This fix must be run from safe mode otherwise it will fail
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer Open
notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2013-05-09] (AVAST Software)
SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09] (AVAST Software)
Toolbar: HKLM-x32 - Pas de nom - {99079a25-328f-4bd4-be04-00955acaa0a7} - Pas de fichier
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software)
Toolbar: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
Toolbar: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
FF user.js: detected! => C:\Users\Dammar\AppData\Roaming\Mozilla\Firefox\Profiles\8knls6kr.default\user.js [2013-06-11]
FF Extension: IMinent Toolbar - C:\Users\Dammar\AppData\Roaming\Mozilla\Firefox\Profiles\8knls6kr.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2012-07-30] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-13] [non signé]
CHR HomePage: Default -> hxxp://isearch.omiga-plus.com/?type=hp&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T
CHR StartupUrls: Default -> "hxxp://isearch.omiga-plus.com/?type=hp&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T"
CHR DefaultSearchURL: Default -> hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T&q={searchTerms}
CHR DefaultSearchKeyword: Default -> omiga-plus
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
2016-04-10 20:18 - 2014-10-27 19:00 - 00000000 ____D C:\Program Files (x86)\Avira
2016-04-10 20:17 - 2014-10-27 19:00 - 00000000 ____D C:\ProgramData\Avira
2016-04-10 20:16 - 2014-10-27 19:01 - 00000000 ____D C:\Users\Dammar\AppData\Roaming\Avira
Task: {078AC3ED-FAB8-481F-8DA9-3CCB68985569} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-09-21] (AVAST Software)
Task: {8C206199-80E6-4CA1-9F90-35B7B2E7010B} - System32\Tasks\{4A8C99BB-AD80-408E-B9F2-C65A1C9494B4} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {F6E01180-B1B0-4CA1-B5E9-9498AA038404} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: C:\Windows\Tasks\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-11.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-6.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-novainstaller.exe?/AzbPex /azVwQsDXJ='1ClickMovie-Download V9.0' /phwTT=51382 /cmJfhqdsN='001598' /qEPUdcnpr='0' /mCRcBfGlq='0' /TrHxMHR=0C31BB5DA7F4475080D553ACDB6D4195IE /mWQQGmKL=35d7a16c494e7c530482d06c2d1fb042 /irfrQX=1_34_06_10 /OWwoXS=1.34.6.10 /gaDeCGr=1402661936 /MiVesYpR=hxxp:/stats.datademoserv.com /tSvpLfLED=hxxp:/errors.datademoserv.com /WVNMP=hxxp:/cr.install-daddy.com /IQIALwd=ch /UTsXAOTz /SThaut='nova' /fqAgEVsMe=hxxp:/cr.install-daddy.com /QngvpepaW='{asw:[2, 133]}' /xheDptDks=task /mlrPGIL='hxxp:/update.datademoserv.com/novacode/{CAMP_ID}/update.jso <==== ATTENTION
C:\Program Files\AVAST Software
C:\Program Files (x86)\Iminent
C:\Program Files\Common Files\AV\avast! Antivirus
C:\Program Files (x86)\1ClickMovie-Download V9.0
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as
fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that
THENDownload
Avast Uninstall Utility to your
Desktop.
Download the correct version of Avast
Avast FreeAvast ProAvast Internet SecurityAvast PremierDisconnect from the net
Uninstall Avast via control panel
- Run the uninstall tool and accept the reboot to safe mode
- Once complete reboot your system
- Reinstall Avast
----------