# ------------------------------- # Malwarebytes AdwCleaner 7.2.1.0 # ------------------------------- # Build: 06-26-2018 # Database: 2018-07-03.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 07-03-2018 # Duration: 00:00:05 # OS: Windows 10 Home # Cleaned: 43 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** Deleted C:\Users\Org4000\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence Deleted C:\Program Files (x86)\PC Speed Maximizer ***** [ Files ] ***** Deleted C:\Windows\System32\drivers\EsgScanner.sys ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** Deleted C:\Windows\System32\Tasks\SpyHunter4Startup ***** [ Registry ] ***** Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564 Deleted HKU\S-1-5-18\Software\ByteFence Deleted HKU\.DEFAULT\Software\ByteFence Deleted HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\fr.bytefence.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bytefence.com Deleted HKCU\Software\csastats Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{99E2F3AB-15ED-4F76-8921-2471702C2EF3} Deleted HKLM\Software\Classes\CLSID\{99E2F3AB-15ED-4F76-8921-2471702C2EF3} Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{7F2FA86A-181A-4F8F-B853-51F897A91227} Deleted HKLM\Software\Classes\CLSID\{7F2FA86A-181A-4F8F-B853-51F897A91227} Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{71B97DA2-A432-42FA-AD66-28C567704807} Deleted HKLM\Software\Classes\CLSID\{71B97DA2-A432-42FA-AD66-28C567704807} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{E74BB8EA-65C0-4668-A5F0-6A28108DCA84} Deleted HKLM\Software\Classes\Interface\{E74BB8EA-65C0-4668-A5F0-6A28108DCA84} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{D462DCAD-F466-413A-BFB1-DB0B5FE5632D} Deleted HKLM\Software\Classes\Interface\{D462DCAD-F466-413A-BFB1-DB0B5FE5632D} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{CFD3A45B-3B01-47D3-8433-5A72D8026392} Deleted HKLM\Software\Classes\Interface\{CFD3A45B-3B01-47D3-8433-5A72D8026392} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{3F969EF1-4860-4564-87FC-59925DF0EC62} Deleted HKLM\Software\Classes\Interface\{3F969EF1-4860-4564-87FC-59925DF0EC62} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{2C938654-2875-404A-8D95-664CC1F36620} Deleted HKLM\Software\Classes\Interface\{2C938654-2875-404A-8D95-664CC1F36620} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{27FBF3C5-1A02-4375-ADC3-132FB74327B1} Deleted HKLM\Software\Classes\Interface\{27FBF3C5-1A02-4375-ADC3-132FB74327B1} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{10D40766-F80D-478A-AA30-D90A8B49C789} Deleted HKLM\Software\Classes\Interface\{10D40766-F80D-478A-AA30-D90A8B49C789} Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{BB02A111-23B2-4242-9C8E-B093BD0A2E3C} Deleted HKLM\Software\Classes\TypeLib\{BB02A111-23B2-4242-9C8E-B093BD0A2E3C} Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{5DAAB57B-836A-456C-99D8-A5E0AF03FD94} Deleted HKLM\Software\Classes\CLSID\{5DAAB57B-836A-456C-99D8-A5E0AF03FD94} Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146} Deleted HKLM\Software\Reimage Deleted HKLM\Software\EnigmaSoftwareGroup Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6013322-DC57-4614-9670-68F543BE0423} Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup Deleted HKLM\Software\DtsEncodeTools Deleted HKCU\Software\win Deleted HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon|Userinit ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [5411 octets] - [03/07/2018 11:37:12] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########