# ------------------------------- # Malwarebytes AdwCleaner 7.2.4.0 # ------------------------------- # Build: 09-25-2018 # Database: 2018-10-31.2 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 11-04-2018 # Duration: 00:00:05 # OS: Windows 7 Home Premium # Cleaned: 44 # Failed: 0 ***** [ Services ] ***** Deleted Partner Service ***** [ Folders ] ***** Deleted C:\ProgramData\Partner Deleted C:\ProgramData\AVG_UPDATE_1214TB Deleted C:\ProgramData\AVG_UPDATE_1114TB Deleted C:\ProgramData\AVG_UPDATE_0215TB Deleted C:\Program Files (x86)\AVG Security Toolbar Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar ***** [ Files ] ***** Deleted C:\Users\Kris\Downloads\ReimageRepair.exe ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKLM\SOFTWARE\Classes\ctTOOLBAR.ctToolBarCtrl.3 Deleted HKLM\Software\Wow6432Node\Classes\AppID\kt_bho_dll.dll Deleted HKLM\SOFTWARE\Classes\AppID\kt_bho_dll.dll Deleted HKLM\Software\Wow6432Node\Classes\AppID\REI_AxControl.DLL Deleted HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{86676E13-D6D8-4652-9FCF-F2047F1FB000} Deleted HKLM\Software\Classes\TypeLib\{86676E13-D6D8-4652-9FCF-F2047F1FB000} Deleted HKLM\Software\Wow6432Node\Classes\AppID\{28A88B70-D874-4F73-BBBA-9B2B222FB7D6} Deleted HKLM\Software\Classes\AppID\{28A88B70-D874-4F73-BBBA-9B2B222FB7D6} Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Deleted HKLM\Software\Classes\CLSID\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Deleted HKLM\Software\Wow6432Node\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A} Deleted HKLM\Software\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A} Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36} Deleted HKLM\Software\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546} Deleted HKLM\Software\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546} Deleted HKLM\Software\Wow6432Node\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4} Deleted HKLM\Software\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4} Deleted HKLM\Software\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB} Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484} Deleted HKLM\Software\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484} Deleted HKCU\Software\Reimage Deleted HKLM\Software\Reimage Deleted HKLM\Software\Classes\REI_AxControl.ReiEngine.1 Deleted HKLM\Software\Classes\REI_AxControl.ReiEngine Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{9517FB66-3DCF-44eb-8CE5-1A0F8A058D12} Deleted HKLM\Software\Classes\CLSID\{9517FB66-3DCF-44eb-8CE5-1A0F8A058D12} ***** [ Chromium (and derivatives) ] ***** Deleted Avira SafeSearch Plus ***** [ Chromium URLs ] ***** Deleted UNICER Deleted http://www.mysearchresults.com/?c=3520&t=01 Deleted AVG Secure Search ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [5164 octets] - [04/11/2018 18:42:50] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########