For a few weeks now, my computer has been rowing systematically when I open my yahoo mailbox.
The data transfer message from s.yimg.com is visible for about 1 minute and prevents any possible action on the internet.
Is there an infection somewhere? I’m using firefox.
Thank you in advance.
Hi,
my name is Stan and we’ll take care of together of your computer.
When you take over, I’ll ask you:
- To follow specific procedures.
Not to ask for help on another forum, in order not to disrupt the disinfection.
NOT TO DO ANYTHING ON YOUR OWN
So we can get started.
Can you do this to diagnose your computer:
- Disable your antivirus software for the duration of downloading and using.
- Download ZHPDiag (by Nicolas Coolman) on your desktop.
- Install the software.
- Lance ZHPDiag,
- /Under Vista, Windows 7 and 8, the file must be launched by right-click -> Run as administrator
-
Click on Complete
Note: Do not close the program even if it is indicated that it is no longer responding.
- Once the scan is finished go to the desktop, the file ZHPDiag.txt has been created.
- Host the report ZHPDiag.txt on SosUpload, then copy/paste the link provided in your next answer on the forum.
- Help : ZHPDiag Tutorial
Hi,
[Keep up the good work to you both!@+
Thank you
Hi,
so you can uninstall Spybot – Search & Destroy / Spybot – Search & Destroy 2 it’s useless.
Next:
PHASE 1:
- Disable your antivirus software for the duration of downloading and using.
- Download ZHPCleaner by Nicolas Coolman to your desktop.
- Close your browser
-
Make a double click on the icon to launch
Note: Right click on the icon then Run as administrator on Windows Vista Seven and Windows 8
- Accepts Terms of Use
-
Click on Scanner
and afterwards
- Click on Clean
Note
During the cleaning, if the tool asks you Did you install this proxy? and you don’t have any installed, click No
- Host the report ZHPCleaner.txt present on your desktop on SosUpload then copy/paste the link provided in your next answer.
PHASE 2:
- Disable your antivirus software for the duration of downloading and using.
- Download Adwcleaner (from Xplode) on your Desktop !
-
/Under Vista, Windows 7 and 8, the file must be launched by right-click -> Run as administrator
-
Select the option Scanner
and after :
- Choose option Clean
-
Select the option Scanner
- Accept the warning by clicking OK
- Accepts warnings/information by clicking OK
- The program will reboot your PC,
- Host the report C:\AdwCleaner\AdwCleaner[S0].txt on SosUpload, then copy/paste the link provided in your next answer.
- Help : ADWCleaner Tutorial
- How to host a file on SosUpload?
PHASE 3:
and do a zhpdiag again.
So I’m waiting for four reports.
Reading you…
I should mention that I had forgotten to disable Avira when I wanted to use Zhpdiag and therefore could not open it:
access to the Zhpdiag file containing TR/Rogue 821406 was blocked, which indicated Avira to me.
Hi,
that’s why it is well marked to disable the antivirus before downloading and using the programs
Here for the continuation :
- Disable your antivirus software for the duration of downloading and using.
- Copy the lines below :
- Code:
-
Script ZHPFix
ProxyFix
C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\9ptlxm4t.default\prefs.js(.not file.)
O3 – Toolbar: (no name) – [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02E} Orphan Key
[HKCU\Software\Safer Networking Limited]
[HKLM\Software\Wow6432Node\Safer Networking Limited]
O43 – CFD: 01/01/2014 – 12:25:20 – [] —-D C:\Program Files (x86)\Spybot – Search & DestroyO43 – CFD: 17/02/2014 – 20:56:56 – [] —-D C:\program files (x86)\Spybot – Search & Destroy 2
O43 – CFD: 01/02/2014 – 20:03:24 – [] —-D C:\ProgramData\Spybot – Search & Destroy
EmptyPrefetch
EmptyFlash
FirewallRAZ
EmptyTemp
- Lances ZHPFix , run as administrator on Windows : 7/8 and Vista
- Click on Import
- Pastes the helper lines given
- Then Click on GO
- Confirm data cleansing by clicking Yes
- Once the scan is finished go to the desktop, the file ZHPFixReport has been created.
- Host the report ZHPFixReport on SosUpload, then copy/paste the link provided in your next answer.
