Hi,
I don't know if I have a malware or not but these are the 3 troubles:
You will see at the end my ADWCleaner log. All the files appeared on the log were cleaned with ADWCleaner. Nevertheless, on yesterday, I found that the key APN PIP on the registry and I deleted it. The date of the troubles matches with this log. The first two troubles (see below) appeared between 24 and 26 feb.
1. Starting Vista troubles
I have a black screen and it can't start Vista Business after Bios finnished and before the 'Microsoft Corporation' bar at bottom is blinking, so that I need to manually shut down drastically with the power OFF button to reboot my laptop.
My laptop couldn't start properly as the 'Microsoft Corporation' green progress bar at bottom doesn't appear.
This occured only if I 'm working on my laptop during a few hours.
If I'm working for a few minutes and I shut down my laptop, I can start without any troubles.
2. Bios can't save settings
If I turn off my laptop and unplug from the wall outlet and I start again after a few hours, the Bios come back with the old settings with 'AHCI enable'.
If I reboot my laptop after a few minutes (unplugged or not unplugged from wall outlet), there is no problem, it can save my last settings, and my laptop can boot with no problems.
What I did :
I ran SFC and CHKDSK, a 'Repair my Computer' with the Bootable Vista Cd, Memtest, check my HDD with HDDRegenerator. Check malwares with HitmanPro, ProcessHacker and AdwCleaner.
3. Clock time is not more synchronized. It works for one hour then it stopped and go backwards to the previous hour -1h. Then if I manually synchronized, it will do the same. This is new troubles since two days ago.
# AdwCleaner v3.019 - Rapport créé le 24/02/2014 à 01:44:04
# Mis à jour le 17/02/2014 par Xplode
# Système d'exploitation : Windows Vista ™ Business Service Pack 2 (32 bits)
# Nom d'utilisateur :
# Exécuté depuis : C:\Program Files\Nettoyage Disque Dur\AdwCleaner.exe
# Option : Scanner
***** [ Services ] *****
***** [ Fichiers / Dossiers ] *****
Dossier Présent \zap
Dossier Présent C:\Program Files\AskPartnerNetwork
Dossier Présent C:\ProgramData\apn
Dossier Présent C:\ProgramData\boost_interprocess
Dossier Présent C:\Users\Flore\AppData\Roaming\thinstall
Dossier Présent C:\Users\Transparence\AppData\Roaming\thinstall
Fichier Présent : C:\Users\Flore\AppData\Roaming\Mozilla\Firefox\Profiles\3mx75wwm.default\searchplugins\Askcom.xml
Fichier Présent : C:\Users\Flore\AppData\Roaming\Mozilla\Firefox\Profiles\3mx75wwm.default\searchplugins\delta.xml
Fichier Présent : C:\Users\Flore\AppData\Roaming\Mozilla\Firefox\Profiles\3mx75wwm.default\user.js
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Présente : HKCU\Software\5b6de8cbc68be46
Clé Présente : HKCU\Software\APN PIP
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Clé Présente : HKLM\Software\PIP
***** [ Navigateurs ] *****
-\\ Internet Explorer v7.0.6002.18005
-\\ Mozilla Firefox v27.0.1 (fr)
[ Fichier : C:\Users\Flore\AppData\Roaming\Mozilla\Firefox\Profiles\3mx75wwm.default\prefs.js ]
Ligne Trouvée : user_pref("browser.search.selectedEngine", "Delta Search");
Ligne Trouvée : user_pref("extensions.delta.admin", false);
Ligne Trouvée : user_pref("extensions.delta.aflt", "babsst");
Ligne Trouvée : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Ligne Trouvée : user_pref("extensions.delta.autoRvrt", "false");
Ligne Trouvée : user_pref("extensions.delta.dfltLng", "en");
Ligne Trouvée : user_pref("extensions.delta.excTlbr", false);
Ligne Trouvée : user_pref("extensions.delta.id", "000e8db70000000000000016d363ef36");
Ligne Trouvée : user_pref("extensions.delta.instlDay", "15786");
Ligne Trouvée : user_pref("extensions.delta.instlRef", "sst");
Ligne Trouvée : user_pref("extensions.delta.newTab", false);
Ligne Trouvée : user_pref("extensions.delta.prdct", "delta");
Ligne Trouvée : user_pref("extensions.delta.prtnrId", "delta");
Ligne Trouvée : user_pref("extensions.delta.rvrt", "false");
Ligne Trouvée : user_pref("extensions.delta.smplGrp", "none");
Ligne Trouvée : user_pref("extensions.delta.tlbrId", "base");
Ligne Trouvée : user_pref("extensions.delta.tlbrSrchUrl", "");
Ligne Trouvée : user_pref("extensions.delta.vrsn", "1.8.10.0");
Ligne Trouvée : user_pref("extensions.delta.vrsnTs", "1.8.10.012:59:57");
Ligne Trouvée : user_pref("extensions.delta.vrsni", "1.8.10.0");
[ Fichier : C:\Users\Transparence\AppData\Roaming\Mozilla\Firefox\Profiles\o0o0jxnv.Flore\prefs.js ]
Ligne Trouvée : user_pref("extensions.crossrider.bic", "141400f7e1d5aa8f107903e38cfa6891");
Ligne Trouvée : user_pref("extensions.requestpolicy.allowedOrigins", "depositfiles.com adf.ly imagevenue.com vistax64.com mirrorcreator.com ebuyclub.com twimg.com fcast.tv laredoute.fr tf1.fr virustotal.com sfr.fr sp[...]
Ligne Trouvée : user_pref("extensions.requestpolicy.allowedOriginsToDestinations", "163.com|netease.com amazon.ca|images-amazon.com amazon.ca|ssl-images-amazon.com amazon.cn|images-amazon.com amazon.cn|joyo.com amazo[...]
*************************
Thanks in advance for your help !
Sign In
Create Account
