View original (French)

Programme "hshhsaaaws"

Chibs_ -  
Hello everyone.

Having bought a second-hand computer a few months ago, I reformatted it, defragmented it, etc. (I'm not familiar with all the terms and don't know much about computers).

For a few weeks now, I find it increasingly slow, whether it be during startup or when opening new tabs, programs... I followed two tutorials available on this forum:
https://www.commentcamarche.net/informatique/windows/223-nettoyer-un-pc-devenu-lent-avec-les-outils-de-windows/#nettoyer-son-pc
and https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/#tutoriel-ccleaner#installer-ccleaner

Following the tutorial CCleaner, at the step "Optimize Windows startup", I discovered a strange program that launches at startup and does not have a file on the hard drive (blank box in the "file" tab, unlike the other programs "C:/Program Files...")
After some research, I came across this forum https://forums.commentcamarche.net/forum/affich-33676519-virus-chinois
Here are the 3 reports from the use of FRST, in order FRST.txt, Shortcut.txt and Additionnal.txt:

https://pjjoint.malekal.com/files.php?id=FRST_20161210_s5h8n7w6v8

https://pjjoint.malekal.com/files.php?id=20161210_e7g9l6t5u6

https://pjjoint.malekal.com/files.php?id=20161210_e6m14c7v11f11

I hope you can help me and provide a solution,
Best regards, Chibs_

2 answers

  1.  Malekal_morte- Moderator
    Here you go :)

    --
    Please press a key to continue the disinfection...
    1. Malekal_morte- Moderator
      Hello,

      this is just a Run entry.

      Here is the correction to be made with FRST. You can refer to this explanatory note with screenshots.

      Open Notepad: Windows Key + R,
      In the "Run" field, type notepad and hit OK.
      Copy/Paste the following into it: 

      CreateRestorePoint:
      CloseProcesses:
      HKLM\...\Run: [hshhsaaaws] => [X]
      Reboot:


      Once the text is pasted in Notepad,
      Go to "File" menu then "Save As",
      On the left, navigate to the Desktop,
      In the bottom field, for the file name put: fixlist.txt
      Click "Save", this will create fixlist.txt on the Desktop.

      Restart FRST and click the "Fix" button
      A reboot may be necessary (not mandatory)
      A text file will appear, copy/paste the content here in a new message.

      Restart the computer.

      --
      Please press any key to continue the disinfection...
      1. Chibs_ Author
        Thank you for the response, here is the content of the text file

        "fixlist content:
        CreateRestorePoint:
        CloseProcesses:
        HKLM\...\Run: [hshhsaaaws] => [X]
        Reboot:


        • The restore point was created successfully.
          Processes closed successfully.
          HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\hshhsaaaws => value deleted successfully

          The system had to restart.

          ==== End of Fixlog 19:35:22 ===="

          Was it not a virus?