# AdwCleaner 7.0.3.1 - Logfile created on Sun Oct 22 22:08:46 2017 # Updated on 2017/29/09 by Malwarebytes # Database: 10-17-2017.1 # Running on Windows 8.1 (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.Legacy, C:\Users\Maurine\AppData\Roaming\GoldenGate ***** [ Files ] ***** PUP.Optional.Legacy, C:\Users\Maurine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\cloudfront.net PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\d173vqb05g6hza.cloudfront.net PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\plarium.com PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\superfish.com PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\www.superfish.com PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | UDP Query User{61C3FCB3-73EF-4F69-B999-C8FFBAD695CD}C:\users\maurine\appdata\roaming\cacaoweb\cacaoweb.exe PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | TCP Query User{E3CF0D71-017F-4BCA-BA20-293C546B9764}C:\users\maurine\appdata\roaming\cacaoweb\cacaoweb.exe PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\TeleCharger PUP.Optional.Legacy, [Key] - HKCU\Software\TeleCharger PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\GoldenGate PUP.Optional.Legacy, [Key] - HKCU\Software\GoldenGate PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4} PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\3045035B-3C14-4698-8AC4-ADB18CC42C1E PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run | cacaoweb PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\3045035B-3C14-4698-8AC4-ADB18CC42C1E PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95} PUP.Optional.SuperOptimizer, [Key] - HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} PUP.Optional.SuperOptimizer, [Key] - HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} PUP.Optional.RegCleanPro, [Key] - HKLM\SOFTWARE\REG\CLEAN\pro PUP.Optional.RegCleanPro, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\REG\CLEAN\pro PUP.Optional.RegCleanPro, [Key] - HKCU\Software\REG\CLEAN\pro PUP.Optional.MultiPlug, [Key] - HKCU\Software\Classes\TypeLib\{157B1AA6-3E5C-404A-9118-C1D91F537040} PUP.Optional.MultiPlug, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Classes\TypeLib\{157B1AA6-3E5C-404A-9118-C1D91F537040} PUP.Optional.ProductSetup.A, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\PRODUCTSETUP PUP.Optional.ProductSetup.A, [Key] - HKCU\Software\PRODUCTSETUP PUP.Optional.CleanMyPC, [Key] - HKLM\SOFTWARE\Reg\Clean PUP.Optional.CleanMyPC, [Key] - HKU\S-1-5-21-1876844761-3469725724-68208176-1002\Software\Reg\Clean PUP.Optional.CleanMyPC, [Key] - HKCU\Software\Reg\Clean ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries. ************************* ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########