# ------------------------------- # Malwarebytes AdwCleaner 7.3.0.0 # ------------------------------- # Build: 04-04-2019 # Database: 2019-04-05.4 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 04-08-2019 # Duration: 00:04:35 # OS: Windows 10 Pro # Scanned: 27253 # Detected: 76 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.DriverDoc C:\Windows\Installer\{4D0A0750-B034-4DF8-97DE-26F1212AC2FF} PUP.Optional.Legacy C:\Program Files (x86)\AutocompletePro PUP.Optional.Legacy C:\Users\claude\AppData\Roaming\Company Name PUP.Optional.MYPCTuneUp C:\ProgramData\NERO\NERO TUNEITUP PUP.Optional.Vondos C:\Users\claude\AppData\LocalLow\Browser-Security PUP.Optional.Vondos C:\Users\claude\AppData\Roaming\Browser-Security ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Conduit HKCU\Software\Conduit PUP.Optional.Conduit HKLM\Software\Wow6432Node\Conduit PUP.Optional.CrossRider HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_ PUP.Optional.CrossRider HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_ PUP.Optional.FreeMakeConverter HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ProductUpdater PUP.Optional.InstallCore HKCU\Software\csastats PUP.Optional.Legacy HKCU\Software\Kromtech PUP.Optional.Legacy HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6586d803-df30-46d3-a89a-4136c8571d45} PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\App Paths\bobrowser.exe PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|safe_urls768 PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0} PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E6E66045-E911-4C01-961D-42487CE12089} PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0} PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E6E66045-E911-4C01-961D-42487CE12089} PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21} PUP.Optional.Legacy HKLM\SOFTWARE\Classes\AppID\AutocompletePro.DLL PUP.Optional.Legacy HKLM\Software\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153} PUP.Optional.Legacy HKLM\Software\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E} PUP.Optional.Legacy HKLM\Software\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333} PUP.Optional.Legacy HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{6586d803-df30-46d3-a89a-4136c8571d45} PUP.Optional.Legacy HKLM\Software\Wow6432Node\MaxPower PUP.Optional.Legacy HKLM\Software\Wow6432Node\SpeedBit PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\AppID\AutocompletePro.DLL PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\CLSID\{E6E66045-E911-4C01-961D-42487CE12089} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E6E66045-E911-4C01-961D-42487CE12089} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} PUP.Optional.Legacy HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21} PUP.Optional.MYPCTuneUp HKLM\Software\Wow6432Node\NERO\nero_tuneitup PUP.Optional.Solvusoft HKLM\SOFTWARE\Classes\Applications\DriverDocSetup.exe PUP.Optional.SupTab HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} PUP.Optional.SupTab HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} PUP.Optional.Vondos HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Browser-Security PUP.Optional.WinZipDriverUpdater HKLM\Software\Nico Mak Computing\WinZip Driver Updater ***** [ Chromium (and derivatives) ] ***** PUP.Optional.Legacy Avira SafeSearch Plus PUP.Optional.Pakilan Palikan New Tab PUP.Optional.VideoAdBlocker.ChrPRST Video AdBlock for Chrome PUP.Optional.VideoAdBlocker.ChrPRST Video AdBlock for Chrome ***** [ Chromium URLs ] ***** PUP.Optional.HelperBar http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDY5BLiS4cCE-YWhTJw8FV1rhTWju24bDQv8KQmRI-h_sGSj4TCAdhoopaeCVmwIgKUuF8Ao3uxdPYILJIRubTLC51XzfWsutgAcIpU4wRnaCVl5MxcW0wPaim1Opd5Dm3VNjqDF6lXGN7KgqTX9J81tQ2DvJGnJXOgXXjJW46x6voEjHQ, PUP.Optional.HelperBar