View original (French)

Programme "hshhsaaaws"

Chibs_ Posted messages 2 Registration date   Status Member Last intervention   -  
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   -
Hello everyone.

Having bought a second-hand computer a few months ago, I reformatted it, defragmented it, etc. (I'm not familiar with all the terms and don't know much about computers).

For a few weeks now, I find it increasingly slow, whether it be during startup or when opening new tabs, programs... I followed two tutorials available on this forum:
https://www.commentcamarche.net/informatique/windows/223-nettoyer-un-pc-devenu-lent-avec-les-outils-de-windows/#nettoyer-son-pc
and https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/#tutoriel-ccleaner#installer-ccleaner

Following the tutorial CCleaner, at the step "Optimize Windows startup", I discovered a strange program that launches at startup and does not have a file on the hard drive (blank box in the "file" tab, unlike the other programs "C:/Program Files...")
After some research, I came across this forum https://forums.commentcamarche.net/forum/affich-33676519-virus-chinois
Here are the 3 reports from the use of FRST, in order FRST.txt, Shortcut.txt and Additionnal.txt:

https://pjjoint.malekal.com/files.php?id=FRST_20161210_s5h8n7w6v8

https://pjjoint.malekal.com/files.php?id=20161210_e7g9l6t5u6

https://pjjoint.malekal.com/files.php?id=20161210_e6m14c7v11f11

I hope you can help me and provide a solution,
Best regards, Chibs_

2 answers

  1.
    Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hello,

    this is just a Run entry.

    Here is the correction to be made with FRST. You can refer to this explanatory note with screenshots.

    Open Notepad: Windows Key + R,
    In the "Run" field, type notepad and hit OK.
    Copy/Paste the following into it: 

    CreateRestorePoint:
    CloseProcesses:
    HKLM\...\Run: [hshhsaaaws] => [X]
    Reboot:


    Once the text is pasted in Notepad,
    Go to "File" menu then "Save As",
    On the left, navigate to the Desktop,
    In the bottom field, for the file name put: fixlist.txt
    Click "Save", this will create fixlist.txt on the Desktop.

    Restart FRST and click the "Fix" button
    A reboot may be necessary (not mandatory)
    A text file will appear, copy/paste the content here in a new message.

    Restart the computer.

    --
    Please press any key to continue the disinfection...
    0
    1. Chibs_ Posted messages 2 Registration date   Status Member Last intervention  
       
      Thank you for the response, here is the content of the text file

      "fixlist content:

      CreateRestorePoint:
      CloseProcesses:
      HKLM\...\Run: [hshhsaaaws] => [X]
      Reboot:


        The restore point was created successfully.
        Processes closed successfully.
        HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\hshhsaaaws => value deleted successfully


        The system had to restart.

        ==== End of Fixlog 19:35:22 ===="

        Was it not a virus?
      0
  2. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Here you go :)

    --
    Please press a key to continue the disinfection...
    0