# AdwCleaner 7.0.3.1 - Logfile created on Tue Oct 24 16:14:41 2017 # Updated on 2017/29/09 by Malwarebytes # Database: 10-17-2017.1 # Running on Windows 10 Home (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.Legacy, C:\Users\rita\AppData\Local\VirtualStore\Program Files (x86)\Movies App ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** PUP.Adware.Heuristic, HP AR Program Upload - 5e38dde98352466ea013aa9342be81b3dcd70564e02d46149edde24b9c2a6d66 PUP.Adware.Heuristic, HP AR Program Upload - e3d50a65199b440ab997415d1e5e739e4065d4b0cb2e428ba1d966407de3867d ***** [ Registry ] ***** PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mail.ru PUP.Optional.Legacy, [Key] - HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mail.ru PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Universal PUP.Optional.Legacy, [Key] - HKU\.DEFAULT\Software\AVG Nation toolbar PUP.Optional.Legacy, [Key] - HKU\S-1-5-18\Software\AVG Nation toolbar PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\ForumerIT PUP.Optional.Legacy, [Key] - HKCU\Software\ForumerIT PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\MaxPower PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D007D90B-423F-40A5-BE43-05BC2ABCA970} PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | AnyProtect Scanner PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | ApnTBMon PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run | Optimizer Pro PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | CrashMon PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | Salus CrashMon PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | Salus PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run | iLivid PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9} PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext | DisableAddonLoadTimePerformanceNotifications PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A} PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95} PUP.Optional.SupTab, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID | {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} PUP.Optional.SofTonicAssistant, [Value] - HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run | Softonic For Windows PUP.Adware.Heuristic, [Key] - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HP AR Program Upload - 5e38dde98352466ea013aa9342be81b3dcd70564e02d46149edde24b9c2a6d66 PUP.Adware.Heuristic, [Key] - HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HP AR Program Upload - e3d50a65199b440ab997415d1e5e739e4065d4b0cb2e428ba1d966407de3867d ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** PUP.Optional.Legacy, Plugin found: Avira SafeSearch Plus - PUP.Optional.Legacy, SearchProvider found: Ask - ask.com PUP.Optional.Legacy, SearchProvider found: Ask Search - ask search /!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271 ************************* ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########