Tough simplitec

[Johyn]

Greets!

Just about an unremovable PUP: Simplitec, in programdata. Roguekiller locate it, and supress it, but to get them (there are two of them) back in next scan. That doesn't seem really nasty, got it since a couple of week, but that's still anoyin, eh.

[Curson]

Hi Johyn,

Thanks for your feedback.
Could you please attach RogueKiller deletion report with your next reply ?

Regards.

[Johyn]

Sorry, how do I get that report?

[Curson]

Hi Johyn,

To export a report, go to the "History" tab, then to the "Scan Reports" section.
There, do a right click on the first line, the click on the "Export json" button.

Please then attach this JSON report with your next reply.

Regards.

[Johyn]

Got only a 'supression' option...

[Curson]

Hi Johyn,

 Could you please check the content of the following directory ?

C:\ProgramData\RogueKiller\Logs

Regards.

[Johyn]

no logs, only changelogs...

[Curson]

Hi Johyn,

That's not normal.
Could you please redo a scan and check if the option to save a log is available at the end of it ?

Regards.

[Johyn]

Ok, here it is.

[Curson]

Hi Johyn,

The report is not complete, but the [Suspicious.Path] detection is legit.

Regards.

[Johyn]

Ok, but what's lackin? I shouldn't mind the two 'simplitec'?

[Curson]

Hi Johyn,

Could you please do a screenshot of these detections ?

Regards.

[Johyn]

Is that ok?

[Curson]

Hi Johyn,

Yes, thats clearly PUP.
Please download Farbar Recovery Scan Tool (x64) and save it to your Desktop.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
  
• Please attach log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe). Please also attach that along with the FRST.txt into your reply.
  

Regards.

[Johyn]

Ok,