News

# AdwCleaner 7.0.1.
0 - Logfile created on Thu Aug 03 01:51:24 2017

# Updated on 2017/05/08 by Malwarebytes
# Database: 08-02-2017.1
# Running on Windows 7 Professional (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support
***** [ Services ] *****
PUP.Optional.Legacy, AdvancedSystemCareService10
***** [ Folders ] *****
PUP.Optional.AdvancedSystemCare, C:\ProgramData\IObit\Advanced SystemCare

PUP.Optional.AdvancedSystemCare, C:\ProgramData\Application Data\IObit\Advanced
SystemCare
PUP.Optional.AdvancedSystemCare,
C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Program Files (x86)\Common Files\IObit\Advanced
SystemCare
PUP.Optional.AdvancedSystemCare,
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\All Users\IObit\Advanced SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\HP\AppData\LocalLow\IObit\Advanced
SystemCare
PUP.Optional.AdvancedSystemCare, C:\Users\HP\AppData\Roaming\IObit\Advanced
SystemCare
PUP.Optional.Legacy, C:\Users\HP\AppData\Roaming\browsers
PUP.Optional.Legacy,
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Application Updater
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Application Updater
PUP.Optional.Legacy, C:\Windows\System32\config\systemprofile\AppData\LocalLow\AVG
SafeGuard toolbar
PUP.Optional.Legacy, C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG
SafeGuard toolbar
PUP.Optional.Legacy, C:\Users\HP\AppData\Local\DriverTuner
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cain
PUP.Optional.Legacy, C:\Users\HP\AppData\Roaming\FileAssociationManager
C:\Windows\System32\config\systemprofile\AppData\Roaming\GrabPro
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\GrabPro
PUP.Optional.Legacy, C:\Program Files (x86)\TerminusKeeper
PUP.Optional.Legacy, C:\Program Files (x86)\Common Files\freemake shared
PUP.Optional.Legacy, C:\ProgramData\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Application Data\IObit\ASCDownloader
PUP.Optional.Legacy, C:\Users\All Users\IObit\ASCDownloader
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced
SystemCare
PUP.Optional.Conduit.A, C:\Users\HP\AppData\Roaming\RHEng
PUP.Adware.Heuristic, C:\ProgramData\14aa22b6
PUP.Adware.Heuristic, C:\ProgramData\8249646705814302952
PUP.Adware.Heuristic, C:\ProgramData\Audyssey Labs
PUP.Adware.Heuristic, C:\ProgramData\{3B279E8D-16A3-4660-A915-994B084F6C00}
PUP.Adware.Heuristic, C:\ProgramData\{5E27BA15-E98C-0DBE-45B5-1094CBAD73F1}
PUP.Adware.Heuristic, C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
PUP.Adware.Heuristic, C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
PUP.Adware.Heuristic, C:\ProgramData\{D57A17B5-62D1-A01E-4464-9A59EEE9B906}
***** [ Files ] *****
PUP.Optional.Legacy, C:\Users\HP\AppData\Roaming\LiveSupport.exe_log.txt
PUP.Optional.Legacy, C:\Users\HP\AppData\Roaming\regsvr32.exe_log.txt
PUP.Optional.Legacy, C:\Users\All Users\Desktop\Advanced SystemCare 10.lnk
PUP.Optional.Legacy, C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick
Launch\User Pinned\TaskBar\Advanced SystemCare 10.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\hlwfzz7q.default\invalidprefs.
js
C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\sskcnmny.default\searchplugins
\WebSearch.xml
C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\sskcnmny.default\bprotector_ex
tensions.rdf
C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\sskcnmny.default\invalidprefs.
js
C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\sskcnmny.default\searchplugins
\Conduit.xml
Trojan.BCDSoft, C:\ProgramData\log.ewbt
Trojan.BCDSoft, C:\ProgramData\Application Data\log.ewbt
Trojan.BCDSoft, C:\Users\All Users\log.ewbt
Trojan.BCDSoft, C:\ProgramData\log.binb
Trojan.BCDSoft, C:\ProgramData\Application Data\log.binb
Trojan.BCDSoft, C:\Users\All Users\log.binb
Trojan.BCDSoft, C:\ProgramData\log.ewbb
Trojan.BCDSoft, C:\ProgramData\Application Data\log.ewbb
Trojan.BCDSoft, C:\Users\All Users\log.ewbb
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
PUP.Optional.Legacy, One System Care Task

PUP.Optional.Legacy, Driver Booster Scheduler
PUP.Optional.Legacy, Escolade
PUP.Adware.Heuristic, ASC10_SkipUac_HP
***** [ Registry ] *****

