# AdwCleaner v6.045 - Logfile created 11/04/2017 at 18:38:29 # Updated on 28/03/2017 by Malwarebytes # Database : 2017-04-10.2 [Local] # Operating System : Windows 10 Home (X86) # Username : Vaishnavi - LENOVO # Running from : C:\Users\Vaishnavi\Downloads\adwcleaner_6.045(1).exe # Mode: Scan # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** Folder Found: C:\Users\Vaishnavi\AppData\Roaming\Firefox Folder Found: C:\Users\Vaishnavi\AppData\Local\Firefox Folder Found: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej ***** [ Files ] ***** File Found: C:\Users\Vaishnavi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet-Explorer Browser.lnk File Found: C:\Users\Vaishnavi\AppData\Roaming\Microsoft\Windows\Start Menu\¿ìѹ.lnk File Found: C:\WINDOWS\system32\findit.xml File Found: C:\WINDOWS\system32\drivers\iSafeKrnlBoot.sys File Found: C:\WINDOWS\system32\drivers\KuaiZipDrive.sys File Found: C:\WINDOWS\rsrcs.dll File Found: C:\Program Files\settings.dat File Found: C:\Users\Public\Documents\temp.dat File Found: C:\Users\Public\Documents\report.dat File Found: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\a4ycc3sr.default\searchplugins\startpageing123.xml File Found: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage File Found: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage-journal File Found: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** Key Found: : \root\subscription\\ActiveScriptEventConsumer [ASEC] ***** [ Shortcuts ] ***** No infected shortcut found. ***** [ Scheduled Tasks ] ***** Task Found: Tafewardkinerpy Task Found: Milimili Task Found: iorrt Task Found: Windows-PG ***** [ Registry ] ***** Key Found: HKLM\SOFTWARE\5b952a37-ebad-c0b3-e5d4-92d30f6ce1bc Key Found: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WindowsMangerProtect Key Found: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\GoogleChromeUpService Key Found: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\FirefoxU Key Found: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinSnare Key Found: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\windowsmangerprotect Key Found: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\googlechromeupservice Key Found: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARER Key Found: HKLM\SOFTWARE\Classes\Fishjanesc Key Found: HKLM\SOFTWARE\Classes\QZipShell.ContextMenuExt Key Found: HKLM\SOFTWARE\Classes\QZipShell.ContextMenuExt.1 Key Found: HKLM\SOFTWARE\Classes\QZipShell.DragDropMenu Key Found: HKLM\SOFTWARE\Classes\QZipShell.DragDropMenu.1 Key Found: HKLM\SOFTWARE\Classes\QZipShell.KYDropHandler Key Found: HKLM\SOFTWARE\Classes\QZipShell.KYDropHandler.1 Key Found: HKLM\SOFTWARE\Classes\QZipShell.KzShlobj Key Found: HKLM\SOFTWARE\Classes\QZipShell.KzShlobj.1 Key Found: HKLM\SOFTWARE\Classes\QZipShell.PropertyExt Key Found: HKLM\SOFTWARE\Classes\QZipShell.PropertyExt.1 Key Found: HKLM\SOFTWARE\Classes\AppID\{9CC34070-3A38-4C7A-89CB-EF8177EF07A1} Key Found: HKLM\SOFTWARE\Classes\CLSID\{2FB831EA-DA68-4A66-8E31-A2D976A6296C} Key Found: HKLM\SOFTWARE\Classes\CLSID\{3DCCD550-7586-40D2-A51D-D2F98EC06B3C} Key Found: HKLM\SOFTWARE\Classes\CLSID\{6ADF19E3-77A3-4395-ADB4-9FD7D351EB3E} Key Found: HKLM\SOFTWARE\Classes\CLSID\{AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} Key Found: HKLM\SOFTWARE\Classes\CLSID\{C9487131-EF4C-40D9-BA70-E85356CAF67E} Key Found: HKLM\SOFTWARE\Classes\TypeLib\{86C4C3BA-4EA4-4CF8-98B9-6B07B477B835} Value Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}] Key Found: HKU\.DEFAULT\Software\KuaiZip Key Found: HKU\.DEFAULT\Software\UpgSvr Key Found: HKU\.DEFAULT\Software\xvb`lj Key Found: HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\APN PIP Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\AskPartnerNetwork Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\HomeTab Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Kromtech Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Mozilla\Extends Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\PIP Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\PRODUCTSETUP Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\SearchProtectWS Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\simplytech Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Simplytech\HomeTab Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\TNT2 Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\csastats Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\SIMPLYTECH Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\KuaiZip Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\mtUtatity Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\WinSnare Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Fishjane Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\deskapp Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9} Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21} Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\SEARCHPROTECT Key Found: HKU\AvGeneric_S-1-5-21-1790925875-1115741758-2148593521-1002\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\Installer Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\AutoTime Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\SNDA Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\mtUtatity Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\MICROSOFT\wewewe Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\WinSnare Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\dlr Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\PopWnd Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\UpgSvr Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\deskapp Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} Key Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\AppDataLow\Software\AppTrailers