# AdwCleaner 7.0.3.1 - Logfile created on Fri Oct 20 19:19:44 2017 # Updated on 2017/29/09 by Malwarebytes # Running on Windows 8.1 (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** Deleted: C:\Users\Pierre\AppData\Roaming\cacaoweb ***** [ Files ] ***** No malicious files deleted. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks deleted. ***** [ Registry ] ***** Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\land.pckeeper.software Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pckeeper.software Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{2555300E-5A94-4EDB-A2B7-B186822722CF}C:\users\pierre\appdata\roaming\cacaoweb\cacaoweb.exe Deleted: [Value] - HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{ABFD5015-3EC2-45C7-B27A-A96DE57E8FC7}C:\users\pierre\appdata\roaming\cacaoweb\cacaoweb.exe Deleted: [Key] - HKU\S-1-5-21-3355688020-1154033816-1204595866-1001\Software\cacaoweb Deleted: [Key] - HKCU\Software\cacaoweb Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{0A93904A-BB1E-4A0C-9753-B57B9AE272CC} Deleted: [Key] - HKLM\SOFTWARE\Conduit Deleted: [Key] - HKU\S-1-5-21-3355688020-1154033816-1204595866-1001\Software\Conduit Deleted: [Key] - HKCU\Software\Conduit ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [2090 B] - [2017/10/20 19:13:34] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########