# AdwCleaner 7.0.1.0 - Logfile created on Fri Aug 04 11:25:37 2017
# Updated on 2017/05/08 by Malwarebytes
# Database: 07-31-2017.1
# Running on Windows 7 Home Premium (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

Adware.PremierOpinion, PremierOpinion


***** [ Folders ] *****

PUP.Optional.MailRU, C:\ProgramData\Mail.Ru
PUP.Optional.MailRU, C:\ProgramData\Application Data\Mail.Ru
PUP.Optional.MailRU, C:\Program Files (x86)\Mail.Ru
PUP.Optional.MailRU, C:\Users\All Users\Mail.Ru
PUP.Optional.MailRU, C:\Users\loulou-papa\AppData\Local\Mail.Ru
PUP.Optional.Legacy, C:\Users\loulou-papa\AppData\Roaming\acestream
PUP.Optional.Legacy, C:\Users\loulou-papa\AppData\LocalLow\.acestream
PUP.Optional.Legacy, C:\Users\loulou-papa\AppData\Roaming\.acestream
PUP.Optional.Legacy, C:\Users\All Users\Documents\pc faster
PUP.Optional.Legacy, C:\Users\Public\Documents\pc faster
PUP.Optional.Legacy, C:\Users\loulou-papa\AppData\Roaming\MailProducts
PUP.Optional.Legacy, C:\Users\loulou-papa\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
PUP.Optional.Amigo, C:\Users\loulou-papa\AppData\Local\Amigo
Adware.PremierOpinion, C:\Program Files (x86)\PremierOpinion
Adware.PremierOpinion, C:\Users\loulou-papa\AppData\Local\Temp\PremierOpinion
PUP.Optional.ByteFence, C:\ProgramData\ByteFence
PUP.Optional.ByteFence, C:\ProgramData\Application Data\ByteFence
PUP.Optional.ByteFence, C:\Program Files\ByteFence
PUP.Optional.ByteFence, C:\Users\All Users\ByteFence
PUP.Optional.Vondos, C:\Users\loulou-papa\AppData\Roaming\Browser-Security
PUP.Optional.Solvusoft, C:\Users\loulou-papa\AppData\Roaming\Solvusoft
PUP.Optional.Yontoo, C:\Users\loulou-papa\AppData\Local\Amigo
PUP.Optional.FileViewPro, C:\Users\loulou-papa\AppData\Local\FileViewPro
PUP.Optional.YesSearches, C:\Program Files (x86)\Reujosestogle
PUP.Adware.Heuristic, C:\ProgramData\5f46e29f-1c11-0
PUP.Adware.Heuristic, C:\ProgramData\5f46e29f-39d7-1
PUP.Adware.Heuristic, C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
PUP.Adware.Heuristic, C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
PUP.Adware.Heuristic, C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log


***** [ Files ] *****

PUP.Optional.Legacy, C:\Windows\System32\pmls.dll
PUP.Optional.Legacy, C:\Windows\SysWOW64\pmls.dll
PUP.Optional.Legacy, C:\Users\loulou-papa\AppData\Roaming\Mozilla\Firefox\Profiles\46ptht6x.default-1489754794942\searchplugins\bing-lavasoft.xml
PUP.Optional.SysTweak, C:\Windows\SysNative\roboot64.exe


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.YesSearches, Reujosestogle Community


***** [ Registry ] *****

PUP.Optional.MailRU, [Key] - HKLM\SOFTWARE\Mail.Ru
PUP.Optional.MailRU, [Key] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\Mail.Ru
PUP.Optional.MailRU, [Key] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\AppDataLow\Software\Mail.Ru
PUP.Optional.MailRU, [Key] - HKCU\Software\Mail.Ru
PUP.Optional.MailRU, [Key] - HKCU\Software\AppDataLow\Software\Mail.Ru
PUP.Optional.MailRU, [Key] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\Xpom
PUP.Optional.MailRU, [Key] - HKCU\Software\Xpom
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {C198A04B-18A5-450B-87CF-9647B6B734F0}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {490B4462-C86F-48ED-99F4-EC01B5785493}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {9AB63807-AA1E-44D7-A2F4-FA875F5ED920}
PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F98BB71D-137A-4DA3-A724-FAA6B0450FF8}
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\nuevos-programas.com
PUP.Optional.Legacy, [Key] - HKCU\Software\nuevos-programas.com
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Lavasoft\Web Companion
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\Lavasoft\Web Companion
PUP.Optional.Legacy, [Key] - HKCU\Software\Lavasoft\Web Companion
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\{8C4CE252-7DB2-4F8E-8E76-BAD0E5826A83}
PUP.Optional.Legacy, [Key] - HKU\.DEFAULT\Software\{8C4CE252-7DB2-4F8E-8E76-BAD0E5826A83}
PUP.Optional.Legacy, [Key] - HKU\S-1-5-18\Software\{8C4CE252-7DB2-4F8E-8E76-BAD0E5826A83}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\trotuxSoftware
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{6710C780-E20E-4C49-A87D-321850ED3D7C}
PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\Microsoft\Windows\CurrentVersion\Run | safe_urls768
PUP.Optional.Legacy, [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run | safe_urls768
PUP.Optional.Legacy, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application
PUP.Optional.Legacy, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
PUP.Optional.Legacy, [Key] - HKCU\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Mozilla\Firefox\{EB52F1AB-3C2B-424F-9794-833C687025CF}
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}
PUP.Optional.Legacy, [Key] - HKCU\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}
PUP.Optional.Amigo, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {B2A90C9C-5CCD-4FC3-8F9B-415E1D7F76D9}
PUP.Optional.Amigo, [Key] - HKLM\SOFTWARE\MICROSOFT\MEDIAPLAYER\SHIMINCLUSIONLIST\amigo.exe
Adware.PremierOpinion, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {9AB63807-AA1E-44D7-A2F4-FA875F5ED920}
Adware.PremierOpinion, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F98BB71D-137A-4DA3-A724-FAA6B0450FF8}
Adware.PremierOpinion, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{eeb86aef-4a5d-4b75-9d74-f16d438fc286}
PUP.Optional.Vondos, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Browser-Security
PUP.Optional.Trotux, [Key] - HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}
PUP.Optional.InstallCore, [Key] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\csastats
PUP.Optional.InstallCore, [Key] - HKCU\Software\csastats
PUP.Optional.ProductSetup.A, [Key] - HKU\S-1-5-21-4099352771-2613144182-2896515203-1001\Software\PRODUCTSETUP
PUP.Optional.ProductSetup.A, [Key] - HKCU\Software\PRODUCTSETUP


***** [ Firefox (and derivatives) ] *****

Plugin found: Browser-Security - Vondos Media GmbH


***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########