Key Found: HKU\S-1-5-18\Software\KuaiZip Key Found: HKU\S-1-5-18\Software\UpgSvr Key Found: HKU\S-1-5-18\Software\xvb`lj Key Found: HKU\S-1-5-18\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} Key Found: HKCU\Software\Installer Key Found: HKCU\Software\AutoTime Key Found: HKCU\Software\SNDA Key Found: HKCU\Software\mtUtatity Key Found: HKCU\Software\MICROSOFT\wewewe Key Found: HKCU\Software\WinSnare Key Found: HKCU\Software\dlr Key Found: HKCU\Software\PopWnd Key Found: HKCU\Software\UpgSvr Key Found: HKCU\Software\deskapp Key Found: HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} Key Found: HKCU\Software\AppDataLow\Software\AppTrailers Key Found: HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81} Key Found: HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} Key Found: HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Found: HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9} Key Found: HKLM\SOFTWARE\AIM Toolbar Key Found: HKLM\SOFTWARE\AskPartnerNetwork Key Found: HKLM\SOFTWARE\Conduit Key Found: HKLM\SOFTWARE\FFPluginHp Key Found: HKLM\SOFTWARE\Iminent Key Found: HKLM\SOFTWARE\istartsurfSoftware Key Found: HKLM\SOFTWARE\SearchModule Key Found: HKLM\SOFTWARE\SearchProtect Key Found: HKLM\SOFTWARE\searchult Key Found: HKLM\SOFTWARE\SpeedBit Key Found: HKLM\SOFTWARE\SEARCHPROTECT Key Found: HKLM\SOFTWARE\youndooSoftware Key Found: HKLM\SOFTWARE\OtherSearch Key Found: HKLM\SOFTWARE\amule-custom Key Found: HKLM\SOFTWARE\mtUtatity Key Found: HKLM\SOFTWARE\InterSect Alliance Key Found: HKLM\SOFTWARE\startpageing123Software Key Found: HKLM\SOFTWARE\Fishjane Key Found: HKLM\SOFTWARE\xvb`lj Key Found: HKLM\SOFTWARE\msServer Key Found: HKLM\SOFTWARE\{84416237-6490-494D-9AD6-4994DD978971} Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21} Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SEARCHPROTECT Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{59B5A9CD-253D-4C41-A073-B387D4C9672D} Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13D7C2E9-08E7-4889-94FF-87E707184E53} Data Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\ProgramData\Utatity\TransLax.dll Value Found: HKU\S-1-5-21-1790925875-1115741758-2148593521-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [msiql] Value Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [DiskPower] Value Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [AppTrailers] Key Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SEARCHSCOPES\IELNKSRCH Key Found: HKLM\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\iSafeSvc2.exe Value Found: HKCU\Environment [SNF] Value Found: HKCU\Environment [SNP] Key Found: HKLM\SYSTEM\CurrentControlSet\Control\Class\{0C95ABFE-4FB6-49DB-B22F-0E1F5FC4BEEC} Key Found: HKLM\SYSTEM\CurrentControlSet\Control\Class\{EEEFACB3-729F-4484-B66D-E7A7917BBFC1} Key Found: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH Value Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [KuaiZip Shell Extension] Value Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [kuaizipupdatesvc] Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\KzShlobj Key Found: HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9 Key Found: HKLM\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\KuaiZipShlExt Key Found: HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\KuaiZipShlExt Key Found: HKLM\SOFTWARE\Classes\AppID\QZipShell.DLL Value Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [WinSAPSvc] Key Found: HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\KuaiZipShlExt Key Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Utatity.exe Key Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Utatity.exe Value Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [WinSnare] Value Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost [WinSnare] Key Found: HKCU\SOFTWARE\Classes\ChromeHTML Key Found: HKCU\SOFTWARE\Clients\StartMenuInternet\ChromeHTML Value Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [WINSNARE] Value Found: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [SNARER] Value Found: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [searchffv2@gmail.com] Value Found: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [sweetsearch@gmail.com] Value Found: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [searchffv2@gmail.com] Value Found: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [sweetsearch@gmail.com] Value Found: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [searchffv2@gmail.com] Value Found: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [sweetsearch@gmail.com] Key Found: HKCU\Software\Google\Chrome\Extensions\jlcgehabolcakkjhgmgpkagpolbjlhfa Key Found: HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej ***** [ Web browsers ] ***** No malicious Firefox based browser items found. Chrome pref Found: [C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences ] - pilplloabdedfmialnfchjomjmpjcoej Chrome pref Found: [C:\Users\Vaishnavi\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Secure Preferences ] - jlcgehabolcakkjhgmgpkagpolbjlhfa Chrome pref Found: [C:\Users\Vaishnavi\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Secure Preferences ] - pilplloabdedfmialnfchjomjmpjcoej Chrome pref Found: [C:\Users\Varun\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences ] - cknghehebaconkajgiobncfleofebcog ************************* C:\AdwCleaner\AdwCleaner[S0].txt - [14391 Bytes] - [31/03/2017 20:36:27] C:\AdwCleaner\AdwCleaner[S1].txt - [14404 Bytes] - [31/03/2017 20:41:55] C:\AdwCleaner\AdwCleaner[S2].txt - [15919 Bytes] - [11/04/2017 18:09:24] C:\AdwCleaner\AdwCleaner[S3].txt - [15310 Bytes] - [11/04/2017 18:38:29] ########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [15384 Bytes] ##########