http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDY5BLiS4cCE-YWhTJw8FV1rhTWju24bDQv8KQmRI-h_sGSj4TCAdhoopaeCVmwIgKUuF8Ao3uxdPYILJIRubTLC51XzfWsutgAcIpU4wRnaCVl5MxcW0wPaim1Opd5Dm3VNjqDF6lXGN7KgqTX9J81tQ2DvJGnJXOgXXjJW46x6voEjHQ,, PUP.Optional.Legacy Google PUP.Optional.Legacy http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDY5BLiS4cCE-YWhTJw8FV1rhTWju24bDQv8KQmRI-h_sGSj4TCAdhoopaeCVmwIgKUuF8Ao3uxdPYILJIRubTLC51XzfWsutgAcIpU4wRnaCVl5MxcW0wPaim1Opd5Dm3VNjqDF6lXGN7KgqTX9J81tQ2DvJGnJXOgXXjJW46x6voEjHQ, PUP.Optional.Legacy http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StK217RbjR1YFa37oBy_U-nTnTbDY5BLiS4cCE-YWhTJw8FV1rhTWju24bDQv8KQmRI-h_sGSj4TCAdhoopaeCVmwIgKUuF8Ao3uxdPYILJIRubTLC51XzfWsutgAcIpU4wRnaCVl5MxcW0wPaim1Opd5Dm3VNjqDF6lXGN7KgqTX9J81tQ2DvJGnJXOgXXjJW46x6voEjHQ,, PUP.Optional.Legacy http://www.istartsurf.com/?type=hp&ts=1426980106&from=smt&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1426980150&from=smt&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1426980150&from=smt&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1426980150&from=smt&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1426980150&from=smt&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1427214594&from=cvs5&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1427214594&from=cvs5&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1427214594&from=cvs5&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.mystartsearch.com/?type=hp&ts=1427214594&from=cvs5&uid=STM3250318AS_5VM3CYV6XXXX5VM3CYV6 PUP.Optional.Legacy http://www.palikan.com/?f=7&a=plk_ir_15_43&cd=2XzuyEtN2Y1L1QzutDtDtByDzy0CyBtC0EtCyDzy0ByCyEtDtN0D0Tzu0StCtAzytAtN1L2XzutAtFtCtBtFyDtFtDtN1L1Czu1RtN1L1G1B1V1N2Y1L1Qzu2StB0E0Azy0AyBzytDtGtDtByEzytGtD0AyByEtGyEyBtC0BtGyDzy0FtDyDyDyBtCtDyD0ByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0F0EtDzztCyDtCtGzyyDtAyDtGyEyDtB0BtG0B0E0DyBtGyDzz0F0Fzz0E0BtDyD0EyDyC2QtN0A0LzutB&cr=449237809&ir= PUP.Optional.Legacy http://www.palikan.com/?f=7&a=plk_ir_15_43&cd=2XzuyEtN2Y1L1QzutDtDtByDzy0CyBtC0EtCyDzy0ByCyEtDtN0D0Tzu0StCtAzytAtN1L2XzutAtFtCtBtFyDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StAyDtD0B0AyEtCyCtGtByB0FzztGzy0D0E0AtGtCyCtB0DtGyEtC0ByCtDyCyBzzyCtBzytD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0F0EtDzztCyDtCtGzyyDtAyDtGyEyDtB0BtG0B0E0DyBtGyDzz0F0Fzz0E0BtDyD0EyDyC2QtN0A0LzutB&cr=679453642&ir= PUP.Optional.Legacy http://www.palikan.com/?f=7&a=plk_ir_15_43&cd=2XzuyEtN2Y1L1QzutDtDtByDzy0CyBtC0EtCyDzy0ByCyEtDtN0D0Tzu0StCtAzytCtN1L2XzutAtFtCtBtFyDtFtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyC0A0BtAyC0A0CyCtGyB0DyDtAtGyE0BtB0AtGtAtBtCtCtG0BtCtByCyD0A0EzzzytC0CtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0F0EtDzztCyDtCtGzyyDtAyDtGyEyDtB0BtG0B0E0DyBtGyDzz0F0Fzz0E0BtDyD0EyDyC2QtN0A0LzutB&cr=1209980643&ir= PUP.Optional.Legacy http://www.palikan.com/?f=7&a=plk_ir_15_44&cd=2XzuyEtN2Y1L1QzutDtDtByDzy0CyBtC0EtCyDzy0ByCyEtDtN0D0Tzu0StCtAzyyEtN1L2XzutAtFtCtBtFyDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyEyByDtCyDtA0E0FtGyBzz0BtCtGzyyCtD0BtGtDtBtAzytGzzyBzz0FyBtCzzyD0EyD0C0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0F0EtDzztCyDtCtGzyyDtAyDtGyEyDtB0BtG0B0E0DyBtGyDzz0F0Fzz0E0BtDyD0EyDyC2QtN0A0LzutB&cr=1806128940&ir= PUP.Optional.Legacy http://www.palikan.com/?f=7&a=plk_ir_15_44&cd=2XzuyEtN2Y1L1QzutDtDtByDzy0CyBtC0EtCyDzy0ByCyEtDtN0D0Tzu0StCtAzyzztN1L2XzutAtFtCyEtFtDtFtDtN1L1Czu1BtAtN1L1G1B1V1N2Y1L1Qzu2SyEtCtByDzytCzyyDtGtCtC0D0EtG0BtDyC0AtGyBzz0C0FtGyE0FtAyDyC0Ezyzz0AyCtCtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0F0EtDzztCyDtCtGzyyDtAyDtGyEyDtB0BtG0B0E0DyBtGyDzz0F0Fzz0E0BtDyD0EyDyC2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCyEzz&cr=2030427605&ir= PUP.Optional.Legacy mystartsearch PUP.Optional.Legacy mystartsearch PUP.Optional.Legacy mystartsearch PUP.Optional.Legacy mystartsearch PUP.Optional.Legacy veoh.com ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########