# AdwCleaner 7.0.2.1 - Logfile created on Sat Sep 02 14:22:11 2017 # Updated on 2017/29/08 by Malwarebytes # Database: 09-01-2017.2 # Running on Windows 7 Home Premium (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** PUP.Optional.Legacy, OtherSearch ***** [ Folders ] ***** PUP.Optional.Legacy, C:\Windows\System32\SSL PUP.Optional.Legacy, C:\Windows\SysWOW64\SSL PUP.Optional.Legacy, C:\Program Files (x86)\pandasecuritytb PUP.Optional.Legacy, C:\Users\ROMAIN\AppData\LocalLow\pandasecuritytb PUP.Optional.Legacy, C:\Program Files\Caster PUP.Optional.Legacy, C:\Program Files (x86)\NoterSave Adware.Zusy, C:\Users\ROMAIN\AppData\Local\ToolInetInfo PUP.Optional.ThreatSupport, C:\Users\ROMAIN\AppData\Local\{12A8CCFE-3C33-4995-BAD8-074E4C5B22FD} PUP.Optional.Panda, C:\Program Files\Panda Security URL Filtering ***** [ Files ] ***** PUP.Optional.Legacy, C:\END PUP.Optional.Legacy, C:\Windows\SysNative\drivers\Lace_wpf_x64.sys PUP.Optional.Legacy, C:\Users\ROMAIN\AppData\Roaming\Mozilla\Firefox\Profiles\c8ho9a3h.default\invalidprefs.js PUP.Optional.SysTweak, C:\Windows\SysNative\roboot64.exe ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** PUP.Optional.Legacy, Microsoft\Windows\Windows Error Reporting\ErrorReporting ***** [ Registry ] ***** PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {8D46F6AD-6AC6-4180-8844-E1A7EB662295} PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {8D46F6AD-6AC6-4180-8844-E1A7EB662295} PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {8516A476-8A4D-4C4E-BD33-E4820E9EBE3D} PUP.Optional.Legacy, [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {8516A476-8A4D-4C4E-BD33-E4820E9EBE3D} PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-1241835477-1635233730-338391969-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\NetStream 1.0 PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\NetStream 1.0 PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchy PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24F5E422-6A70-4FAA-8CAD-E23D5DC1DAE6} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DD0688A5-FC8B-4E93-A485-CBF606A56D49} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\DMunversion PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} PUP.Optional.YeaDesktop, [Value] - HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION | YeaDesktop.exe PUP.Optional.YeaDesktop, [Value] - HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION | YeaDesktop.exe PUP.Optional.BitCoinMiner, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gplyra Adware.Amonetize, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application Adware.Amonetize, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application Adware.DNSUnlocker, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564 Adware.NeoBar, [Key] - HKLM\SOFTWARE\Classes\CLSID\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} Adware.NeoBar, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} PUP.Optional.Tuto4PC, [Key] - HKU\S-1-5-21-1241835477-1635233730-338391969-1000\Software\MICROSOFT\wewewe PUP.Optional.Tuto4PC, [Key] - HKCU\Software\MICROSOFT\wewewe PUP.Optional.BestCleaner, [Key] - HKU\S-1-5-21-1241835477-1635233730-338391969-1000\Software\Microsoft\BigTime PUP.Optional.BestCleaner, [Key] - HKCU\Software\Microsoft\BigTime PUP.Optional.OtherSearch, [Key] - HKLM\SOFTWARE\OtherSearch PUP.Optional.WeatherAlerts, [Key] - HKLM\SOFTWARE\Microsoft\APreSam PUP.Optional.WeatherAlerts, [Key] - HKLM\SOFTWARE\Microsoft\NSaveA PUP.Optional.WeatherAlerts, [Key] - HKLM\SOFTWARE\Microsoft\PrAmNP PUP.Optional.WeatherAlerts, [Key] - HKLM\SOFTWARE\Microsoft\MPrForShutT PUP.Optional.WeatherAlerts, [Key] - HKLM\SOFTWARE\Microsoft\PrIncub PUP.Optional.WeatherAlerts, [Key] - HKU\S-1-5-21-1241835477-1635233730-338391969-1000\Software\Microsoft\{cc6eb6d8-85b7-435p-8b86-51e4d16ea76d} PUP.Optional.WeatherAlerts, [Key] - HKCU\Software\Microsoft\{cc6eb6d8-85b7-435p-8b86-51e4d16ea76d} PUP.Optional.BrowseFox.A, [Key] - HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} PUP.Optional.DNSUnlocker, [Key] - HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries. ************************* ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########