# -------------------------------
# Malwarebytes AdwCleaner 7.2.2.0
# -------------------------------
# Build: 07-17-2018
# Database: 2018-08-13.2
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 08-17-2018
# Duration: 00:00:06
# OS: Windows 10 Home
# Cleaned: 56
# Failed: 1


***** [ Services ] *****

Deleted YSearchUtilSvc

***** [ Folders ] *****

Deleted C:\ProgramData\1E29D23600007A93
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\????
Deleted C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????
Deleted C:\Program Files\Common Files\Tencent
Deleted C:\Program Files (x86)\Yahoo!\yset
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
Deleted C:\Users\Matthias\AppData\Local\YSearchUtil
Deleted C:\Users\Matthias\Desktop\Tuto
Deleted C:\ProgramData\AGI

***** [ Files ] *****

Deleted C:\Windows\System32\drivers\TFsFltX64.sys
Deleted C:\Windows\SysWOW64\MMInstaller.dll

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ConvertAd
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|WindApp
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SU
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21}
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21}
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
Deleted HKCU\Software\Kromtech
Deleted HKLM\Software\Wow6432Node\SpeedBit
Deleted HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION|AndroidServer.exe
Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|SmartWeb
Deleted HKLM\Software\Wow6432Node\Classes\AppID\DownloadProxy.EXE
Deleted HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{8519F1E4-E25B-42B1-B361-0C643F45CF11}
Deleted HKLM\Software\Classes\TypeLib\{8519F1E4-E25B-42B1-B361-0C643F45CF11}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted HKLM\Software\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{6E1533F0-E0B5-465A-9F16-98FF0C76D493}
Deleted HKLM\Software\Classes\TypeLib\{6E1533F0-E0B5-465A-9F16-98FF0C76D493}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{EC0FA563-E0F2-406F-8659-1E728458A91E}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{88260EA6-BC91-42DF-ABEF-4A683E8A3C23}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{4C097DF1-0716-4FA1-84A9-025BC1E7B03F}
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved|{754DF2CE-51E8-4895-B53C-6381418B84AE}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{754DF2CE-51E8-4895-B53C-6381418B84AE}
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Deleted HKLM\Software\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Deleted HKLM\Software\Wow6432Node\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
Deleted HKLM\Software\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
Deleted HKLM\Software\Classes\METNSD
Deleted HKLM\Software\Classes\qmgcfiles
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|qqlive
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{8B2BBEEC-3A3A-4A8F-A81B-822B668889D0}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5EF7B131-C278-4034-BC88-2CE28B128681}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D9EBCF5D-3F8F-4B6A-89BA-70577BE73C62}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F7E55BDF-9528-46BA-B550-777859627591}

***** [ Chromium (and derivatives) ] *****

Deleted Recherche et nouvel onglet de Yahoo

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

Deleted Zotero Bibliography Locale Switcher

***** [ Firefox URLs ] *****

Not Deleted oursurfing.com


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [6774 octets] - [17/08/2018 19:54:46]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########