Module loading failed

Hello,

Follow the FRST tutorial. ( take the time to read carefully - everything is well explained ).

Download and run the FRST scan, 3 FRST reports will be generated:

• FRST.txt
• Shortcut.txt
• Additionnal.txt

Send these 3 reports to the website http://pjjoint.malekal.com/ and in return, give the 3 pjjoint links leading to the reports here in a new response so that we can consult them.

--
Please press any key to continue the disinfection...

Hello,

Thank you for your help. Here are the files you requested:

https://pjjoint.malekal.com/files.php?id=FRST_20170224_c12i9c7f6v13
https://pjjoint.malekal.com/files.php?id=20170224_15d12y12p514
https://pjjoint.malekal.com/files.php?id=20170224_p8c15y15j7y9

which are in the same order as the files you requested.

Here is the correction to be made with FRST. You can refer to this explanatory note with screenshots.

Open Notepad: Press Windows + R,
In the "Run" field, type notepad and OK.
Copy/Paste the following into it:

CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-3343772388-818903403-2986983717-1001\...\Run: [Ijwsoft] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Ender\AppData\Local\Icsoft\rdczepwg.dll <===== WARNING
HKU\S-1-5-21-3343772388-818903403-2986983717-1001\...\Run: [Chromium] => c:\users\ender\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory=Default --restore-last-session
2017-02-23 06:49 - 2017-02-23 07:02 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Enigma Software Group
2017-02-23 06:48 - 2017-02-23 06:48 - 00000000 ____D C:\Program Files\Enigma Software Group
2017-02-23 05:11 - 2017-02-23 05:11 - 00002052 _____ C:\Windows\System32\Tasks\wVofSnnOyf
2017-02-23 04:45 - 2017-02-23 06:58 - 00000000 ____D C:\ProgramData\Microleaves
2017-02-23 04:45 - 2017-02-23 04:45 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Hetuentgrahs
2017-02-23 04:43 - 2017-02-23 04:43 - 00003258 _____ C:\Windows\System32\Tasks\{61183546-0389-4E47-88B0-B99917671C55}
2017-02-23 04:42 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\Ghejiwardkocedom
2017-02-23 04:42 - 2017-02-23 06:59 - 00000000 ____D C:\Program Files (x86)\Microleaves
2017-02-23 04:42 - 2017-02-23 05:58 - 00000000 ____D C:\Windows\system32\SSL
2017-02-23 04:42 - 2017-02-23 05:09 - 00000420 _____ C:\Windows\Tasks\Online Application Updater.job
2017-02-23 04:42 - 2017-02-23 05:09 - 00000374 _____ C:\Windows\Tasks\Online Application v209.job
2017-02-23 04:42 - 2017-02-23 05:09 - 00000374 _____ C:\Windows\Tasks\Online Application v209 Guardian.job
2017-02-23 04:42 - 2017-02-23 05:09 - 00000374 _____ C:\Windows\Tasks\Online Application v209 Guard.job
2017-02-23 04:42 - 2017-02-23 05:09 - 00000364 _____ C:\Windows\Tasks\Online Application v2.job
2017-02-23 04:42 - 2017-02-23 05:09 - 00000364 _____ C:\Windows\Tasks\Online Application v2 Guardian.job
2017-02-23 04:42 - 2017-02-23 05:09 - 00000364 _____ C:\Windows\Tasks\Online Application v2 Guard.job
2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Microleaves
2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Ender\AppData\Local\Arupick
2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Default\AppData\Local\AdvinstAnalytics
2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Default User\AppData\Local\AdvinstAnalytics
2017-02-23 04:40 - 2017-02-23 07:03 - 00000000 ____D C:\Users\Ender\AppData\Local\Icsoft
2017-02-23 04:40 - 2017-02-23 07:03 - 00000000 ____D C:\Users\Ender\AppData\Local\Ezztion
2017-02-23 04:40 - 2017-02-23 04:40 - 00003972 _____ C:\Windows\System32\Tasks\{5CCD8DAB-EB66-3A00-D622-165D2A0859E3}
2017-02-23 04:40 - 2017-02-23 04:40 - 00003880 _____ C:\Windows\System32\Tasks\{72D5C67F-FACA-121E-9E13-C2A92F312C37}
2017-02-23 04:40 - 2017-02-23 04:40 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Macromedia
