: http://forum.malekal.com/comment-securiser-son-ordinateur.html
@+
--
--------Security Contributor---------
We have all been beginners at something.
But knowledge is the reward of diligence. -
Re
# DelFix v10.6 - Report created on 30/11/2013 at 14:54:38
# Updated on 11/11/2013 by Xplode
# Username: Yuyu - YUYU-HP
# Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)
~ UAC activation ... OK
~ Removal of disinfecting tools ...
Deleted: C:\Qoobox
Deleted: C:\ZHP
Deleted: C:\AdwCleaner
Deleted: C:\Program Files (x86)\ZHPDiag
Deleted: C:\ComboFix.txt
Deleted: C:\PhysicalDisk0_MBR.bin
Deleted: C:\Users\Yuyu\Desktop\AdwCleaner(1).exe
Deleted: C:\Users\Public\Desktop\MBRCheck.lnk
Deleted: C:\Users\Public\Desktop\ZHPDiag.lnk
Deleted: C:\Users\Public\Desktop\ZHPFix.lnk
Deleted: C:\Windows\grep.exe
Deleted: C:\Windows\PEV.exe
Deleted: C:\Windows\NIRCMD.exe
Deleted: C:\Windows\MBR.exe
Deleted: C:\Windows\SED.exe
Deleted: C:\Windows\SWREG.exe
Deleted: C:\Windows\SWSC.exe
Deleted: C:\Windows\SWXCACLS.exe
Deleted: C:\Windows\Zip.exe
Deleted: HKLM\SOFTWARE\AdwCleaner
Deleted: HKLM\SOFTWARE\Swearware
Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
~ System restore purge ...
Deleted: RP #118 [Scheduled checkpoint | 11/30/2013 04:18:56]
Deleted: RP #119 [Windows Update | 11/30/2013 04:42:25]
New restore point created!
########## - EOF - ##########
There you go, thanks for everything and for the useful links -
Re
I suggest we mark this topic as resolved
@+
--
--------Security Contributor---------
We've all been beginners at something at some point.
But knowledge is the reward for diligence.