# ------------------------------- # Malwarebytes AdwCleaner 7.2.2.0 # ------------------------------- # Build: 07-17-2018 # Database: 2018-08-20.1 # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 08-21-2018 # Duration: 00:00:23 # OS: Windows 7 Home Premium # Cleaned: 345 # Failed: 4 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** Deleted C:\Users\Léa\AppData\Local\Installer\INSTALL_8544 Deleted C:\Users\Léa\AppData\Local\Installer\INSTALL_23074 Deleted C:\ProgramData\SHHOPNDROP Deleted C:\ProgramData\SAFERWEB Deleted C:\Program Files\SHHOPNDROP Deleted C:\Program Files\SAFERWEB Deleted C:\Users\Léa\AppData\Roaming\Gameo Deleted C:\Program Files\Uniblue Deleted C:\Users\Léa\AppData\Roaming\Uniblue Deleted C:\Users\Léa\AppData\Roaming\cacaoweb Deleted C:\Users\Léa\AppData\Roaming\ap_logs Deleted C:\Program Files\MaxComputerCleaner Deleted C:\Users\Léa\Documents\MaxComputerCleaner Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Max Computer Cleaner Deleted C:\Program Files\Max Computer Cleaner Deleted C:\Users\Léa\AppData\Roaming\Max Computer Cleaner Deleted C:\Users\Léa\AppData\Local\Max_Computer_Cleaner Deleted C:\Program Files\HighlightSearches Deleted C:\rei Deleted C:\Users\Léa\AppData\Local\StormFall Deleted C:\Users\Léa\AppData\Roaming\StormFall Deleted C:\Program Files\XTab Deleted C:\Users\Léa\AppData\Roaming\Compatibility Verifier Deleted C:\Users\Léa\AppData\Roaming\WTools Deleted C:\Users\Léa\AppData\Roaming\ASP Deleted C:\Program Files\predm Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip Deleted C:\Program Files\globalUpdate Deleted C:\Users\Léa\AppData\Local\globalUpdate Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer ***** [ Files ] ***** Deleted C:\Windows\System32\drivers\netfilter.sys Deleted C:\END Deleted C:\Users\Léa\AppData\Roaming\aps.uninstall.scan.results Deleted C:\Users\Léa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play Games Online.url Deleted C:\Windows\rcore.exe Deleted C:\Users\Léa\Downloads\cacaoweb.exe ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk Deleted C:\Users\Léa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk ***** [ Tasks ] ***** Deleted C:\Windows\System32\Tasks\{8DB196F9-0E09-440D-8513-91CB317197A6} Deleted C:\Windows\System32\Tasks\{38E9B3E7-C5D2-48B5-8844-FA57C2FDCA01} ***** [ Registry ] ***** Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\zz.337.mcc Deleted HKLM\SOFTWARE\9eaef43f-1d09-271e-fd90-3fc01a51d079 Deleted HKLM\SOFTWARE\908C8F9D-D24A-4837-8EC1-08BF193F6091 Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8DB196F9-0E09-440D-8513-91CB317197A6} Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{38E9B3E7-C5D2-48B5-8844-FA57C2FDCA01} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFF7E652-A57D-4215-8938-32213DD36DF} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFEA07F3-739C-45F8-9FAD-2EADF256FA9} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD2BC906-EE4D-456A-BA95-3CE62A463D1} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3D7843-F552-4BBD-B31B-2CED6D61F01C} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3C988FF-88BC-463C-BC2A-A1E0978D925} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2B554CA-F42F-4545-A91-5E6AD325FBA8} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EFC0A9CB-CFD1-4A0E-BEA4-D44D9F23857} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDC4B18B-F33C-42A5-9598-3B8BF73F176} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ED5E0618-C62D-46FC-96A0-5E9598DAB29} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E95DC3B3-B3B8-4A0A-8955-46EE5E5459F} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E15CEF98-5725-4273-8864-ED83EA4BF25} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1407FC8-425C-4E4C-900-C0563DBCBFA1} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E12D72F8-43A8-4FC2-85CA-BF14E49AD17} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E12488A7-9D96-46CD-86C-6C76283494D6} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD9BD44-BE9B-474C-B9EB-53AF2730366} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D884613B-7163-4549-A4B2-7A9D244812F} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D58BF5CB-3DE-439E-913C-10F1B61DF1BC} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D24417F4-DDB3-44C1-AF8E-96DC70EBC0D} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE3639F-C6A0-4073-9A3D-B4E6C83A70D1} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8BC29C1-541E-4B14-8C90-A61EAA394AB} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C82BD76A-4FDC-44F4-B5B7-DDBA6D81EA4} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7B1ED3B-9AA5-4498-B766-EF1AF159ADB} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C5FD1595-4972-4B85-9AB-501515FA374B} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C49C64D-E421-419F-B9FF-836569B85DAC} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C27EAEFF-79E1-42E3-B411-EA561CEE282} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BC0F79BD-2526-42FC-811F-BCFAA4A6144} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA449D31-8CAF-413C-B62-A3877241F0E5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B90534CA-226D-4035-89FA-2C6D62D523D} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B8C3438A-A194-4AD6-9FD1-D4A95873EFD} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B751F396-1729-44BE-847F-449545F389} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B750735-F1C9-43C6-9936-8171F811CA8E} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B344FB02-9A82-4B60-A293-B4419573BFA} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACF1483-8425-4D87-AF29-6D9DE4C148DA} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AA08CC8B-D6E6-4435-B0A4-83CC3DB624} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A377AFD6-882F-499A-9348-119B3C53CF2} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EA6D4E7-6F39-4EE2-89CD-BA47F0FDDB} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C61975-8D7F-49A9-BFAF-60967B4F11AF} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9148BFAB-244C-4071-A1A1-4B0C36325E5