# ------------------------------- # Malwarebytes AdwCleaner 8.3.0.0 # ------------------------------- # Build: 06-29-2021 # Database: 2021-10-26.1 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 10-30-2021 # Duration: 00:00:14 # OS: Windows 8.1 # Cleaned: 53 # Failed: 0 ***** [ Services ] ***** Deleted GlobalUpdater Deleted Hydrup Deleted IMService ***** [ Folders ] ***** Deleted C:\Program Files (x86)\Common Files\Hydrup Deleted C:\Users\Frances\AppData\Local\SafeWeb Deleted C:\Users\Invité\AppData\Local\Pokki Deleted C:\Users\Invité\AppData\Local\SafeWeb Deleted C:\Users\Invité\AppData\Local\speed browser Deleted C:\Users\Public\Pokki Deleted C:\Users\coral_000\AppData\Local\SEARCHPROTECT ***** [ Files ] ***** Deleted C:\Users\Invité\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PC App Store.lnk Deleted C:\Users\Invité\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\speed browser.lnk Deleted C:\Users\Invité\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\speed browser.lnk Deleted C:\Windows\SysWOW64\VisualDiscovery.ini Deleted C:\Windows\SysWOW64\VisualDiscoveryOff.ini Deleted C:\Windows\System32\VisualDiscoveryOff.ini ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKCU\Software\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4} Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\plarium.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\chatango.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Iminent Deleted HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{84FF7BD6-B47F-46F8-9130-01B2696B36CB} Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Pokki Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} Deleted HKLM\SOFTWARE\CLASSES\APPID\VISUALDISCOVERY.EXE Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\TBDEn|SBOEM0 Deleted HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\TBDEn|SBOEM1 Deleted HKLM\Software\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11} Deleted HKLM\Software\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C} Deleted HKLM\Software\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4} Deleted HKLM\Software\Classes\CLSID\{B33BD6CF-BF4C-4CF0-AC84-B2974BC14ABD} Deleted HKLM\Software\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} Deleted HKLM\Software\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{58124A0B-DC32-4180-9BFF-E0E21AE34026} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{977AE9CC-AF83-45E8-9E03-E2798216E2D5} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} Deleted HKLM\Software\Wow6432Node\LENOVO\VisualDiscovery Deleted HKLM\Software\Wow6432Node\\CLASSES\APPID\VISUALDISCOVERY.EXE Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11} Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C} Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6} Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4} Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{B33BD6CF-BF4C-4CF0-AC84-B2974BC14ABD} Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC} Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{58124A0B-DC32-4180-9BFF-E0E21AE34026} Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{977AE9CC-AF83-45E8-9E03-E2798216E2D5} Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} Deleted HKU\S-1-5-19\Software\Browser Deleted HKU\S-1-5-20\Software\Browser ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** Deleted http://search.iminent.com/?appId=964085F5-9E27-4A17-B459-1906549001C7 ***** [ Hosts File Entries ] ***** No malicious hosts file entries cleaned. ***** [ Preinstalled Software ] ***** No Preinstalled Software cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [12340 octets] - [30/10/2021 18:39:52] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########