# AdwCleaner 7.0.1.0 - Logfile created on Sat Aug 19 18:16:26 2017 # Updated on 2017/05/08 by Malwarebytes # Database: 08-17-2017.2 # Running on Windows 10 Home (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** PUP.Optional.ByteFence, ByteFenceService PUP.Optional.Linkury.ACMB1, rtop ***** [ Folders ] ***** PUP.Optional.AdvancedSystemCare, C:\ProgramData\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\ProgramData\Application Data\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Windows\System32\config\systemprofile\AppData\LocalLow\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Users\All Users\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Users\BS\AppData\LocalLow\IObit\Advanced SystemCare PUP.Optional.AdvancedSystemCare, C:\Users\BS\AppData\Roaming\IObit\Advanced SystemCare PUP.Optional.Legacy, C:\ProgramData\lavasoft\web companion PUP.Optional.Legacy, C:\ProgramData\Application Data\lavasoft\web companion PUP.Optional.Legacy, C:\Program Files (x86)\lavasoft\web companion PUP.Optional.Legacy, C:\Users\All Users\lavasoft\web companion PUP.Optional.Legacy, C:\Users\BS\AppData\Roaming\lavasoft\web companion PUP.Optional.Legacy, C:\ProgramData\Host App Service PUP.Optional.Legacy, C:\ProgramData\Application Data\Host App Service PUP.Optional.Legacy, C:\Users\All Users\Host App Service PUP.Optional.Legacy, C:\Users\BS\AppData\Local\Host App Service PUP.Optional.Legacy, C:\Users\Default\AppData\Local\Host App Service PUP.Optional.Legacy, C:\Users\Default User\AppData\Local\Host App Service PUP.Optional.Legacy, C:\Users\defaultuser0\AppData\Local\Host App Service PUP.Optional.Legacy, C:\Program Files (x86)\Common Files\freemake shared PUP.Optional.Legacy, C:\ProgramData\IObit\ASCDownloader PUP.Optional.Legacy, C:\ProgramData\Application Data\IObit\ASCDownloader PUP.Optional.Legacy, C:\Users\All Users\IObit\ASCDownloader PUP.Optional.ByteFence, C:\ProgramData\ByteFence PUP.Optional.ByteFence, C:\ProgramData\Application Data\ByteFence PUP.Optional.ByteFence, C:\Program Files\ByteFence PUP.Optional.ByteFence, C:\Users\All Users\ByteFence PUP.Optional.ByteFence, C:\Users\BS\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence PUP.Optional.WebCompanion, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion PUP.Adware.Heuristic, C:\ProgramData\{3E88FBEB-B4CA-712D-320C-EF6FA84E64A1} PUP.Adware.Heuristic, C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A} ***** [ Files ] ***** PUP.Optional.Legacy, C:\Users\BS\AppData\Roaming\Mozilla\Firefox\Profiles\5m9zp55x.default\searchplugins\bing-lavasoft.xml PUP.Optional.WinYahoo, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** PUP.Optional.Legacy, ByteFence Scan PUP.Optional.Legacy, App Explorer PUP.Optional.ByteFence, ByteFence ***** [ Registry ] ***** PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\IOBIT\ASC PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {E6AC75DA-673A-4F21-9727-337A340A709D} PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {87E10146-5922-43CD-BA5C-662334003F25} PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3795497416-2115614967-1374131030-1001\Software\Host App Service PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3795497416-2115614967-1374131030-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service PUP.Optional.Legacy, [Key] - HKCU\Software\Host App Service PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Lavasoft\Web Companion PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3795497416-2115614967-1374131030-1001\Software\Lavasoft\Web Companion PUP.Optional.Legacy, [Key] - HKCU\Software\Lavasoft\Web Companion PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{03F14321-8FED-4CBC-B01A-4B57FC199062} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{23BDC78C-B7BB-42E5-B970-54B292592D72} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{2C6F7E96-73BC-47A5-9F51-B67F0BAFE24D} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{43B4B831-F41F-4F73-8F14-4FFF0BA75B1B} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{4C58EB04-7B72-4D3D-A36E-66167A99BC31} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{4EE0B011-604C-47F3-8F2B-39F79640B85E} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\{5E50AE1D-BC76-418B-94C4-EFEAC0CEF80C} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\{69E54DE2-C4ED-4BEC-8046-E3F9AC74B4B0} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{85672EDB-2CC8-40B9-A9E8-77D3478F2EFB} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{CD5175E2-7CC1-418C-B66C-0AB95DAD4103} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{D8BFC514-1135-4393-B09A-193D2AAC5037} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{6BC38BF4-E84D-46E1-920B-42D31AEA617E} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{98ED0D10-F1FC-4113-A095-9BD7F96040C9} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{B162A975-6C7C-4202-9167-306028913A3D} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{DEF4ED0D-E666-4631-A35A-A634332F0550} PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | Codec Settings UAC Manager PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\NCTAudioCompress3.DLL PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\NCTAudioFile3.DLL PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\NCTAudioFileWMA3.DLL PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\NCTAudioFormatSettings3.DLL PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\*\shell\ByteFence File Scan PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Directory\shell\ByteFence Folder Scan PUP.Optional.Conduit, [Key] - HKLM\SOFTWARE\Conduit PUP.Optional.Conduit, [Key] - HKU\S-1-5-21-3795497416-2115614967-1374131030-1001\Software\Conduit PUP.Optional.Conduit, [Key] - HKCU\Software\Conduit PUP.Optional.ByteFence, [Key] - HKLM\SOFTWARE\ByteFence PUP.Optional.ByteFence, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence PUP.Optional.ByteFence, [Key] - HKU\.DEFAULT\Software\ByteFence PUP.Optional.ByteFence, [Key] - HKU\S-1-5-21-3795497416-2115614967-1374131030-1001\Software\ByteFence PUP.Optional.ByteFence, [Key] - HKU\S-1-5-18\Software\ByteFence PUP.Optional.ByteFence, [Key] - HKCU\Software\ByteFence PUP.Optional.ByteFence, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application PUP.Optional.ByteFence, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application PUP.Optional.ByteFence, [Value] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION | ByteFence.exe PUP.Optional.InstallCore, [Key] - HKU\S-1-5-21-3795497416-2115614967-1374131030-1001\Software\csastats PUP.Optional.InstallCore, [Key] - HKCU\Software\csastats PUP.Optional.ProductSetup.A, [Key] - HKU\S-1-5-21-3795497416-2115614967-1374131030-1001\Software\PRODUCTSETUP PUP.Optional.ProductSetup.A, [Key] - HKCU\Software\PRODUCTSETUP ***** [ Firefox (and derivatives) ] ***** Plugin found: __MSG_appName__ - Plugin found: YouTube Unblocker - www.unblocker.yt ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries. ************************* ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########