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90EB14DC-DC3-4D01-B23E-F6393A78B944} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F7DA153-CADB-4A0C-9DF-AF59A99B92A3} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D48163-748E-4B2E-A9DD-CCCAE1C8172E} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8AF0B26C-7DA1-4B89-944D-0ED5FE5AFCA} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{849F5C32-75BD-4978-B867-4B211538FD1} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8455D8F4-49DD-478C-B03-3C77EA3CC538} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{829A9C3-F799-4936-9FD5-F23BCC309F4A} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81BE650-4D98-4B01-986A-92B7231E773} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81267A5D-99EB-4AA4-ADF5-E18A31B86B8} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{80CAFCC7-1226-430A-878-EED81AE32C5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FCAB72B-2094-40A4-85A8-FE88F9278DB} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C078ED0-1B-4350-BF3E-8D88CB8E459} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{78CB6A21-A78F-4150-89A9-AD83FBBCCC8} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{771A5001-6BEC-4C0D-BB41-3CC7321E3B1} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76D8FBE-A521-4CE7-B4C6-B795AD3A90EF} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76A82CE-6A78-4FCE-BC56-8AEDD67FB966} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{73EA0ED5-113E-4E73-8157-B5DC43960A5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72DF47A5-1E2F-48F7-989-6A349C48E37B} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72D99CBA-BAE9-4C14-9B39-573817E8984} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{704FDDA2-EC6D-42E2-8B3-67537AAA2AC1} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6DBADBC5-213-4A67-AF5D-9ACF5957F014} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{69F1327A-EA42-43A8-8FE9-262D25D0C1C} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68E8BDA2-1F53-45A1-A00-97946CF7AFCD} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6764D39-A64D-4714-9E16-F7B7929952A4} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{650257EF-F340-4A7A-A0CE-4FEE75E868A} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64F8063B-6B29-489A-A34-7B7B13B0D67B} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61ADE60A-EAC5-422D-8A8F-63531439293} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FDBBF2-3017-4381-85A6-E7B7C6A1CEED} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5FCBC891-8EF-4043-AE9-1AC22F73A85D} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F9261AF-8C25-49E5-8074-8BC02C44637} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{560A7BF4-11B7-402E-87D9-1A9AB9089B6} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{549F2405-F94A-48BC-885A-50D8622AEB5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{546B6D3D-85D4-4C54-B817-8D1DAC4BCDA} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{544F1B61-B59F-4565-8F6A-3B14E11F20} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54277EBF-4D59-47AB-8A99-648516C14CD} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54107AF1-930F-403C-B3E5-64E8A2568F5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53B31EDE-41AD-4844-876E-112D99C8807} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53764127-77F0-43B6-B7AB-C712C5ACF1E} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52A0D406-7F98-4DF2-8254-9917D88D575} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{51919520-FAB8-485C-B9B4-B1A11C5D854} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4EAD18F4-CD6B-498F-8A88-D6FDC8F49F8} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4BCF566C-34B-426C-8313-F18D3688A89F} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B7F41E6-7918-46CA-85AC-CA97DD3B996} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49A7F77D-BA05-49EF-967D-9DDF8432F3F} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49543503-7E94-4279-98E3-2F914A11CF} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{488FDCFC-CEB9-40A8-98B-FB7C1653542E} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4578CE77-1DDA-4783-873E-B33B95E94EA} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44C69A82-8712-4BC9-8163-463A9297C4A} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{423B4447-A6AA-43F2-9385-9DAFDED443C} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41FE10D7-BE8A-4811-83A-14456858F731} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4088C0E4-F6A8-4BC9-AAF-B1AD5EAC2121} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D46B47A-5760-4A21-89A3-F1A52B0F3A3} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D116D78-B800-4203-851A-BF62B7CEBF} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B48C813-5DC7-48F6-9186-B28DB4EB8F7} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A4654BB-4D6F-4053-9EF-B6FA4C66B47} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{39FAEA7F-9FA7-4CEC-B7F-6E9F47BE79AF} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{38E92D80-F73F-47B6-885-4D6B634EB3F8} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{389215F4-4AE7-45B9-83C1-39E2FD82ED8} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{370BA45F-7396-4ADA-9D3B-D145415476D} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{354DC4B8-35D3-42DA-807E-C70E9FE1BF9} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31E82ED0-AF68-4B11-989F-FD907ECBF89} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{311F254C-58D9-41A6-8E9D-3DC1BBA5A81} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3109A880-7A20-43F6-A272-30B287FE941} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2ED733D0-5820-4080-A21-9D344BBB8B9A} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E458617-62DF-40F0-9820-E96837B66E3} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DB67885-3D29-4D60-B2FF-D3A2A186F83} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A187878-F1C0-4D28-8C8-21496AC3F0} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23E24F-7C71-45DA-BE7F-C871E6BEE016} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