# AdwCleaner 7.0.2.1 - Logfile created on Thu Aug 31 10:11:29 2017 # Updated on 2017/29/08 by Malwarebytes # Running on Windows 7 Professional (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** Deleted: Plusdax Deleted: c4b281505d32a05e773aac2683ea5365 ***** [ Folders ] ***** Deleted: C:\Windows\System32\\SSL Deleted: C:\Windows\SysWOW64\\SSL Deleted: C:\ProgramData\Plusdax Deleted: C:\ProgramData\Application Data\Plusdax Deleted: C:\Users\All Users\Plusdax Deleted: C:\ProgramData\Plusdax Deleted: C:\ProgramData\Application Data\Plusdax Deleted: C:\Users\All Users\Plusdax Deleted: C:\ProgramData\Plusdax Deleted: C:\ProgramData\Application Data\Plusdax Deleted: C:\Users\All Users\Plusdax ***** [ Files ] ***** Deleted: C:\Users\Admin\AppData\Local\Main.dat Deleted: C:\Windows\SysNative\drivers\Lace_wpf_x64.sys Deleted: C:\Windows\System32\config\systemprofile\appdata\local\installationconfiguration.xml Deleted: C:\Users\Admin\appdata\local\installationconfiguration.xml Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\PO.DB Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\PO.DB Deleted: C:\Users\Admin\AppData\Local\PO.DB Deleted: C:\Windows\Temp\reimage.log Deleted: C:\Windows\System32\findit.xml Deleted: C:\Windows\SysWOW64\findit.xml ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** Deleted: Microsoft\Windows\Windows Error Reporting\ErrorReporting Deleted: uuxHwpnMkRCRpJh2 Deleted: uuxHwpnMkRCRpJh Deleted: TnqpiRJoXWMCwN Deleted: FastDataX Task ***** [ Registry ] ***** Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchy Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24F5E422-6A70-4FAA-8CAD-E23D5DC1DAE6} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DD0688A5-FC8B-4E93-A485-CBF606A56D49} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\DMunversion Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546} Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36} Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A} Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL Deleted: [Key] - HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9 Deleted: [Data] - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs [C:\ProgramData\Plusdax\Bigstock.dll] Deleted: [Key] - HKU\S-1-5-21-2407023709-1011807550-9218861-1000\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief. Deleted: [Key] - HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief. Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\E3605470-291B-44EB-8648-745EE356599A Deleted: [Key] - HKU\S-1-5-21-2407023709-1011807550-9218861-1000\Software\MICROSOFT\wewewe Deleted: [Key] - HKCU\Software\MICROSOFT\wewewe Deleted: [Key] - HKLM\SOFTWARE\mtApService Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application Deleted: [Key] - HKU\S-1-5-21-2407023709-1011807550-9218861-1000\Software\Microsoft\BigTime Deleted: [Key] - HKCU\Software\Microsoft\BigTime Deleted: [Key] - HKLM\SOFTWARE\mtApService Deleted: [Key] - HKU\S-1-5-21-2407023709-1011807550-9218861-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\119 Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\119 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\APreSam Deleted: [Key] - HKLM\SOFTWARE\Microsoft\NSaveA Deleted: [Key] - HKLM\SOFTWARE\Microsoft\PrAmNP Deleted: [Key] - HKLM\SOFTWARE\Microsoft\MPrForShutT Deleted: [Key] - HKLM\SOFTWARE\Microsoft\PrIncub Deleted: [Key] - HKU\S-1-5-21-2407023709-1011807550-9218861-1000\Software\Microsoft\{cc6eb6d8-85b7-435p-8b86-51e4d16ea76d} Deleted: [Key] - HKCU\Software\Microsoft\{cc6eb6d8-85b7-435p-8b86-51e4d16ea76d} Deleted: [Key] - HKLM\SOFTWARE\texttotalk ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [5952 B] - [2017/8/31 10:10:59] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########