Ok , I do know that this malware is associated with google chrome, it sometimes ask to connect to the site ,thank god AV always gets me always an abort connection message.

I have uninstalled chrome for now and it seems to work …

unfortunately mafou is not responding yet … we will see … but I think the uninstall of chrome works fine as of now…

it really seems to work …