2369E68F-53A-418B-87A-3BF98A3B3794} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22D863A2-4F79-4471-BAA4-5EC5AA355DB} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22449872-9E79-4548-8122-893C5A87A2D} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20F45AD3-7EE4-4787-B77F-CB872FBBA79} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{202DE204-FEA8-4CEF-8DFB-729C3A57A92} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{201B7107-3ACA-4DEC-A355-35BDE7CF9F5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F10362A-6A04-4D40-907-88FF6EA6087} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EC56136-1BBE-4EBB-BDD0-168F82446D1} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EBED131-746E-4ED4-806-3664CEA29D67} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1BE140CE-FD9E-4DF5-962F-AADA69CBF64} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B787EFA-5649-446C-AF88-51B13B479B5} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A56FFFF-A5DA-407F-BEAE-BF68A89CDF3} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A33F60E-9459-4F5C-8CA9-1316CD41F7B} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{184BD26F-3CAB-4CF2-B61E-6AC097E7398} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16D814E0-CABA-4919-B34E-CD9D4BBDB93} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1639D22E-7D41-4167-9782-7DAA7A1C8DF} Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{113A54F2-D46C-4099-9F91-8EB82981217} Deleted HKLM\Software\AllDaySavings Deleted HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\PlumoWeb Deleted HKLM\Software\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Deleted HKLM\Software\Conduit Deleted HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_ Deleted HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_ Deleted HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\GoHD Deleted HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\GoHD Deleted HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\GoHD Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|cacaoweb Deleted HKLM\Software\MaxPower Deleted HKCU\Software\GoldenGate Deleted HKCU\Software\TeleCharger Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SU Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21} Deleted HKLM\Software\Uniblue Deleted HKCU\Software\GlobalUpdate Deleted HKLM\Software\GlobalUpdate Deleted HKCU\Software\cacaoweb Deleted HKCU\Software\APN PIP Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F488658-35A7-2AB8-A756-560BA8F103C3} Deleted HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Deleted HKCU\Software\Kromtech Deleted HKLM\Software\MaxComputerCleaner Deleted HKCU\Software\MaxComputerCleanerConfig Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{14AA679C-17A7-4D62-97DD-7A9E1DEE6785} Deleted HKCU\Software\MaxComputerCleanerLanguage Deleted HKCU\Software\Max Computer Cleaner Deleted HKLM\Software\Max Computer Cleaner Deleted HKLM\Software\Universal Deleted HKCU\Software\Corez Deleted HKLM\Software\AIM Toolbar Deleted HKLM\Software\SpeedBit Deleted HKLM\Software\WebBar Deleted HKU\S-1-5-18\Software\AppDataLow\Software\allday savings Deleted HKU\.DEFAULT\Software\AppDataLow\Software\allday savings Deleted HKCU\Software\AppDataLow\Software\SIMPLYTECH Deleted HKCU\Software\SIMPLYTECH Deleted HKCU\Software\WTools Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1} Deleted HKCU\Software\genesis Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Super Optimizer_is1 Deleted HKLM\Software\SUPDP Deleted HKU\S-1-5-18\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Deleted HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Deleted HKU\S-1-5-20\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Deleted HKU\S-1-5-19\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Deleted HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Deleted HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B} Deleted HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\advanceelite Deleted HKCU\Software\AppDataLow\advanceelite Deleted HKLM\Software\Taronja Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5 Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C976AA417A7126D479DDA7E9D1EE7658 Deleted HKLM\Software\Classes\Installer\Products\C976AA417A7126D479DDA7E9D1EE7658 Deleted HKLM\Software\Classes\Installer\Features\C976AA417A7126D479DDA7E9D1EE7658 Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467 Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3038A20B9089EC34D8F74220191FAB30 Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5 Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20 Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739 Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D Deleted HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95} Deleted HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A} Not Deleted HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D} Not Deleted HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5} Deleted HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9} Deleted HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24} Deleted HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E} Deleted HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6} Deleted HKCU\Software\Classes\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027} Deleted HKLM\Software\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E} Deleted HKLM\Software\Classes\CLSID\{B33BD6CF-BF4C-4CF0-AC84-B2974BC14ABD} Deleted HKLM\Software\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9} Deleted HKLM\Software\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3} Deleted HKLM\Software\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F} Deleted HKLM\Software\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} Deleted HKLM\Software\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3} Deleted HKLM\Software\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{42AEFAF9-09D6-4185-87AE-DEDF6E955CB4} Deleted HKLM\Software\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504} Deleted