# AdwCleaner v6.043 - Logfile created 04/02/2017 at 14:33:15 # Updated on 27/01/2017 by Malwarebytes # Database : 2017-02-03.2 [Server] # Operating System : Windows 10 Pro (X64) # Username : rober - USER # Running from : C:\Users\rober\Downloads\adwcleaner_6.043 (1).exe # Mode: Clean # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** [-] Service deleted: iThemes5 ***** [ Folders ] ***** [-] Folder deleted: C:\WINDOWS\SysWoW64\config\systemprofile\AppData\Roaming\Tencent [-] Folder deleted: C:\Program Files (x86)\MIO [-] Folder deleted: C:\Program Files (x86)\reports ***** [ Files ] ***** [-] File deleted: C:\Program Files (x86)\Common Files\SERVICES\ITHEMES.DLL [-] File deleted: C:\Program Files (x86)\settings.dat [-] File deleted: C:\Users\Public\Documents\temp.dat ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** [-] Task deleted: Milimili ***** [ Registry ] ***** [-] Key deleted: HKU\.DEFAULT\Software\jhdbca [#] Key deleted on reboot: HKU\S-1-5-18\Software\jhdbca [-] Key deleted: HKLM\SOFTWARE\ScreenShot [-] Key deleted: HKLM\SOFTWARE\jhdbca [-] Key deleted: HKLM\SOFTWARE\WinArcher [-] Key deleted: [x64] HKLM\SOFTWARE\jhdbca [-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [WinSAPSvc] [-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [ArcherGroupEx] [-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [GubedZLGroupEx] ***** [ Web browsers ] ***** [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: search.portaldosites.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: yoursearching [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: delta-homes [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: sweet-page [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: ask search [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: mysearch.avg.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: qvo6 [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: yessearches.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: yessearches [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: feed.sonic-search.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: r [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: us.yhs.search.yahoo.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: slirsredirect.search.aol.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: omniboxes [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: startsear.ch [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: mysites123 [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: delta-search.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: v9 [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: dts.search-results.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: search.yahoo.com [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3\Web data] [Search Provider] Deleted: amisites [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3] [startup_urls] Deleted: hxxp://www.amisites.com/?type=hp&ts=1486116256&z=16564258075786715ef9645gczcb4q8gcg0qcofw0b&from=che0812&uid=SamsungXSSDX840XSeries_S14ENEACC04114J [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 3] [favicon_url] Deleted: hxxp://www.amisites.com/searchfavicon.ico [-] [C:\Users\rober\AppData\Local\Google\Chrome\User Data\Profile 5] [startup_urls] Deleted: hxxp://www.amisites.com/?type=hp&ts=1486116256&z=16564258075786715ef9645gczcb4q8gcg0qcofw0b&from=che0812&uid=SamsungXSSDX840XSeries_S14ENEACC04114J ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C10].txt - [4877 Bytes] - [04/02/2017 14:33:15] C:\AdwCleaner\AdwCleaner[C1].txt - [38376 Bytes] - [29/09/2015 21:52:23] C:\AdwCleaner\AdwCleaner[C2].txt - [15767 Bytes] - [24/08/2015 12:41:27] C:\AdwCleaner\AdwCleaner[C3].txt - [26559 Bytes] - [06/10/2015 14:43:44] C:\AdwCleaner\AdwCleaner[C4].txt - [5574 Bytes] - [10/10/2015 19:01:10] C:\AdwCleaner\AdwCleaner[C5].txt - [3250 Bytes] - [03/12/2015 21:36:28] C:\AdwCleaner\AdwCleaner[C6].txt - [3209 Bytes] - [20/12/2015 11:16:38] C:\AdwCleaner\AdwCleaner[C7].txt - [1726 Bytes] - [17/01/2016 11:45:16] C:\AdwCleaner\AdwCleaner[C8].txt - [10312 Bytes] - [22/01/2017 20:06:17] C:\AdwCleaner\AdwCleaner[C9].txt - [11563 Bytes] - [03/02/2017 11:17:08] C:\AdwCleaner\AdwCleaner[S10].txt - [6091 Bytes] - [04/02/2017 14:32:48] C:\AdwCleaner\AdwCleaner[S1].txt - [42715 Bytes] - [29/09/2015 21:51:49] C:\AdwCleaner\AdwCleaner[S2].txt - [19899 Bytes] - [24/08/2015 12:40:33] C:\AdwCleaner\AdwCleaner[S3].txt - [11904 Bytes] - [24/08/2015 12:45:05] C:\AdwCleaner\AdwCleaner[S4].txt - [32748 Bytes] - [01/09/2015 12:54:11] C:\AdwCleaner\AdwCleaner[S5].txt - [4800 Bytes] - [03/12/2015 21:34:59] C:\AdwCleaner\AdwCleaner[S6].txt - [8262 Bytes] - [20/12/2015 11:15:38] C:\AdwCleaner\AdwCleaner[S7].txt - [1599 Bytes] - [17/01/2016 11:33:28] C:\AdwCleaner\AdwCleaner[S8].txt - [9931 Bytes] - [22/01/2017 20:05:34] C:\AdwCleaner\AdwCleaner[S9].txt - [13303 Bytes] - [03/02/2017 11:16:42] ########## EOF - C:\AdwCleaner\AdwCleaner[C10].txt - [6349 Bytes] ##########