DTM

Oke, that'll take some time before I can realize that. I'll try to do that this week.

Then I think I've got to go locally, because it's still there. Addition.txt scan_151128-195851.txt FRST.txt

hello Kevin, One of the accounts is local, but because the computer is now part of a domain, I can't login easily into that account. I login everytime remotely, because during the day the customer is still using this machine, during the evening I can get control of this machine remotely, So if it's really important to login locally, just let me know, than I have to make an appointment with the client when I can get over there and use her machine. So I just have one account ready for you to look into. that's the account that is part of the domain. Here's the logfile you requested. AdwC

Thanks, I'll post the findings later on this day.

Because I was sick a couple of days i didn't had any interests to sit behind my computer. So that's the reason I didn't reply sooner. Here's the requested attachement. output.txt

But can't the antimalware refuse to execute the dangerous programs. I had earlier other antivirus programs, I could not execute any dangerous files, because they were already deleted. Why isn't it with this the case? Here are the files you requested. Addition.txt FRST.txt scan_151118-204441.txt

I have to admit, it's a lot of hassle, I thought that my emsisoft could delete this. Now I ran several programs multiple times and we're still finding a solution. Why can't emsisoft anti-malware not remove this bit? RogueKiller171115.txt

Here's the log. I created it myself, because i couldn't find the automated report. RogueKiller161115.txt

Here is the log file you requested. I also did a clean sweep after the fix you provided. Still no good Addition.txt Fixlog.txt FRST.txt scan_151114-145822.txt

Here are the new EEK and FRST scans FRST.txt scan_151113-010219.txt

Oke, here are the requested logfiles. AdwCleanerC1.txt JRT.txt

Things are running smoothly, but I still have the viruswarning with emsisoft anti-malware. See the logfiles I attached to this reply FRST.txt scan_151110-001624.txt

Sorry for the delay, I couldn't connect remotely to the computer after I've done what you've asked. I sorted that out this weekend. Here is the logfile from FRST64 Hopefully you can help me out. regards, Fixlog.txt

Hi, Sorry I forgot to attach the required log files, here are they. Addition.txt FRST.txt scan_151103-205937.txt

Hello, For a customer of mine I found out after installing Emsisoft Anti-Malware that this customer has the ransome virus. The customer doesn't have any problems with the computer yet, but I don't know for how long it will take before the virus goes active. So If you can help me remove this virus, because it's in the registry, but I can't find it. These are the three hits the virus scanner can't remove. And I don't know how to remove them either. Key: HKEY_USERS\S-1-5-21-4124405607-3776124019-3871074412-1156\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD