# AdwCleaner 7.0.3.1 - Logfile created on Fri Oct 27 08:39:52 2017 # Updated on 2017/29/09 by Malwarebytes # Running on Windows 10 Home (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** No malicious folders deleted. ***** [ Files ] ***** Deleted: C:\Users\Default\Desktop\\App Explorer.lnk Deleted: C:\Users\Default User\Desktop\\App Explorer.lnk Deleted: C:\Users\lena0.LAPTOP-VES4LFJ3\Desktop\\App Explorer.lnk ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks deleted. ***** [ Registry ] ***** No malicious registry entries deleted. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** SearchProvider deleted: Ask Search - websearch.ask.com SearchProvider deleted: Ask Search - search.ask.com SearchProvider deleted: Conduit Search - search.conduit.com SearchProvider deleted: FindWide - search.findwide.com SearchProvider deleted: Sweetpacks - mysearch.sweetpacks.com Startpage deleted: http://Vosteran.com/?f=1&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://mysearch.sweetpacks.com/?barid={A738E2F2-54F0-11E3-8A2B-0018F3838AFD}&src=10&crg=3.5000006.10069&st=23 Startpage deleted: http://vosteran.com/?f=7&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://www.sweet-page.com/?type=hp&ts=1415804970&from=cor&uid=395049983_397234_FE9AD900 Startpage deleted: https://start-pagesearch.com/?s=acer&m=start&brw=ch Startpage deleted: http://www.trotux.com/?z=046c8aa6fb4b2820a58b2f4g2zdm8mat9b0t7qam3e&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://www.trotux.com/?z=2f7740bf1160a9b92c98cf3g2z3m2m3t4t0e9c0qfq&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://Vosteran.com/?f=1&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://mysearch.sweetpacks.com/?barid={A738E2F2-54F0-11E3-8A2B-0018F3838AFD}&src=10&crg=3.5000006.10069&st=23 Startpage deleted: http://vosteran.com/?f=7&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://www.sweet-page.com/?type=hp&ts=1415804970&from=cor&uid=395049983_397234_FE9AD900 Startpage deleted: https://start-pagesearch.com/?s=acer&m=start&brw=ch Startpage deleted: http://www.trotux.com/?z=046c8aa6fb4b2820a58b2f4g2zdm8mat9b0t7qam3e&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://www.trotux.com/?z=2f7740bf1160a9b92c98cf3g2z3m2m3t4t0e9c0qfq&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://Vosteran.com/?f=1&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://mysearch.sweetpacks.com/?barid={A738E2F2-54F0-11E3-8A2B-0018F3838AFD}&src=10&crg=3.5000006.10069&st=23 Startpage deleted: http://vosteran.com/?f=7&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://www.sweet-page.com/?type=hp&ts=1415804970&from=cor&uid=395049983_397234_FE9AD900 Startpage deleted: https://start-pagesearch.com/?s=acer&m=start&brw=ch Startpage deleted: http://www.trotux.com/?z=046c8aa6fb4b2820a58b2f4g2zdm8mat9b0t7qam3e&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://www.trotux.com/?z=2f7740bf1160a9b92c98cf3g2z3m2m3t4t0e9c0qfq&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://Vosteran.com/?f=1&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://mysearch.sweetpacks.com/?barid={A738E2F2-54F0-11E3-8A2B-0018F3838AFD}&src=10&crg=3.5000006.10069&st=23 Startpage deleted: http://vosteran.com/?f=7&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://www.sweet-page.com/?type=hp&ts=1415804970&from=cor&uid=395049983_397234_FE9AD900 Startpage deleted: https://start-pagesearch.com/?s=acer&m=start&brw=ch Startpage deleted: http://www.trotux.com/?z=046c8aa6fb4b2820a58b2f4g2zdm8mat9b0t7qam3e&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://www.trotux.com/?z=2f7740bf1160a9b92c98cf3g2z3m2m3t4t0e9c0qfq&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://Vosteran.com/?f=1&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://mysearch.sweetpacks.com/?barid={A738E2F2-54F0-11E3-8A2B-0018F3838AFD}&src=10&crg=3.5000006.10069&st=23 Startpage deleted: http://vosteran.com/?f=7&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://www.sweet-page.com/?type=hp&ts=1415804970&from=cor&uid=395049983_397234_FE9AD900 Startpage deleted: https://start-pagesearch.com/?s=acer&m=start&brw=ch Startpage deleted: http://www.trotux.com/?z=046c8aa6fb4b2820a58b2f4g2zdm8mat9b0t7qam3e&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://www.trotux.com/?z=2f7740bf1160a9b92c98cf3g2z3m2m3t4t0e9c0qfq&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://Vosteran.com/?f=1&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://mysearch.sweetpacks.com/?barid={A738E2F2-54F0-11E3-8A2B-0018F3838AFD}&src=10&crg=3.5000006.10069&st=23 Startpage deleted: http://vosteran.com/?f=7&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://www.sweet-page.com/?type=hp&ts=1415804970&from=cor&uid=395049983_397234_FE9AD900 Startpage deleted: https://start-pagesearch.com/?s=acer&m=start&brw=ch Startpage deleted: http://www.trotux.com/?z=046c8aa6fb4b2820a58b2f4g2zdm8mat9b0t7qam3e&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://www.trotux.com/?z=2f7740bf1160a9b92c98cf3g2z3m2m3t4t0e9c0qfq&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://Vosteran.com/?f=1&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://mysearch.sweetpacks.com/?barid={A738E2F2-54F0-11E3-8A2B-0018F3838AFD}&src=10&crg=3.5000006.10069&st=23 Startpage deleted: http://vosteran.com/?f=7&a=vst_ir_15_1_ch&cd=2XzuyEtN2Y1L1QzutDtDtCzz0FtAzztAzz0A0F0D0DzytDtDtN0D0Tzu0StCtDzytAtN1L2XzutAtFyCtFtCyCtFyCtN1L1CzutCyEtBzytDyD1V1BtN1L1G1B1V1N2Y1L1Qzu2SyE0F0EtD0EyCtC0CtGtA0D0EyCtGzzyE0CtDtGzz0AtAtDtGyEzytCyEzzzytC0AyEzy0EtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0DzzyD0EyEyCyEtGzzyByDyEtGyEyDyCtDtGzyyDtDtDtG0EtCzztDtBzz0AyB0DzyzztA2Q&cr=1432923607&ir= Startpage deleted: http://www.sweet-page.com/?type=hp&ts=1415804970&from=cor&uid=395049983_397234_FE9AD900 Startpage deleted: https://start-pagesearch.com/?s=acer&m=start&brw=ch Startpage deleted: http://www.trotux.com/?z=046c8aa6fb4b2820a58b2f4g2zdm8mat9b0t7qam3e&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp Startpage deleted: http://www.trotux.com/?z=2f7740bf1160a9b92c98cf3g2z3m2m3t4t0e9c0qfq&from=isr&uid=TOSHIBAXMQ01ABD100_X5U2PQ21TXXX5U2PQ21T&type=hp ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [3178 B] - [2017/10/27 8:39:17] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########