Win32 PUP and Win64 PUP - Page 2

great,

restart the PC and let me know how it's working before continuing

--
O.o°* ???Breathe deeply, write your message in proper French and clearly. It will be fine, you'll see, well, we'll try !!! o°.Oø¤º°'°º¤ø

It seems to be going well, but how can I know if I'm still infected?

we'll see the moment of truth with the sequel:

Download Delfix to your desktop:

https://toolslib.net/downloads/viewdownload/2-delfix/

or

Check the following boxes:

=> Reactivate Uac (only for Vista, Seven, and W8)
=> Remove disinfecting tools (checked by default)
=> Purge system restore

* Then click on Run and wait during the deletion process.
* When the procedures are finished, the tool will close and disappear from the desktop
* A report is saved to the clipboard: just right-click and "paste" in your next reply to send me the report
** the report is stored at this location: C:\DelFix.txt
Attention: The report is unique and is deleted each time we re-run one or more options of DelFix.

Note:
Delfix does not uninstall MBAM, it's up to you to decide whether to keep it or uninstall it.

* update your antivirus, run a full scan of your PC, keep me updated on the result :-)

--
O.o°* ???Breathe deeply, write your message in good French and clearly. It will be fine, you'll see, we’re trying!!! o°.Oø¤º°'°º¤ø

# DelFix v10.8 - Report created on 25/12/2014 at 15:04:55
# Updated on 29/07/2014 by Xplode
# Username: Home - HOME-PC
# Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)

~ UAC activation ... OK

~ Removal of disinfection tools ...

Deleted: C:\AdwCleaner
Deleted: C:\Users\Home\AppData\Roaming\ZHP
Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Deleted: C:\Program Files (x86)\ZHPDiag
Deleted: C:\PhysicalDisk0_MBR.bin
Deleted: C:\Users\Home\Desktop\ZHPCleaner.lnk
Deleted: C:\Users\Home\Desktop\ZHPCleaner.txt
Deleted: C:\Users\Home\Desktop\ZHPDiag.lnk
Deleted: C:\Users\Home\Desktop\ZHPDiag.txt
Deleted: C:\Users\Home\Desktop\ZHPFix.lnk
Deleted: C:\Users\Home\Desktop\ZHPFixReport.txt
Deleted: C:\Users\Home\Desktop\ZHPFix[R1].txt
Deleted: C:\Users\Home\Downloads\adwcleaner_4.105.exe
Deleted: C:\Users\Home\Downloads\ZHPCleaner.exe
Deleted: C:\Users\Home\Downloads\ZHPDiag2.exe
Deleted: HKLM\SOFTWARE\AdwCleaner
Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ System restore purge ...

Deleted: RP #270 [Windows Update | 05/25/2014 18:20:05]
Deleted: RP #271 [Windows Update | 05/27/2014 20:45:53]
Deleted: RP #272 [Scheduled restore point | 11/19/2014 14:34:46]
Deleted: RP #273 [avast! antivirus system restore point | 11/28/2014 07:50:16]
Deleted: RP #274 [Driver package installation: Avast Network Service | 11/28/2014 07:57:17]
Deleted: RP #275 [Removed AION Free-To-Play | 11/28/2014 20:48:44]
Deleted: RP #276 [Windows Update | 11/30/2014 02:35:12]
Deleted: RP #277 [avast! antivirus system restore point | 11/30/2014 15:47:29]
Deleted: RP #278 [avast! antivirus system restore point | 11/30/2014 15:57:13]
Deleted: RP #279 [Driver package installation: Avast Network Service | 11/30/2014 16:02:02]
Deleted: RP #280 [Windows Update | 11/30/2014 19:11:11]
Deleted: RP #281 [Windows Update | 12/01/2014 20:38:28]
Deleted: RP #282 [Removed Skype(TM) 6.5 | 12/04/2014 18:24:56]
Deleted: RP #283 [Windows Update | 12/05/2014 08:47:53]
Deleted: RP #284 [Installed Skype Web Plugin | 12/06/2014 17:49:49]
Deleted: RP #285 [Windows Update | 12/09/2014 12:22:58]
Deleted: RP #286 [Windows Update | 12/09/2014 20:01:33]
Deleted: RP #287 [Windows Update | 12/10/2014 20:30:13]
Deleted: RP #288 [Windows Update | 12/12/2014 19:43:48]
Deleted: RP #289 [Windows Update | 12/16/2014 09:19:07]
Deleted: RP #290 [Windows Update | 12/18/2014 20:26:24]
Deleted: RP #291 [Windows Update | 12/24/2014 08:35:21]

New restore point created!

########## - EOF - ##########

* update your antivirus, run a full scan of your pc, keep me posted on the results :-)

--
O.o°* ???Breathe deeply, write your message in proper French and clearly. It will be fine, you'll see, well we’ll try!!! o°.Oø¤º°'°º¤ø

He tells me that some files could not be scanned and that they are password protected.

It's normal because the antivirus does not decompress compressed files and system files to analyze them. Sometimes, it even includes its own files in the mix!

But send me the name and path of the files so I can see what they are!

--
O.o°* ??? Breathe deeply, write your message in proper French and clearly. It will be fine, you will see, at least we’ll try!!! o°.Oø¤º°'°º¤ø

d:\Logiciels\install_reader11_fr_ùssa_aih(1).exe\>gccheck.exe

among other things, I noticed that there is a lot of reader11

This is a file that you put in D: !

It might be an old installation file of Adobe, detected by your antivirus! It is an extra copy; there should be another one like it!

--
O.o°* ???Breathe deeply, write your message in good French and clearly. It will be fine, you'll see, well we’ll try!!! o°.Oø¤º°'°º¤ø

Is it dangerous?

If it's Adobe Reader, it's free and available for download on a website!

If it's another software, you need to test it or install it on a test machine to see what it does!

--
O.o°* ???Take a deep breath, write your message in proper French and clearly. It will be fine, you'll see, well, we’ll give it a try!!! o°.Oø¤º°'°º¤ø

Well now he's talking to me about decompression bombs, but I've seen in another post that you mentioned it was a false positive (Samsung Kies).

Here is the screenshot

yes, it's FP!

report them to Avast if you find them on your PC, just like that!

restart the PC and check if everything else is working properly!

--
O.o°* ???Breathe deeply, write your message in proper French and clearly. It's going to be fine, you'll see, well we're trying!!! o°.Oø¤º°'°º¤ø

I'm doing a thorough scan to see if everything is okay; after that, I think it will be fine....
Then I can send you a report that I prepared on my laptop?

If it's not the same PC, I would prefer that you open another topic to avoid mixing up the PCs!

--
O.o°* ??? Breathe deeply, write your message in proper French and clearly. It will be fine, you'll see, well, let's give it a try!!! o°.Oø¤º°'°º¤ø

very well, I’m waiting to see the scan results, then I will make another post.

Ok, copy and paste the link to the new post for the mobile if you want me to check it out :-)

--
O.o°* ??? Breathe deeply, write your message in good French and clearly. It will be fine, you'll see, well, let's try!!! o°.Oø¤º°'°º¤ø

Very well, thank you in any case^^

:-)

--
O.o°* ???Breathe deeply, write your message in proper French and clearly. It's going to be okay, you'll see, well we're trying!!! o°.Oø¤º°'°º¤ø