Conversation Windows 10 Start button, network volume, battery and action center don't work

[Malnutrition]

The tools in this post.

 

[Jérémie]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Home x64
Ran by Quelqu'un (Administrator) on 2017-01-06 at 20:37:35.40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 4

Successfully deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader.lnk (Shortcut)
Successfully deleted: C:\ProgramData\ytd video downloader (Folder)
Successfully deleted: C:\Users\Quelqu'un\AppData\Local\crashrpt (Folder)
Successfully deleted: C:\Users\Quelqu'un\AppData\Local\vghd (Folder)



Registry: 2

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{093F479D-712E-46CD-9E06-62E734A05F68} (Registry Value)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{093F479D-712E-46CD-9E06-62E734A05F68} (Registry Value)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 2017-01-06 at 20:42:27.92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



# AdwCleaner v6.042 - Rapport créé le 06/01/2017 à 20:45:09
# Mis à jour le 06/01/2017 par Malwarebytes
# Base de données : 2017-01-06.1 [Serveur]
# Système d'exploitation : Windows 10 Home (X64)
# Nom d'utilisateur : Quelqu'un - PC
# Exécuté depuis : C:\Users\Quelqu'un\Downloads\adwcleaner_6.042.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****

Aucun service malveillant trouvé.


***** [ Dossiers ] *****

Dossier trouvé: C:\Users\Quelqu'un\AppData\Roaming\Hola
Dossier trouvé: C:\Program Files\Hola
Dossier trouvé: C:\Program Files (x86)\GreenTree Applications
Dossier trouvé: C:\Users\Public\Pokki


***** [ Fichiers ] *****

Aucun fichier malveillant trouvé.


***** [ DLL ] *****

Aucune DLL patchée trouvée.


***** [ WMI ] *****

Aucune clé malveillante trouvée.


***** [ Raccourcis ] *****

Aucun raccourci infecté trouvé.


***** [ Tâches planifiées ] *****

Tâche trouvée: Software Update Application


***** [ Registre ] *****

Clé trouvée: HKU\.DEFAULT\Software\Hola
Clé trouvée: HKU\S-1-5-18\Software\Hola
Clé trouvée: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Clé trouvée: [x64] HKLM\SOFTWARE\Hola
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.solvusoft.com
Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.solvusoft.com
Clé trouvée: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
Clé trouvée: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.solvusoft.c
Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.solvusoft.com


***** [ Navigateurs web ] *****

Aucune préférence Firefox malveillante trouvée.
Chromium préf trouvée: [C:\Users\Quelqu'un\AppData\Local\Google\Chrome\User Data\Default\Web data] - ask.com
Chromium préf trouvée: [C:\Users\Quelqu'un\AppData\Local\Google\Chrome\User Data\Profile 2\Web data] - ask.com

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [3740 octets] - [06/01/2017 20:45:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3814 octets] ##########


those two are finished, the other two are running

 

[Malnutrition]

Your adware cleaner log indicates that you did not remove the items. You should run these tools in the order I have listed. Once the other tools are ran, then run adware cleaner again and post the new log.

 

[Jérémie]

Of course I didn't remove them, I need those apps There were on my PC since the begging, I can assure you they are not the problem

 

[Malnutrition]

Hola & Pokki are known malware.

Hola uses your machine as a bot.
Pokki is straight up malware.

As well as the other apps, you should certainly remove them. They might not be the exact problem, but a little of this and little of that.... Build up to be a whole lot of something. Leaving these malwares on your machine is a terrible idea.

 

[Jérémie]

okay, I deleted Pokki and Hola

 

[Malnutrition]

Yeah, you will need to show me all four logs, actually three that way it can be confirmed.

