# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build:    12-18-2018
# Database: 2019-01-10.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    01-19-2019
# Duration: 00:00:16
# OS:       Windows 10 Home
# Scanned:  32265
# Detected: 38


***** [ Services ] *****

AdvancedSystemRepairPro         tscmon
PUP.Optional.Restoro            RestoroActiveProtection

***** [ Folders ] *****

AdvancedSystemRepairPro         C:\Users\René\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced System Repair Pro
PUP.Optional.Restoro            C:\ProgramData\Restoro
PUP.Optional.Restoro            C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro
PUP.Optional.Restoro            C:\Program Files\Restoro

***** [ Files ] *****

AdvancedSystemRepairPro         C:\Users\Public\Desktop\Advanced System Repair Pro.lnk
AdvancedSystemRepairPro         C:\Windows\System32\drivers\asrdmon.sys
PUP.Optional.Restoro            C:\Users\René\AppData\Local\Temp\restoro-downloader.xml
PUP.Optional.Restoro            C:\Users\René\AppData\Local\Temp\restoro-downloader.log
PUP.Optional.Restoro            C:\Users\René\AppData\Local\Temp\restoro-version.xml
PUP.Optional.Restoro            C:\Users\René\AppData\Local\Temp\restoro-setup.log
PUP.Optional.Restoro            C:\Users\René\AppData\Local\Temp\RestoroSetup.exe
PUP.Optional.Restoro            C:\Users\René\AppData\Local\Temp\restoro_service_version.xml
PUP.Optional.Restoro            C:\Users\Public\Desktop\Restoro.lnk
PUP.Optional.Restoro            C:\Windows\restoro.ini

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

AdvancedSystemRepairPro         C:\Windows\System32\Tasks\AdvancedSystemRepairPro-Maintenance-Autorun

***** [ Registry ] *****

AdvancedSystemRepairPro         HKCU\Software\AdvancedSystemRepairPro
AdvancedSystemRepairPro         HKLM\Software\Wow6432Node\AdvancedSystemRepairPro
AdvancedSystemRepairPro         HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced System Repair Pro
AdvancedSystemRepairPro         HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdvancedSystemRepairPro-Maintenance-Autorun
PUP.Optional.Legacy             HKLM\Software\Wow6432Node\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
PUP.Optional.Legacy             HKLM\Software\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
PUP.Optional.Legacy             HKLM\Software\Wow6432Node\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
PUP.Optional.Legacy             HKLM\Software\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
PUP.Optional.Legacy             HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C711394E-9AD8-43CF-997B-EB304719AB6B}
PUP.Optional.Legacy             HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{E7711E1D-562D-4C97-9C90-C85ABED95BE2}
PUP.Optional.Legacy             HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{D9B827F4-F105-4717-9A85-A2A613730662}
PUP.Optional.Legacy             HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{8709B192-6C2C-4A0C-9480-CA99D7010155}
PUP.Optional.Restoro            HKCU\Software\Local AppWizard-Generated Applications\Restoro
PUP.Optional.Restoro            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Restoro
PUP.Optional.Restoro            HKCU\Software\Restoro
PUP.Optional.Restoro            HKLM\Software\Restoro
PUP.Optional.Restoro            HKLM\Software\Classes\CLSID\{BA827421-E282-479E-AE60-34796877B8AE}
PUP.Optional.Restoro            HKLM\Software\Classes\CLSID\{AE198C69-7358-4856-9029-F4C0FAD524C1}
PUP.Optional.SpeedItupFree      HKLM\Software\Wow6432Node\Classes\AppID\{A245B088-41FA-478E-8DEA-86177F1394BB}
PUP.Optional.SpeedItupFree      HKLM\Software\Classes\AppID\{A245B088-41FA-478E-8DEA-86177F1394BB}

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Panda              Panda Safe Web

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.


AdwCleaner[S00].txt - [1327 octets] - [09/10/2018 14:35:12]
AdwCleaner[C00].txt - [1493 octets] - [09/10/2018 14:35:35]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ##########