Adware.Elex, [Key] - HKU\.DEFAULT\Software\jhdbca
Adware.Elex, [Key] - HKU\S-1-5-18\Software\jhdbca
PUP.Optional.AdvancedSystemCare, [Key] - HKLM\SOFTWARE\IOBIT\ASC
PUP.Optional.AdvancedSystemCare, [Key] -
HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\Main |
Search Bar [http:\\search.certified-toolbar.com?
si=66807&tid=6724&ver=5.7&ts=1396285200000.000009&tguid=66807-6724-1396600137753-
388927-b5678&st=chrome&q=]
PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\Main |
388927-b5678&st=chrome&q=]
PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\SearchUrl |
(Default) [http:\\search.certified-toolbar.com?
si=66807&st=bs&tid=6724&ver=5.7&ts=1396285200000.000009&tguid=66807-6724-
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\SearchUrl |
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\SearchURI |
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\SearchURI |
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl |
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl |
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchURI |
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchURI |
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKLM\SOFTWARE\Classes\SOFTWARE\Microsoft\Internet
Explorer\Main | Default_Search_URL [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Main | Default_Search_URL [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Main | Search Bar [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Main | Search Bar [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Main | Search Page [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Main | Search Page [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Search | Default_Search_URL [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Search | Default_Search_URL [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Search | Search Bar [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Search | Search Bar [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Search | Search Page [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\Search | Search Page [http:\\search.certified-toolbar.com?
388927-b5678&st=chrome&q=]
Explorer\SearchURI | (Default) [http:\\search.certified-toolbar.com?
1396600137753-388927-b5678&q=%s]
Explorer\SearchURI | (Default) [http:\\search.certified-toolbar.com?
1396600137753-388927-b5678&q=%s]
Explorer\SearchUrl | (Default) [http:\\search.certified-toolbar.com?
1396600137753-388927-b5678&q=%s]
Explorer\SearchUrl | (Default) [http:\\search.certified-toolbar.com?
1396600137753-388927-b5678&q=%s]
PUP.Optional.Legacy, [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main |
388927-b5678&st=chrome&q=]
PUP.Optional.Legacy, [Data] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main |
388927-b5678&st=chrome&q=]
PUP.Optional.Legacy, [Value] -
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Firew
allRules | {26E4BCF4-6EB4-45AE-BD10-5A331CD038D4}
PUP.Optional.Legacy, [Value] -
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Firew
allRules | {60903438-457B-46C7-A2DD-BC108667721A}
PUP.Optional.Legacy, [Key] -
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2C98B47-B5F4-94AA-281D-
4135416774CF}
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-4173422724-408966785-248803200-
1000\Software\AppDataLow\Software\IObit Apps
PUP.Optional.Legacy, [Key] - HKCU\Software\AppDataLow\Software\IObit Apps
1000\Software\DriverTuner
PUP.Optional.Legacy, [Key] - HKCU\Software\DriverTuner
1000\Software\DriverTuner_Init
PUP.Optional.Legacy, [Key] - HKCU\Software\DriverTuner_Init
1000\Software\ProgSense
PUP.Optional.Legacy, [Key] - HKCU\Software\ProgSense
1000\Software\cain
PUP.Optional.Legacy, [Key] - HKCU\Software\cain
1000\Software\Escolade
PUP.Optional.Legacy, [Key] - HKCU\Software\Escolade
1000\Software\eSupport.com
PUP.Optional.Legacy, [Key] - HKCU\Software\eSupport.com
PUP.Optional.Legacy, [Key] - HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-
BAA2-28BF01070AFA}
PUP.Optional.Legacy, [Key] - HKU\S-1-5-18\Software\AppDataLow\{12DA0E6F-5543-440C-
BAA2-28BF01070AFA}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\SkypeUpdateEx
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-
4900-B3F7-F4B073EFC214}
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-
4900-B3F7-F4B073EFC214}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-
841D-62794727DAF9}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low
Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-
8EAB-B40CBE5B1FF7}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-
603F48442D3B}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7854F00C-DC77-477E-
A10E-603F48442D3B}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-
BC0C-8E6EA7F085D6}
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C55BBCD6-41AD-
48AD-9953-3609C48EACC7}
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C55BBCD6-41AD-
48AD-9953-3609C48EACC7}
PUP.Optional.Legacy, [Value] - HKU\.DEFAULT\Software\Microsoft\Internet
Explorer\Toolbar\WebBrowser | {C55BBCD6-41AD-48AD-9953-3609C48EACC7}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-
89EE8741F468}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-
4ED3E9456D39}
PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-4173422724-408966785-248803200-
1000\Software\Microsoft\Windows\CurrentVersion\Run | Advanced SystemCare 10
PUP.Optional.Legacy, [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run |
Advanced SystemCare 10
HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application
HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet
Explorer\MenuExt\&Download by Orbit
Explorer\MenuExt\&Grab video by Orbit
Explorer\MenuExt\Do&wnload selected by Orbit
Explorer\MenuExt\Down&load all by Orbit
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\SMBarBroker.EXE
PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs
| bProtectTabs
PUP.Optional.MiniBar.A, [Key] - HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-
43CF-8498-4C81E83AEAAA}
PUP.Optional.MiniBar.A, [Key] - HKLM\SOFTWARE\Classes\Interface\{A0207057-3461-
4F7F-B689-D016B7A03964}
PUP.Optional.MiniBar.A, [Key] - HKLM\SOFTWARE\Classes\Interface\{A75ACCCD-3CC9-
4865-8BE3-F523FDA2164F}
PUP.Optional.WinToFlashSuggestor, [Key] - HKU\S-1-5-21-4173422724-408966785-
248803200-1000\Software\AppDataLow\Software\WinToFlash Suggestor
PUP.Optional.WinToFlashSuggestor, [Key] -
HKCU\Software\AppDataLow\Software\WinToFlash Suggestor
PUP.Adware.Heuristic, [Key] - HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Tree\ASC10_SkipUac_HP
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries.
*************************
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########

News

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

News

Uploaded by

Copyright:

Available Formats

# AdwCleaner 7.0.1.

0 - Logfile created on Thu Aug 03 01:51:24 2017

* [ Services ] *

* [ Folders ] *

PUP.Optional.AdvancedSystemCare, C:\ProgramData\IObit\Advanced SystemCare

* [ Files ] *

* [ DLL ] *

No malicious DLLs found.

* [ WMI ] *

No malicious WMI found.

* [ Shortcuts ] *

No malicious shortcuts found.

* [ Tasks ] *

PUP.Optional.Legacy, One System Care Task

* [ Registry ] *

* [ Firefox (and derivatives) ] *

No malicious Firefox entries.

* [ Chromium (and derivatives) ] *

No malicious Chromium entries.

You might also like