# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-02-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-01-2019
# Duration: 00:01:07
# OS: Windows 8
# Cleaned: 61
# Failed: 2


***** [ Services ] *****

Deleted Suite Service
Deleted RestoroActiveProtection
Deleted Start Menu Logon Manager

***** [ Folders ] *****

Deleted C:\Users\Jean-Marie\AppData\Local\PACKAGETRACERTOOLTAB
Deleted C:\Program Files (x86)\IObit\Advanced SystemCare
Deleted C:\Users\Jean-Marie\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Users\Jean-Marie\AppData\Local\CompuClever
Deleted C:\Users\Jean-Marie\AppData\Roaming\CompuClever
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverUpdate
Deleted C:\Program Files\DriverUpdate
Deleted C:\Users\Jean-Marie\AppData\Local\Downloaded Installers
Not Deleted C:\OneSafe PC Cleaner
Deleted C:\ProgramData\Restoro
Deleted C:\Program Files\Restoro
Deleted C:\Users\All Users\Restoro
Deleted C:\Program Files\SlimWare Utilities
Deleted C:\Program Files (x86)\UTILILAB
Deleted C:\ProgramData\pctonics.com
Deleted C:\Users\All Users\pctonics.com
Deleted C:\Users\Jean-Marie\AppData\Roaming\pctonics.com

***** [ Files ] *****

Deleted C:\Users\All Users\Desktop\ASHAMPOO DEALS.URL
Deleted C:\Users\Public\Desktop\ASHAMPOO DEALS.URL
Deleted C:\Users\Jean-Marie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Video Converter.lnk
Deleted C:\Users\Jean-Marie\AppData\Local\Temp\restoro-downloader.xml
Deleted C:\Users\Jean-Marie\AppData\Local\Temp\restoro-downloader.log
Deleted C:\Users\Jean-Marie\AppData\Local\Temp\restoro-version.xml
Deleted C:\Users\Jean-Marie\AppData\Local\Temp\restoro-setup.log
Deleted C:\Users\Jean-Marie\AppData\Local\Temp\RestoroSetup.exe
Deleted C:\Users\Jean-Marie\AppData\Local\Temp\restoro_service_version.xml
Deleted C:\Windows\restoro.ini

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\Tasks\RestoroActiveProtection.job

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\CLASSES\INTERFACE\{DCC049B0-CA04-4E58-B4C8-CE62AC6F5096}
Deleted HKLM\SOFTWARE\CLASSES\INTERFACE\{DCC049B0-CA04-4E58-B4C8-CE62AC6F5096}
Deleted HKLM\Software\Wow6432Node\CLASSES\TYPELIB\{FE9301D5-9266-4A2F-8767-85482115CAB0}
Deleted HKLM\SOFTWARE\CLASSES\TYPELIB\{FE9301D5-9266-4A2F-8767-85482115CAB0}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\DriverUpdate
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run|CommonToolkitTray
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Deleted HKLM\Software\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Not Deleted HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel|Homepage
Deleted HKLM\Software\Classes\CLSID\{278029E0-2347-4254-A65E-204AC55E2508}
Deleted HKLM\Software\Wow6432Node\Classes\AppID\{278029E0-2347-4254-A65E-204AC55E2508}
Deleted HKLM\Software\Classes\AppID\{278029E0-2347-4254-A65E-204AC55E2508}
Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted HKLM\Software\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted HKLM\Software\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Deleted HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted HKCU\Software\Utililab
Deleted HKLM\Software\Wow6432Node\Utililab
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Restoro
Deleted HKLM\Software\Restoro
Deleted HKLM\Software\Classes\CLSID\{BA827421-E282-479E-AE60-34796877B8AE}
Deleted HKLM\Software\Classes\CLSID\{AE198C69-7358-4856-9029-F4C0FAD524C1}
Deleted HKLM\Software\Wow6432Node\SlimWare Utilities Inc
Deleted HKLM\Software\SlimWare Utilities Inc
Deleted HKLM\Software\Wow6432Node\Classes\AppID\SecureShell.dll
Deleted HKLM\SOFTWARE\Classes\AppID\SecureShell.dll
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B80101BC-D0EE-45e3-AD9A-50AE7B834EB0}_is1
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{0E268202-3B38-4F53-99EE-F12FDD5A7DC9}
Deleted HKLM\Software\Classes\TypeLib\{0E268202-3B38-4F53-99EE-F12FDD5A7DC9}
Deleted HKCU\Software\pctonics.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] remove_folder_Auslogics
[+] remove_folder_Auslogics(2)
[+] remove_folder_Auslogics(3)
[+] remove_folder_Auslogics(4)
[+] remove_regKey_Auslogics
[+] Delete IFEO
[+] Delete Prefetch
[+] Delete Tracing Keys
[+] Reset BITS
[+] Reset Windows Firewall
[+] Reset Hosts File
[+] Reset IPSec
[+] Reset Chromium Policies
[+] Reset IE Policies
[+] Reset Proxy Settings
[+] Reset TCP/IP
[+] Reset Winsock

*************************

AdwCleaner_Debug.log - [30040 octets] - [01/03/2019 05:41:40]
AdwCleaner[S00].txt - [6752 octets] - [01/03/2019 05:42:58]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########