2017-02-23 04:40 - 2017-02-23 04:40 - 00000000 ____D C:\ProgramData\3090a254
2017-02-23 04:39 - 2017-02-23 07:05 - 00000000 ____D C:\Program Files (x86)\DiskP
2017-02-23 04:39 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6
2017-02-23 04:39 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\animechvodury
2017-02-20 19:41 - 2017-02-20 19:41 - 02853571 _____ C:\Windows\ea1c423c74f064dbec0cca279bd0b082.exe
2017-02-23 04:55 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\Qumase
2017-02-23 04:55 - 2017-02-23 04:55 - 00000000 ____D C:\Users\Ender\AppData\Local\Vilsyghewok
Task: {0CD91960-42EE-4C1A-BD7F-AFFD5538D864} - System32\Tasks\{72D5C67F-FACA-121E-9E13-C2A92F312C37} => Regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\3090a254\64654ef.dll" <==== WARNING
Task: {39F14BDC-C021-4657-9CA9-E7F870988C9E} - System32\Tasks\{5CCD8DAB-EB66-3A00-D622-165D2A0859E3} => C:\ProgramData\{AE10E587-19BB-522C-7A11-8C1775DB263C}\EBBB4CE5-5C10-FB4E-1307-A889291C8AD4.exe <==== WARNING
Task: {7C738602-6C24-42E2-890B-913F3C118B40} - System32\Tasks\{61183546-0389-4E47-88B0-B99917671C55} => pcalua.exe -a "C:\Program Files (x86)\3DesXPZxQ2\uninstall.exe"
Task: {BEB35CC3-E86C-4EB5-A94B-D59A24A6F867} - System32\Tasks\wVofSnnOyf => C:\Program Files (x86)\95mpRvHEFc\updengine.exe <==== WARNING
Task: {EA8313F2-1941-4DBD-86FB-4932BD3436EE} - System32\Tasks\{582CF6E5-E556-4711-B19E-B9C5C3EC5A3E} => pcalua.exe -a "C:\Users\Ender\AppData\Roaming\Enigma Software Group\sh_installer.exe" -c -r sh
Task: {F27CB1F2-4FD7-4643-BB33-85BB95504989} - System32\Tasks\{C15CB8D5-70A4-413A-A5AD-999D4FBE1E58} => pcalua.exe -a "C:\Program Files\ByteFence\ByteFence.exe" -c /uninstall
Task: C:\Windows\Tasks\Online Application Updater.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online Application Updater.exe <==== WARNING
Task: C:\Windows\Tasks\Online Application v2 Guard.job => C:\Program Files (x86)\Microleaves\Online.io Application\OnlineGuardian-v2.exe <==== WARNING
Task: C:\Windows\Tasks\Online Application v2 Guardian.job => C:\Program Files (x86)\Microleaves\Online.io Application\OnlineGuardian-v2.exe <==== WARNING
Task: C:\Windows\Tasks\Online Application v2.job => C:\Program Files (x86)\Microleaves\Online.io Application\OnlineGuardian-v2.exe <==== WARNING
Task: C:\Windows\Tasks\Online Application v209 Guard.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.0.9.exe <==== WARNING
Task: C:\Windows\Tasks\Online Application v209 Guardian.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.0.9.exe <==== WARNING
Task: C:\Windows\Tasks\Online Application v209.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.0.9.exe <==== WARNING
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

Once you have pasted the text into Notepad,
Menu "File" then "Save As",

On the left, go to the Desktop,

In the field below, file name enter: fixlist.txt
Click on "Save", this will create fixlist.txt on the Desktop.

Restart FRST and click on the "Fix" button
A restart may be necessary (not mandatory)
A text file will appear, copy/paste the content here in a new message.

Restart the computer.

Please press any key to continue the disinfection...

I have just followed all your instructions and restarted my PC.
No error message! Yeah!

I am very grateful for your help. Thank you very much!

I wish you a pleasant end of the day.

You're welcome :)

Finish with a cleanup Malwarebytes - Malwarebytes Anti-Malware Free Version Tutorial

A few tips:

To avoid getting caught again.
Read this - Potentially Unwanted Programs / PUPs: Adwares/PUPs Folder: unwanted and invasive programs
(Especially enable LPI detections to identify invasive and advertising programs)

--
Please press any key to continue the disinfection...