# AdwCleaner v6.030 - Logfile created 26/10/2016 at 12:40:10 # Updated on 19/10/2016 by Malwarebytes # Database : 2016-10-25.1 [Server] # Operating System : Windows 7 Professional Service Pack 1 (X64) # Username : Marek - ICORE7 # Running from : C:\Users\Marek\Desktop\adwcleaner_6.030.exe # Mode: Scan # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** File Found: C:\Windows\SysWOW64\findit.xml ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious keys found. ***** [ Shortcuts ] ***** No infected shortcut found. ***** [ Scheduled Tasks ] ***** No malicious task found. ***** [ Registry ] ***** Data Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPO Data Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuP Data Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPO Data Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\Main [SearchAssistant] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947 Data Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mam Data Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyu Data Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZr Data Found: HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZrcL Data Found: HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZrc Data Found: HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZrcL Data Found: HKCU\Software\Microsoft\Internet Explorer\Main [SearchAssistant] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOL Data Found: HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrF Data Found: HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZr Data Found: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZr Data Found: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZ Data Found: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLkZr Data Found: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [SearchAssistant] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHU Data Found: [x64] HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7y Data Found: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuPOB2E6QjqkhGUSMpj6gR12fOiWhnUNox7yrFxHUOLk Value Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] Key Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} Data Found: HKU\S-1-5-21-244903110-2082757558-103457356-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Value Found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] Key Found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} Data Found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Value Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] Key Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch Value Found: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] Key Found: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} Data Found: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Key Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SEARCHSCOPES\IELNKSRCH Key Found: HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} Value Found: HKCU\Environment [SNF] Value Found: HKCU\Environment [SNP] Key Found: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH ***** [ Web browsers ] ***** No malicious Firefox based browser items found. No malicious Chromium based browser items found. ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [27435 Bytes] - [13/01/2016 15:39:23] C:\AdwCleaner\AdwCleaner[C2].txt - [11148 Bytes] - [13/01/2016 17:57:52] C:\AdwCleaner\AdwCleaner[C3].txt - [8030 Bytes] - [14/01/2016 14:26:56] C:\AdwCleaner\AdwCleaner[C4].txt - [3344 Bytes] - [15/01/2016 17:22:00] C:\AdwCleaner\AdwCleaner[C5].txt - [3774 Bytes] - [16/01/2016 11:22:47] C:\AdwCleaner\AdwCleaner[C6].txt - [640 Bytes] - [22/01/2016 15:39:01] C:\AdwCleaner\AdwCleaner[C7].txt - [9091 Bytes] - [26/10/2016 12:18:32] C:\AdwCleaner\AdwCleaner[C8].txt - [5632 Bytes] - [26/10/2016 12:27:18] C:\AdwCleaner\AdwCleaner[S10].txt - [7876 Bytes] - [26/10/2016 12:26:52] C:\AdwCleaner\AdwCleaner[S11].txt - [7102 Bytes] - [26/10/2016 12:40:10] C:\AdwCleaner\AdwCleaner[S1].txt - [30469 Bytes] - [13/01/2016 15:38:30] C:\AdwCleaner\AdwCleaner[S2].txt - [14814 Bytes] - [13/01/2016 17:57:01] C:\AdwCleaner\AdwCleaner[S3].txt - [16635 Bytes] - [14/01/2016 14:26:00] C:\AdwCleaner\AdwCleaner[S4].txt - [11902 Bytes] - [15/01/2016 17:19:10] C:\AdwCleaner\AdwCleaner[S5].txt - [7245 Bytes] - [16/01/2016 11:19:33] C:\AdwCleaner\AdwCleaner[S6].txt - [812 Bytes] - [16/01/2016 11:35:14] C:\AdwCleaner\AdwCleaner[S7].txt - [1703 Bytes] - [22/01/2016 15:38:11] C:\AdwCleaner\AdwCleaner[S8].txt - [8484 Bytes] - [26/10/2016 12:14:28] C:\AdwCleaner\AdwCleaner[S9].txt - [7801 Bytes] - [26/10/2016 12:25:29] ########## EOF - C:\AdwCleaner\AdwCleaner[S11].txt - [7836 Bytes] ##########