# -------------------------------

# Malwarebytes AdwCleaner 7.2.4.0

# -------------------------------
# Build: 09-25-2018
# Database: 2019-02-12.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 02-15-2019
# Duration: 00:00:27
# OS: Windows 7 Professional
# Scanned: 31712
# Detected: 59

***** [ Services ] *****

PUP.Optional.Legacy mrupdsrv
PUP.Optional.Mail.Ru Updater.Mail.Ru

***** [ Folders ] *****

PUP.Adware.Heuristic C:\ProgramData\A5EA3ABF-5A07-1
PUP.Adware.Heuristic C:\ProgramData\A5EA3ABF-5915-0
PUP.Optional.Legacy
C:\Users\jhon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pogo Games
PUP.Optional.Legacy C:\Users\jhon\AppData\Roaming\0V1L2Z2Z1T1I1L1T
PUP.Optional.Legacy C:\ProgramData\iWin
PUP.Optional.Legacy C:\ProgramData\iwin games
PUP.Optional.Mail.Ru C:\ProgramData\Mail.Ru
PUP.Optional.Mail.Ru C:\Program Files\Mail.Ru
PUP.Optional.Mail.Ru
C:\Windows\System32\config\systemprofile\AppData\Local\Mail.Ru
PUP.Optional.Mail.Ru C:\Users\jhon\AppData\Local\Mail.Ru
PUP.Optional.OneSystemCare C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\One System Care
PUP.Optional.OneSystemCare C:\Users\jhon\AppData\Roaming\One System Care
PUP.Optional.OneSystemCare C:\Program Files\OneSystemCare
PUP.Optional.SmartApplicationController C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Smart Application Controller
PUP.Optional.SmartApplicationController C:\Program Files\Smart Application
Controller
PUP.Optional.SmartApplicationController C:\Users\jhon\AppData\Roaming\Smart
Application Controller
Trojan.Agent C:\Users\jhon\AppData\Roaming\WidModule

***** [ Files ] *****

PUP.Optional.Legacy C:\Users\jhon\Desktop\?????? ? ?????????.url

PUP.Optional.Mail.Ru C:\Users\jhon\AppData\Roaming\Microsoft\Internet
Explorer\Quick Launch\Mail.Ru.lnk

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy C:\Windows\System32\Tasks\MailRuUpdater

***** [ Registry ] *****

Adware.DNSUnlocker
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
Adware.TryMedia HKLM\Software\Trymedia Systems
PUP.Optional.ByteFence
HKLM\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\ByteFence.exe
PUP.Optional.InstallCore HKCU\Software\csastats
PUP.Optional.Legacy HKCU\Software\Microsoft\Windows\CurrentVersion\Run|
MailRuUpdater
PUP.Optional.Legacy HKCU\Software\PogoDGC
PUP.Optional.Legacy HKLM\Software\Wow6432Node\PogoDGC
PUP.Optional.Legacy HKLM\Software\PogoDGC
PUP.Optional.Legacy
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater
PUP.Optional.Legacy HKLM\Software\Microsoft\Internet Explorer\Low
Rights\ElevationPolicy\{68AE298D-7E8A-4F53-BE55-15D2B065F6C0}
PUP.Optional.Legacy
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E8F97CD-60B5-456F-
A201-73065652D099}
PUP.Optional.Legacy
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E8F97CD-60B5-456F-A201-
73065652D099}
PUP.Optional.Legacy
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{8E8F97CD-60B5-456F-A201-73065652D099}
PUP.Optional.Legacy HKLM\Software\Classes\CLSID\{8E8F97CD-60B5-456F-
A201-73065652D099}
PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C4E377E-3D7D-4EE5-900D-C7D4DFF4B219}
PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Tree\MailRuUpdater
PUP.Optional.Legacy HKCU\Software\Microsoft\Internet
Explorer\AboutUrls|Tabs
PUP.Optional.Legacy HKCU\Software\Microsoft\Internet
Explorer\SearchScopes\{518b33ae-375d-712d-6742-d1fe0400268d}
PUP.Optional.Mail.Ru HKCU\Software\AppDataLow\Software\Mail.Ru
PUP.Optional.Mail.Ru HKCU\Software\Mail.Ru
PUP.Optional.Mail.Ru HKLM\Software\Mail.Ru
PUP.Optional.Mail.Ru
HKCU\Software\Mozilla\NativeMessagingHosts\ru.mail.go.ext_info_host
PUP.Optional.Mail.Ru
HKCU\Software\Google\Chrome\NativeMessagingHosts\ru.mail.go.ext_info_host
PUP.Optional.Mail.Ru HKLM\Software\Classes\IESearchPlugin.MailRuBHO
PUP.Optional.Mail.Ru HKCU\Software\Microsoft\Internet
Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}
PUP.Optional.Mail.Ru HKCU\Software\Microsoft\Internet Explorer\Main|
Start Page
PUP.Optional.OneSystemCare
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneSystemCare_is1
PUP.Optional.OneSystemCare HKCU\Software\One System Care
PUP.Optional.ProductSetup.A HKCU\Software\PRODUCTSETUP
PUP.Optional.SearchManager
HKCU\Software\ProductSetup\Uninstall\0S1P1T1C1R1MtT0P1C1F2X1L1Q1P1QtT1S2UtT0Y1T1M1F
1F
PUP.Optional.SearchManager
HKCU\Software\ProductSetup\Uninstall\0B2U2Z1P0F1P1G1R1P1V0A1Q1Q0O1G
PUP.Optional.SmartApplicationController
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A6AE177E-D46B-4463-AA69-
B9F818E0DC4A}_is1

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Mail.Ru ???????? ???????? Mail.Ru

PUP.Optional.Mail.Ru ????? Mail.Ru
PUP.Optional.Mail.Ru ?????
PUP.Optional.SearchManager Search Manager
PUP.Optional.SearchManager Search Manager

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

AdwCleaner[S00].txt - [5846 octets] - [14/11/2018 09:21:13]

AdwCleaner[C00].txt - [5006 octets] - [14/11/2018 09:22:06]
AdwCleaner[S01].txt - [1379 octets] - [14/11/2018 09:34:39]
AdwCleaner[S02].txt - [1440 octets] - [16/11/2018 06:54:58]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########