 

[Jérémie]

Zemana AntiMalware 2.70.2.352 (Installed)

-------------------------------------------------------
Scan Result : Completed
Scan Date : 2017-1-6
Operating System : Windows 10 64-bit
Processor : 4X AMD A10-7300 Radeon R6, 10 Compute Cores 4C+6G
BIOS Mode : UEFI
CUID : 122D0B10E6E1695805CE4C
Scan Type : Scheduled Scan
Duration : 35m 35s
Scanned Objects : 297406
Detected Objects : 10
Excluded Objects : 0
Read Level : SCSI
Auto Upload : Disabled
Detect All Extensions : Disabled
Scan Documents : Disabled
Domain Info : WORKGROUP,0,2

Detected Objects
-------------------------------------------------------

Edge Homepage
Status : Scanned
Object : fle:///C:/Users/Quelqu'un/Documents/Home/New Hompage.html
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Edge Homepage

Firefox Shortcut
Status : Scanned
Object : "firefox"
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Shortcut

Firefox Search
Status : Scanned
Object : Ecosia - http://ac.ecosia.org
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Search

Firefox Search
Status : Scanned
Object : Ecosia - http://ecosia.org
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Search

Firefox Search
Status : Scanned
Object : Disconnect - http://mycroftproject.com
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Search

Firefox Homepage
Status : Scanned
Object : file:///C:/Users/Quelqu'un/Documents/Home/Homepage.html
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Homepage

Firefox Search
Status : Scanned
Object : Ecosia - http://ac.ecosia.org
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Search

Firefox Search
Status : Scanned
Object : Ecosia - http://ecosia.org
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Search

Firefox Search
Status : Scanned
Object : Disconnect - http://mycroftproject.com
MD5 : -
Publisher : -
Size : -
Version : -
Detection : Suspicious Browser Setting
Cleaning Action : Report as safe
Related Objects :
Browser Setting - Firefox Search

Hosts File
Status : Scanned
Object : %systemroot%\system32\drivers\etc\hosts
MD5 : F666B6456726DB927939D86012073291
Publisher : -
Size : 89
Version : -
Detection : Hosts Hijack
Cleaning Action : Report as safe
Related Objects :
Hosts file - Hosts file is hidden
File - %systemroot%\system32\drivers\etc\hosts


Cleaning Result
-------------------------------------------------------
Cleaned : 0
Reported as safe : 10
Failed : 0

 

[Jérémie]

[-] Deleted ->> Folder ->> C:\Windows\System32\GroupPolicy\adm
[-] Deleted ->> Registry Key ->> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\taphss6
[-] Deleted ->> Registry Key ->> HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\taphss6

 

[Jérémie]

All my logs have been submitted,

 

[Malnutrition]

Scan Type : Scheduled Scan

You did not follow my instructions for scan type!

Hosts File
Status : Scanned
Object : %systemroot%\system32\drivers\etc\hosts
MD5 : F666B6456726DB927939D86012073291
Publisher : -
Size : 89
Version : -
Detection : Hosts Hijack
Cleaning Action : Report as safe
Related Objects :
Hosts file - Hosts file is hidden
File - %systemroot%\system32\drivers\etc\hosts

Why would you report a hijacked host file as safe?

All my logs have been submitted,

I need the Adware Cleaner log....



I am not sure if this fix will work, you have continually not followed instructions only doing what you see fit to do.

It is Extremely Important that you follow these next steps to the T.



Ok, lets do this to see if we can get the error solved.



install (use the direct download) the Tweaking.com - Windows all in one repair tool. Then boot Windows into Safe Mode, (Make Certain To Run This Program As Administrator) then run through the Prescan on step 2 tab. Then skip to step 5 and create a system restore point. Then go to the repair tab...

Notice create a registry backup is ticked by default, so no need to do so in step 5...

Now run the program, with the boxes ticked in the picture below.

Click Image Below For Better Resolution.

May want to save picture or write down what boxes need ticked, since you will run this in Safe Mode.


Important: Make certain to reboot twice after running this tool!!

 

[Jérémie]

okay, so I did exactly what you said but it is still buggy... so what i plan on doing is making a partition and installing w10 on it, transfer the files i have on the first partition to the second and then delete the second. The only problem is: I have no idea how to do that... Would you please walk me through the steps? Thank you

 

[Malnutrition]

Do you perhaps have a spare HDD?
If not, then surely a repair install would help you out here.
Grab a copy of windows 10 from here.
Perform a repair install on the machine.
This will be easier and faster than what you propose.

 

[Malnutrition]

How about an update for us?

 

[Malnutrition]

Hello @Jérémie how are you moving along with the instructions? Have you got an update for us?

Please update this thread within 48 hours, or it will closed. You can however have it re=opened at any time, by sending a private message to a staff member.