Malwarebytes Anti-Rootkit BETA 1.9.3.

1001
www.malwarebytes.org
Database version:
main: v2017.03.07.05
rootkit: v2017.02.27.01
Windows 10 x64 NTFS
Internet Explorer 11.576.14393.0
AmyDerp :: DESKTOP-GRFVR0K [administrator]
3/7/2017 4:28:10 PM
mbar-log-2017-03-07 (16-28-10).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory |
Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 334610
Time elapsed: 45 minute(s), 57 second(s)
Memory Processes Detected: 1
C:\Users\AmyDerp\AppData\Roaming\Kyubey\Kyubey.exe (Adware.Elex.SHHKRST) -> 8024
-> Delete on reboot. [74bdfccb25833afcf765b8b702ff2fd1]
Memory Modules Detected: 2
C:\ProgramData\Apple\Apps\config.dll (Adware.Elex) -> Delete on reboot. [54dd695
e6f391b1bcacb25b42ed341bf]
C:\ProgramData\Apple\Apps\config.dll (Adware.Elex) -> Delete on reboot. [54dd695
e6f391b1bcacb25b42ed341bf]
Registry Keys Detected: 5
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Kyubey (Adware.Elex.SHHKRST) -> Delete on
reboot. [74bdfccb25833afcf765b8b702ff2fd1]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{96BB
7C31-854E-4911-9C76-13DE54DEAF7F} (Adware.Elex) -> Delete on reboot. [c0714186ad
fb70c6d1bb408fc0408f71]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Milimi
li (Adware.Elex) -> Delete on reboot. [c76a0bbcb1f78bab0949af20dd238a76]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Apps_Cfg (Adware.Elex) -> Delete on reboo
t. [3ff2edda6840cc6ab4d68555b64b44bc]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinSnare (Adware.Elex) -> Delete on reboo
t. [3cf57057f8b0e452022bb3382bd5dc24]
Registry Values Detected: 1
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{96BB
7C31-854E-4911-9C76-13DE54DEAF7F}|Path (Adware.Elex) -> Data: \Milimili -> Delet
e on reboot. [c0714186adfb70c6d1bb408fc0408f71]
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 3
C:\Users\AmyDerp\AppData\Roaming\Kyubey (Adware.Elex.SHHKRST) -> Delete on reboo
t. [74bdfccb25833afcf765b8b702ff2fd1]
C:\Users\AmyDerp\AppData\Roaming\WinSnare (Adware.Elex) -> Delete on reboot. [46
eb40872880ee48a369f0fab848718f]
C:\Program Files (x86)\WinSnare(4.2.4) (Adware.Elex) -> Delete on reboot. [f1400
1c636723df9982a95c2ad5407f9]
Files Detected: 15
C:\Program Files (x86)\MIO\MIO.exe (Adware.Elex) -> Delete on reboot. [8aa77d4ae
4c42016c7d8fdd0d828e11f]
C:\Users\AmyDerp\AppData\Local\Temp\1\MIO.exe (Adware.Elex) -> Delete on reboot.
[ee439532dace9f9759467b52fc047b85]
C:\Users\AmyDerp\AppData\Local\Temp\1\yacqq.exe (Adware.Elex) -> Delete on reboo
t. [022f6a5d5b4d5dd95fcfc608a15fdb25]
C:\Windows\Temp\tmp6C69.tmp\MIO.exe (Adware.Elex) -> Delete on reboot. [bd7413b4
5f492a0c06997c5131cf6e92]
C:\Windows\Temp\tmp6C69.tmp\QQBrowserFrame.dll (Adware.Elex) -> Delete on reboot
. [5cd5a81f5355a49258b2666caf5106fa]
C:\Windows\System32\Tasks\Milimili (Adware.Elex) -> Delete on reboot. [ff3225a26
147ee48d92e765c3ac69c64]
C:\Users\AmyDerp\AppData\Roaming\Kyubey\Kyubey.exe (Adware.Elex.SHHKRST) -> Dele
te on reboot. [74bdfccb25833afcf765b8b702ff2fd1]
C:\ProgramData\Apple\Apps\config.dll (Adware.Elex) -> Delete on reboot. [54dd695
e6f391b1bcacb25b42ed341bf]
C:\Users\AmyDerp\AppData\Roaming\WinSnare\WinSnare.dll (Adware.Elex) -> Delete o
n reboot. [46eb40872880ee48a369f0fab848718f]
C:\Program Files (x86)\WinSnare(4.2.4)\LICENSE.txt (Adware.Elex) -> Delete on re
boot. [f14001c636723df9982a95c2ad5407f9]
C:\Program Files (x86)\WinSnare(4.2.4)\openweb.bat (Adware.Elex) -> Delete on re
boot. [f14001c636723df9982a95c2ad5407f9]
C:\Program Files (x86)\WinSnare(4.2.4)\SnareWindowsInstallSupport.dll (Adware.El
ex) -> Delete on reboot. [f14001c636723df9982a95c2ad5407f9]
C:\Program Files (x86)\WinSnare(4.2.4)\stopweb.bat (Adware.Elex) -> Delete on re
boot. [f14001c636723df9982a95c2ad5407f9]
C:\Program Files (x86)\WinSnare(4.2.4)\s_32.ico (Adware.Elex) -> Delete on reboo
t. [f14001c636723df9982a95c2ad5407f9]
C:\Program Files (x86)\WinSnare(4.2.4)\WinSnare.dll (Adware.Elex) -> Delete on r
eboot. [f14001c636723df9982a95c2ad5407f9]
Physical Sectors Detected: 0
(No malicious items detected)
(end)