HKLM\Software\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504} Deleted HKLM\Software\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F} Deleted HKLM\Software\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B} Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FBDFF406-2C4C-5D35-8469-34BB67EA3353} Deleted HKLM\Software\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762} Deleted HKLM\Software\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264} Deleted HKLM\Software\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C} Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{C7D39959-7293-4619-9478-66A12EF22C8F}C:\users\léa\appdata\roaming\cacaoweb\cacaoweb.exe Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{6D581F75-EDC5-4B97-9FB3-3057454BCD04}C:\users\léa\appdata\roaming\cacaoweb\cacaoweb.exe Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{9CD7B298-7B49-45D7-AE4C-2D4EEF6A5D68}C:\users\léa\appdata\roaming\cacaoweb\cacaoweb.exe Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{590F8742-F609-48F2-9913-4076D251C1C1}C:\users\léa\appdata\roaming\cacaoweb\cacaoweb.exe Deleted HKLM\System\CurrentControlSet\Services\EventLog\Application\Wpm Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.portaldosites.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\portaldosites.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\superfish.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\plarium.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\groovorio.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\getgroovorio.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\store.bubbledock.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bubbledock.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\certified-toolbar.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\apps.shared.certified-toolbar.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\certified-toolbar.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\apps.shared.certified-toolbar.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.coupontime00.coupontime.co Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\coupontime.co Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes|DoNotAskAgain Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\shoppingate.info Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\inst.shoppingate.info Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.linkeyproject.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\linkeyproject.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\linkeyproject.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\shopper.deals-way.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\deals-way.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\reimageplus.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fr.reimageplus.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.cmptch.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cmptch.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\static.cmptch.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cmptch.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pstatic.eshopcomp.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\eshopcomp.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.eshopcomp.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\eshopcomp.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.re-markable00.re-markable.net Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\re-markable.net Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\static.re-markable00.re-markable.net Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\re-markable.net Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bestpriceninja.com Not Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\SearchURI Not Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\SearchUrl Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\Search|Search Page Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\Search|Search Bar Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\Search|Default_Search_URL Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\Main|Search Page Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\Main|Search Bar Deleted HKLM\Software\Classes\Software\Microsoft\Internet Explorer\Main|Default_Search_URL Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.livelyrics00.live-lyrics.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\webssearches.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.webssearches.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\istart.webssearches.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\webssearches.com Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\istart.webssearches.com Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey Deleted HKCU\Software\Linkey Deleted HKCU\Software\tstamptoken Deleted HKCU\Software\Classes\PepperZip Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\safestsearches.com Deleted HKLM\Software\Classes\TypeLib\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B} Deleted HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3772508499-2989987850-3463864971-1000\Software\ShopperPro Deleted HKCU\Software\Softonic Deleted HKLM\Software\Classes\SpeedUpMyPC Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} Deleted HKU\S-1-5-18\Software\Browser Deleted HKCU\Software\Browser Deleted HKU\S-1-5-20\Software\Browser Deleted HKU\S-1-5-19\Software\Browser Deleted HKU\.DEFAULT\Software\Browser Deleted HKCU\Software\Store ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** Deleted default-search.net Deleted Groovorio Deleted default-search.net Deleted Web Search Deleted oursurfing Deleted Trovi search Deleted Web Search Deleted sweet-page Deleted sweet-page Deleted Trovi search ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [95008 octets] - [16/08/2018 18:26:08] AdwCleaner[S01].txt - [40785 octets] - [21/08/2018 14:29:22] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########