View original (French)

Shortcuts created automatically at each startup

pogo88 -  
pogo88 Posted messages 64 Status Member -
Hello,

So I have a bit of a silly problem since yesterday...

Every time I start my computer (a little Asus running Windows 10), 2 shortcuts; one for Google Chrome and one for Internet Explorer, are automatically created and placed on my desktop.

I've been looking but I can't figure out how to make these two shortcuts stop appearing by themselves; especially since I already have a shortcut for Google Chrome on my desktop, and I never use Internet Explorer...

If anyone could suggest a solution, that would be really nice!
Thanks a lot!

2 answers

  1.
    Lenox-Lewis Posted messages 322 Status Member 79
     
    Hello.

    Install and run Adwcleaner: https://fr.malwarebytes.com/adwcleaner/
    0
    1. pogo88 Posted messages 64 Status Member
       
      Thank you for your response!

      Here is the report.
      I took the liberty of "cleaning" after this analysis, but even after several restarts, the 2 shortcuts still automatically create themselves on my desktop...

      Please note that the "problem" detected on Chrome in this report concerns an official Amazon extension that I have been using for several weeks now.


      ---------------------------


      # AdwCleaner 7.0.4.0 - Logfile created on Mon Nov 13 18:34:48 2017
      # Updated on 2017/27/10 by Malwarebytes
      # Database: 11-13-2017.2
      # Running on Windows 10 Home (X64)
      # Mode: scan
      # Support: https://www.malwarebytes.com/support/
              • [ Services ] *****


      PUP.Optional.Legacy, Update service
              • [ Folders ] *****


      PUP.Optional.Legacy, C:\Users\Paul\AppData\Local\Temp\AdvinstAnalytics
      PUP.Optional.DriverAgentPlus, C:\ProgramData\DriverAgentPlus
      PUP.Optional.DriverAgentPlus, C:\ProgramData\Application Data\DriverAgentPlus
      PUP.Optional.DriverAgentPlus, C:\Users\All Users\DriverAgentPlus
      PUP.Optional.DriverAgentPlus, C:\Users\Paul\AppData\Roaming\DriverAgentPlus
      PUP.Optional.DriverAgentPlus, C:\ProgramData\DriverAgentPlus
      PUP.Optional.DriverAgentPlus, C:\ProgramData\Application Data\DriverAgentPlus
      PUP.Optional.DriverAgentPlus, C:\Users\All Users\DriverAgentPlus
      PUP.Optional.DriverAgentPlus, C:\Users\Paul\AppData\Roaming\DriverAgentPlus
              • [ Files ] *****


      No malicious files found.
              • [ DLL ] *****


      No malicious DLLs found.
              • [ WMI ] *****


      No malicious WMI found.
              • [ Shortcuts ] *****


      No malicious shortcuts found.
              • [ Tasks ] *****


      No malicious tasks found.
              • [ Registry ] *****


      PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\chatango.com
      PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com
      PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\st.chatango.com
      PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\chatango.com
      PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com
      PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\st.chatango.com
      PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | UDP Query User{E79A73B1-A57B-4143-8EBD-66AEE0ECA910}C:\users\paul\appdata\local\popcorn time\nw.exe
      PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | TCP Query User{EF858E53-79CF-4C8D-8F22-D48E673CA989}C:\users\paul\appdata\local\popcorn time\nw.exe
      PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-20861067-2530723663-3810305791-1001\Software\TeleCharger
      PUP.Optional.Legacy, [Key] - HKCU\Software\TeleCharger
      PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
      PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
      PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
      PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
      PUP.Optional.SofTonicAssistant, [Key] - HKU\S-1-5-21-20861067-2530723663-3810305791-1001\Software\Softonic
      PUP.Optional.SofTonicAssistant, [Key] - HKCU\Software\Softonic
              • [ Firefox (and derivatives) ] *****


      No malicious Firefox entries.
              • [ Chromium (and derivatives) ] *****


      PUP.Optional.AmazonBrowserBar, Plugin found: Amazon Assistant for Chrome -

      /!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/165139?visit_id=637167664755533249-4263361921&rd=1




          ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
      0
  2. Lenox-Lewis Posted messages 322 Status Member 79
     
    Install Autoruns: https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns?redirectedfrom=MSDN, send its shortcut to the desktop.
    Right-click on it ─► Run as administrator.
    Open the Logon tab, take a screenshot, then host the image on the Cjoint.com site: https://assiste.com/Cjoint.html
    0
    2. pogo88 Posted messages 64 Status Member
       
      If we can kill two birds with one stone:

      For several years now, I have had a window that opens at startup asking me "with which program do I want to open this file."

      However, no file is actually opening since the computer is just booting up.

      I end up with a list of several programs displayed to open this so-called file. I've tried all of them, and none can open what I'm being asked to open, so I have no idea where this is coming from.
      0