# ------------------------------- # Malwarebytes AdwCleaner 7.2.5.0 # ------------------------------- # Build: 11-26-2018 # Database: 2018-11-30.1 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 12-03-2018 # Duration: 00:00:12 # OS: Windows 7 Home Basic # Scanned: 32290 # Detected: 66 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.1stBrowser C:\Users\иар\AppData\Roaming\SPI PUP.Optional.Amigo C:\Users\иар\AppData\Local\Amigo PUP.Optional.AuslogicsBoostSpeed C:\ProgramData\Auslogics\BoostSpeed PUP.Optional.AuslogicsBoostSpeed C:\Users\иар\AppData\Roaming\Auslogics\BoostSpeed PUP.Optional.DriverPack C:\Users\иар\AppData\Roaming\DRPSu PUP.Optional.DriverPack C:\Program Files (x86)\DriverPack Notifier PUP.Optional.DriverPack C:\Users\иар\AppData\Roaming\DriverPack Notifier PUP.Optional.FileViewPro C:\Program Files (x86)\FileViewPro PUP.Optional.FileViewPro C:\Users\иар\AppData\Local\FileViewPro PUP.Optional.Legacy C:\Users\иар\AppData\Local\Nichrome PUP.Optional.Legacy C:\Users\иар\AppData\Local\Xpom PUP.Optional.Legacy C:\ProgramData\Rising PUP.Optional.Legacy C:\Program Files (x86)\Rising PUP.Optional.Legacy C:\Users\иар\AppData\Roaming\DriverCure PUP.Optional.Legacy C:\Users\иар\AppData\Roaming\browsers PUP.Optional.Mail.Ru C:\ProgramData\Guard.Mail.ru PUP.Optional.Mail.Ru C:\Users\иар\AppData\Local\Mail.Ru PUP.Optional.Mail.Ru C:\Users\иар\AppData\Local\MailRu PUP.Optional.RegCurePro C:\ProgramData\PARETOLOGIC PUP.Optional.RegCurePro C:\Users\иар\AppData\Roaming\PARETOLOGIC PUP.Optional.WinThruster C:\Windows\Installer\{773A8CA8-3876-4AA1-AB78-EECA231BFF3A} ***** [ Files ] ***** PUP.Optional.Legacy C:\Users\иар\AppData\Roaming\Mozilla\Firefox\Profiles\35xjub17.default\searchplugins\bingp.xml PUP.Optional.Mail.Ru C:\Users\иар\AppData\Roaming\Mozilla\Firefox\Profiles\35xjub17.default\SEARCHPLUGINS\MAILRU.XML PUP.Optional.Mail.Ru C:\Users\иар\Favorites\Mail.Ru Агент - используй для общения!.url PUP.Optional.SysTweak C:\Windows\System32\roboot64.exe ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Amigo HKLM\Software\Wow6432Node\MICROSOFT\MEDIAPLAYER\SHIMINCLUSIONLIST\amigo.exe PUP.Optional.AuslogicsBoostSpeed HKLM\Software\Wow6432Node\Auslogics\BoostSpeed PUP.Optional.AuslogicsBoostSpeed HKLM\Software\Wow6432Node\CLASSES\INTERFACE\{DCC049B0-CA04-4E58-B4C8-CE62AC6F5096} PUP.Optional.AuslogicsBoostSpeed HKLM\SOFTWARE\CLASSES\INTERFACE\{DCC049B0-CA04-4E58-B4C8-CE62AC6F5096} PUP.Optional.AuslogicsBoostSpeed HKLM\Software\Wow6432Node\CLASSES\TYPELIB\{FE9301D5-9266-4A2F-8767-85482115CAB0} PUP.Optional.AuslogicsBoostSpeed HKLM\SOFTWARE\CLASSES\TYPELIB\{FE9301D5-9266-4A2F-8767-85482115CAB0} PUP.Optional.DriverPack HKCU\Software\drpsu PUP.Optional.DriverPack HKU\S-1-5-21-4020304659-3910671362-1857818088-1000\Software\drpsu PUP.Optional.DriverPack HKLM\Software\Wow6432Node\drpsu PUP.Optional.Legacy HKLM\Software\Wow6432Node\PIP PUP.Optional.Legacy HKCU\Software\ParetoLogic PUP.Optional.Legacy HKLM\Software\Wow6432Node\ParetoLogic PUP.Optional.Legacy HKCU\Software\MediaGet PUP.Optional.Legacy HKCU\Software\Media Get LLC PUP.Optional.Legacy HKCU\Software\APN PIP PUP.Optional.Legacy HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA} PUP.Optional.Legacy HKLM\Software\Classes\CLSID\{278029E0-2347-4254-A65E-204AC55E2508} PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\AppID\{278029E0-2347-4254-A65E-204AC55E2508} PUP.Optional.Legacy HKLM\Software\Classes\AppID\{278029E0-2347-4254-A65E-204AC55E2508} PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF} PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474} PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF} PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000} PUP.Optional.Legacy HKLM\Software\Wow6432Node\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF} PUP.Optional.Legacy HKLM\Software\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF} PUP.Optional.Legacy HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\brsochi.ru PUP.Optional.Mail.Ru HKCU\Software\AppDataLow\Software\Mail.Ru Trojan.Agent.STM HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B8204CF3-1A6A-4C1F-A489-CF56F10FEE48} Trojan.Agent.STM HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SystemScript ***** [ Chromium (and derivatives) ] ***** PUP.Optional.Legacy Поиск и стартовая – Яндекс PUP.Optional.Legacy Поиск Яндексa PUP.Optional.Legacy Стартовая — Яндекс PUP.Optional.Legacy jedelkhanefmcnpappfhachbpnlhomai PUP.Optional.Mail.Ru jedelkhanefmcnpappfhachbpnlhomai PUP.Optional.Mail.Ru pchfckkccldkbclgdepkaonamkignanh PUP.Optional.TouchVPN Touch VPN ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** PUP.Optional.BrowseToSave SaveFrom.net helper PUP.Optional.Legacy Визуальные закладки PUP.Optional.Legacy Элементы Яндекса: Почта ***** [ Firefox URLs ] ***** Adware.RuKometa nova.rambler.ru PUP.Optional.Legacy nova.rambler.ru AdwCleaner[S00].txt - [6390 octets] - [03/12/2018 16:15:11] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ##########