Adware.Hicosmea

Always glad to see your posts/assistance Torchwood!

I'm telling you the download link is clean! Your Anti-virus is providing you with a false positive, i.e. it is incorrectly flagging this executable.

Many AVs do this to protect the less IT savvy individuals from downloading something that may harm their computer. For example, NirSoft, author Nir Sofer, has numerous free IT tools on his website. If I download say NirLauncher, from the website, my Avast Free AV goes nuts flagging perfectly fine apps. None of NirSoft apps are malicious, however, some, if used incorrectly can cause damage to an Operation System, thus your AV flaggs them as may harm your computer.

What we are attempting to do with Farbar Recovery Scan Tool (FRST) is to locate all entries of Hicosmea, files, folders, registry entries. With those logs in hand, I can author a fix to remove the malware/adware from your computer.

If you continue to have issues with downloading FRST, you may temporarily disable your AV. FRST is an executable and doesn't require installation on your computer.

Snugglebugs said:

Regarding multiple protections - no, I don't have all those installed and running! I only have MSE and Malwarebytes on THIS computer. Defender is installed (as an old experiment) but switched off so is never active.

I was perusing your System specs, in which you indicate, Antivirus: AVG, MS Essentials and Windows Defender
That is why I made referencing statement.

Just perused your ADWCleaner logs, lots of crap was on your computer!

Not a problem, I don't sit waiting for a response from OPs. I do however, have my email notifications set. Torchwood/Roy has been at this a bit long that I have, he is monitoring this thread as he posted here.

F22 Simpilot's suggestions are applicable and relevant. I also use & recommend them as well as a few others, which I have posted in a couple other threads including hyperlinks thereto.

I have now run FRST from my desktop and after two messages about incorrect entries, it generated the two log files attached. I ran it using the defaults that appeared and have not changed anything, or clicked on any buttons except "Scan"

Tony

PS - What are OPs?

Thanks again Torchwood!