Help :
- ZHPFix Tutorial
And tell me if it’s okay… we’re doing the final cleanup…
A+
Hi,
yes for the 7 o’clock…there are some big directories in Windows.
So tell me again if it’s okay… we’re going through the final cleanup.
Hey, guys,
I waited a little before answering but unfortunately the problem is still there, not systematic, but even today my navigator froze twice for 1 minute before setting off again.
Hey,
, let’s see if there’s anything else.
Please do this:
- Disable your antivirus software for the duration of downloading and using.
- Download Farbar Recovery Scan Tool -> FRST64
- Note: For Windows Vista, Seven, Windows 8 & 8.1 users right click on the icon and Run as administrator
- For Windows 8 & 8.1 users, the SmartScreen will prevent you from running it, Click on More Information, then Click Run Still.
- Verifies that Addition.txt is checked,
- Click on Scan
- Once the scan was completed on the desktop, two reports FRST.txt and Addition.txt were created.
- Host the reports FRST.txt and Addition.txt on SosUpload, then copy/paste the link provided in your next answer
Help
:
- Tutorial – Farbar FRST Analysis Option
Hi,
to me he’s clean…
you can still try to reset your browsers with this tool:
Download Reset Browser on your desktop and not elsewhere[*]/!\ Under Vista, Windows 7 and 8, you have to launch the file by right-click -> Run as administrator
Then you have 3 buttons…for Chrome, Firefox and Internet Explorer Reset your FF and IE.
Then you’ll have to check in the Windows 7 forum…
A+
Hey, guys,
It’s done. There are 2 sessions on this pc (2 users). Is it necessary to do this on every session?
Otherwise, it might be blocking less often and the internet is a bit faster but I’ll deal with it…Maybe the problem comes from somewhere else!
Thanks anyway.
Hey,
, we’re gonna do a deeper scan:
- Follow the instructions exactly.
- Caution: This tool should only be used with the approval of a Safety Helper. If you use this tool alone, use at your own risk.
- Disable your antivirus software for the duration of downloading and using.
- Make a backup of your data (personal documents, music, photos, pictures etc…) on an external support (usb key, external hard drive) it is the usual procedure when using this tool.
Scan Combofix
- Download Combofix (from sUBs)
- Save this file on the desktop (required)
- Right click on combofix.exe selected Run as administrator to start the scan
- During the scan of Combofix do not touch the keyboard or the mouse.
- When the scan is complete, a report will appear. Post this report as a link in your next reply.
- NOTE : The report can also be found here : C:\n-Combofix.txt
Hi, here’s the rest…
- /!\n- Careful: This procedure is only valid for this user /!\
- Disable your antivirus software for the duration of downloading and using.
- Download CFScript.txt and save it on your desktop !
- Quit your browser and all running applications.
-
Drag the CFScript.txt file to Combofix.exe
- Combofix is about to launch. Wait during the scan and then post the contents of the report that will open in your next answer.
- Note: The file is saved as C:\Combofix.txt
Tell me again how your computer’s doing after that…
Hey, guys,
Here’s the report:
http://upload.sosvirus.net/download/…g9aedn70f5fmae
Alas, the problem is still there…Maybe it’s not an infection and there’s something else?
I find that blocking often occurs when I watch a streaming video.
But my Flash Player is up to date so I don’t know…
I’ll see ya.
Hey,
, he’s actually clean.
We’ll be able to finalize the cleanup.
But before you do, I advise you to try to disable all non-vital programs at startup, to see if it’s software running in the background that’s a bit annoying.
Look here: http://www.commentcamarche.net/faq/6…s-au-demarrage
And disables all software at startup, except antivirus.
Test your stream and tell me again.
A+
Hi,
you can deactivate:
CCLeaner Monitoring
Sidebar
BackupManagerTray (If you don’t use Bell’s automatic backup)
BCSSync
LManager
both PowerDVD8
SunJava
and test after…
Hey, guys,
No change, I deactivated the mentioned software, proceeded to a reboot and I had again this morning a freeze during which I can do nothing …
Hey,
, we could still check your hard drive
Do this:
start/programs/accessories then right click execute as administrator on command prompt , then paste this in the black window :
CHKDSK /F /R %Homedrive
then valid , agrees to do it on restart as requested and restarts, then let it work.
Then, get the report according to the tuto here: https://forums.cnetfrance.fr/topic/12…de-disque-dur/
and post it here.
A+