# -------------------------------
# Malwarebytes AdwCleaner 7.2.1.0
# -------------------------------
# Build: 06-26-2018
# Database: 2018-07-03.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 07-03-2018
# Duration: 00:00:05
# OS: Windows 10 Home
# Cleaned: 43
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\Org4000\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence
Deleted C:\Program Files (x86)\PC Speed Maximizer

***** [ Files ] *****

Deleted C:\Windows\System32\drivers\EsgScanner.sys

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\System32\Tasks\SpyHunter4Startup

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
Deleted HKU\S-1-5-18\Software\ByteFence
Deleted HKU\.DEFAULT\Software\ByteFence
Deleted HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\fr.bytefence.com
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bytefence.com
Deleted HKCU\Software\csastats
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{99E2F3AB-15ED-4F76-8921-2471702C2EF3}
Deleted HKLM\Software\Classes\CLSID\{99E2F3AB-15ED-4F76-8921-2471702C2EF3}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{7F2FA86A-181A-4F8F-B853-51F897A91227}
Deleted HKLM\Software\Classes\CLSID\{7F2FA86A-181A-4F8F-B853-51F897A91227}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{71B97DA2-A432-42FA-AD66-28C567704807}
Deleted HKLM\Software\Classes\CLSID\{71B97DA2-A432-42FA-AD66-28C567704807}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{E74BB8EA-65C0-4668-A5F0-6A28108DCA84}
Deleted HKLM\Software\Classes\Interface\{E74BB8EA-65C0-4668-A5F0-6A28108DCA84}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{D462DCAD-F466-413A-BFB1-DB0B5FE5632D}
Deleted HKLM\Software\Classes\Interface\{D462DCAD-F466-413A-BFB1-DB0B5FE5632D}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{CFD3A45B-3B01-47D3-8433-5A72D8026392}
Deleted HKLM\Software\Classes\Interface\{CFD3A45B-3B01-47D3-8433-5A72D8026392}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{3F969EF1-4860-4564-87FC-59925DF0EC62}
Deleted HKLM\Software\Classes\Interface\{3F969EF1-4860-4564-87FC-59925DF0EC62}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{2C938654-2875-404A-8D95-664CC1F36620}
Deleted HKLM\Software\Classes\Interface\{2C938654-2875-404A-8D95-664CC1F36620}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{27FBF3C5-1A02-4375-ADC3-132FB74327B1}
Deleted HKLM\Software\Classes\Interface\{27FBF3C5-1A02-4375-ADC3-132FB74327B1}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{10D40766-F80D-478A-AA30-D90A8B49C789}
Deleted HKLM\Software\Classes\Interface\{10D40766-F80D-478A-AA30-D90A8B49C789}
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{BB02A111-23B2-4242-9C8E-B093BD0A2E3C}
Deleted HKLM\Software\Classes\TypeLib\{BB02A111-23B2-4242-9C8E-B093BD0A2E3C}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{5DAAB57B-836A-456C-99D8-A5E0AF03FD94}
Deleted HKLM\Software\Classes\CLSID\{5DAAB57B-836A-456C-99D8-A5E0AF03FD94}
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}
Deleted HKLM\Software\Reimage
Deleted HKLM\Software\EnigmaSoftwareGroup
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6013322-DC57-4614-9670-68F543BE0423}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup
Deleted HKLM\Software\DtsEncodeTools
Deleted HKCU\Software\win
Deleted HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon|Userinit

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5411 octets] - [03/07/2018 11:37:12]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########