# AdwCleaner 7.0.8.0 - Logfile created on Fri Apr 13 04:35:52 2018 # Updated on 2018/08/02 by Malwarebytes # Running on Windows 7 Home Premium (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** Deleted: C:\Program Files (x86)\Inbox.com Deleted: C:\Users\Norma\AppData\Roaming\ShopAtHome Deleted: C:\Program Files (x86)\comcasttb Deleted: C:\Users\Norma\AppData\LocalLow\comcasttb Deleted: C:\Users\Norma\AppData\LocalLow\HPAppData Deleted: C:\Windows\System32\config\systemprofile\AppData\LocalLow\Toolbar4 Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Toolbar4 Deleted: C:\Users\Norma\AppData\LocalLow\Toolbar4 Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec Deleted: C:\Program Files (x86)\myfree codec Deleted: C:\Users\Norma\AppData\Roaming\Yahoo!\Companion Deleted: C:\Users\Norma\AppData\Local\GetFormsOnlineTooltab Deleted: C:\ProgramData\Ask Deleted: C:\ProgramData\Application Data\Ask Deleted: C:\Users\All Users\Ask Deleted: C:\Program Files (x86)\MyWebSearch Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RebateInformer Deleted: C:\Users\Norma\AppData\LocalLow\RebateInformer Deleted: C:\ProgramData\apn Deleted: C:\ProgramData\Application Data\apn Deleted: C:\Users\All Users\apn Deleted: C:\Program Files (x86)\MyWebSearch Deleted: C:\Users\Norma\AppData\Local\EasyPDFCombineTooltab Deleted: C:\Users\Norma\AppData\Local\GetFormsOnlineTooltab ***** [ Files ] ***** No malicious files deleted. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks deleted. ***** [ Registry ] ***** Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\amazonbrowserapp.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\analytics.app.amazonbrowserapp.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akz.imgfarm.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\amazonbrowserapp.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\analytics.app.amazonbrowserapp.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\dotomi.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\hp.myway.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\imgfarm.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\izito.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\shopathome.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\sjc-usadmm.dotomi.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\staticimgfarm.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ttdetect.staticimgfarm.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.izito.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.shopathome.com Deleted: [Key] - HKLM\SOFTWARE\ImInstaller Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\ImInstaller Deleted: [Key] - HKCU\Software\ImInstaller Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Genius Professional Edition_is1 Deleted: [Key] - HKLM\SOFTWARE\Myfree Codec Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\Myfree Codec Deleted: [Key] - HKCU\Software\Myfree Codec Deleted: [Key] - HKLM\SOFTWARE\{F2E9660B-98AF-42c0-8258-9CDDF07BF95D} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6} Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\APN PIP Deleted: [Key] - HKCU\Software\APN PIP Deleted: [Key] - HKLM\SOFTWARE\CToolbar Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\CToolbar Deleted: [Key] - HKCU\Software\CToolbar Deleted: [Key] - HKLM\SOFTWARE\FocusInteractive Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\AppDataLow\Software\Freecause Deleted: [Key] - HKCU\Software\AppDataLow\Software\Freecause Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\YahooPartnerToolbar Deleted: [Key] - HKCU\Software\YahooPartnerToolbar Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShopAtHome.com Helper Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShopAtHome.com Helper Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\ShopAtHome.com Deleted: [Key] - HKCU\Software\ShopAtHome.com Deleted: [Key] - HKLM\SOFTWARE\Yahoo\Companion Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\Yahoo\Companion Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\AppDataLow\Software\Yahoo\Companion Deleted: [Key] - HKCU\Software\Yahoo\Companion Deleted: [Key] - HKCU\Software\AppDataLow\Software\Yahoo\Companion Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\Yahoo\YFriendsBar Deleted: [Key] - HKCU\Software\Yahoo\YFriendsBar Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\EasyPDFCombine Deleted: [Key] - HKCU\Software\EasyPDFCombine Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\GetFormsOnline Deleted: [Key] - HKCU\Software\GetFormsOnline Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8} Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{0214A12B-C5A3-437F-A6F3-068ABCD8C85E} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{0214A12B-C5A3-437F-A6F3-068ABCD8C85E} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{08635077-8829-49E2-B338-C968817EB460} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1791C1B5-FFD0-4D4B-ABCD-7A7DF6EAA89C} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{20A3F109-F7C1-47B4-8098-8E654B264B1D} Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\{49BC4DD1-0E69-4611-9164-0009538C5E46} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49BC4DD1-0E69-4611-9164-0009538C5E46} Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{4A11A6BD-7880-49BD-92D4-6F09D0BD3250} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7} Deleted: [Key] - HKLM\SOFTWARE\Classes\TypeLib\{68DE31F7-43FF-4EE2-B88B-10665016970D} Deleted: [Key] - HKCU\Software\Classes\CLSID\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{8C7478AB-3155-463E-936F-55F91F0F10D0} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{96DD9437-5D20-4EFB-BF52-A4A605A4E0AA} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{96DD9437-5D20-4EFB-BF52-A4A605A4E0AA} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179} Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{9E1B65EE-A131-42B4-94CA-847505E2F611} Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48DD-9B6D-7A13A3E42127} Deleted: [Key] - HKCU\Software\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40FD-8DAE-FF14757F60C7} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} Deleted: [Key] - HKCU\Software\Classes\TypeLib\{B944FF5E-EC87-4E1E-8C49-2FF3BC573997} Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\Classes\TypeLib\{B944FF5E-EC87-4E1E-8C49-2FF3BC573997} Deleted: [Key] - HKCU\Software\Classes\CLSID\{08613A51-6E3E-43CC-9ECF-DD58B5837341} Deleted: [Key] - HKCU\Software\Classes\CLSID\{153EDC41-A2CC-4BEB-9EC8-008242389E50} Deleted: [Key] - HKCU\Software\Classes\CLSID\{188028B8-D91D-4BE2-BABA-68E32BDE4420} Deleted: [Key] - HKCU\Software\Classes\CLSID\{28E74F15-18C2-465E-B545-6CC738121C68} Deleted: [Key] - HKCU\Software\Classes\CLSID\{2BF6042B-B9B1-46D9-A3F8-9C987FADD4C6} Deleted: [Key] - HKCU\Software\Classes\CLSID\{40A222E2-93B1-45F9-9B07-0D1160A31A6C} Deleted: [Key] - HKCU\Software\Classes\CLSID\{6325A84C-E746-4007-A9C5-E4C1A50ED61F} Deleted: [Key] - HKCU\Software\Classes\CLSID\{9BCA87A0-5B8F-4500-A5AF-EA1279714FDF} Deleted: [Key] - HKCU\Software\Classes\CLSID\{BB17DE65-B548-48C2-AC73-1FD1996C7261} Deleted: [Key] - HKCU\Software\Classes\CLSID\{C77D3EEF-FDCA-4D37-B0D2-5FF650E07825} Deleted: [Key] - HKCU\Software\Classes\CLSID\{EA70EB31-CBAD-4862-AFDA-DCFCC32722ED} Deleted: [Key] - HKCU\Software\Classes\CLSID\{EC9100F8-5918-4F1B-9CC1-4D34A64E0FE0} Deleted: [Key] - HKCU\Software\Classes\CLSID\{F1A1ABE3-F454-4DD9-B520-01F2EEC5F0DD} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ECCA77AD-EF06-4650-B6FC-7A0E90687EB4} Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36} Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD6ECB00-7C4A-4F97-B425-44117F2A7AAE} Deleted: [Key] - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD6ECB00-7C4A-4F97-B425-44117F2A7AAE} Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3038A20B9089EC34D8F74220191FAB30 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5 Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5 Deleted: [Value] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\Microsoft\Windows\CurrentVersion\Run|ShopAtHomeUpdater Deleted: [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run|ShopAtHomeUpdater Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL Deleted: [Key] - HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\rebinfo Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|FunWebProducts Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform|FunWebProducts Deleted: [Key] - HKCU\Software\Classes\AppID\ShopAtHomeHelper.EXE Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext|DisableAddonLoadTimePerformanceNotifications Deleted: [Key] - HKCU\SOFTWARE\Classes\Software\AppDataLow\Software\Amazon\Amazon1ButtonApp Deleted: [Key] - HKLM\SOFTWARE\Classes\AppID\Amazon1ButtonBrowserHelper.dll Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\syncios.en.softonic.com Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\AppDataLow\Software\Conduit Deleted: [Key] - HKCU\Software\AppDataLow\Software\Conduit Deleted: [Key] - HKLM\SOFTWARE\Fun Web Products Deleted: [Key] - HKLM\SOFTWARE\MyWebSearch Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\MyWebSearch Deleted: [Key] - HKU\S-1-5-21-2524362192-1030358035-3349164945-1001\Software\AppDataLow\Software\MyWebSearch Deleted: [Key] - HKCU\Software\MyWebSearch Deleted: [Key] - HKCU\Software\AppDataLow\Software\MyWebSearch Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} Deleted: [Key] - HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** Plugin deleted: Amazon Assistant for Chrome - SearchProvider deleted: Ask - websearch.ask.com SearchProvider deleted: Ask Search - search.ask.com SearchProvider deleted: Ask Search - search.ask.com ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [17828 B] - [2018/4/13 4:34:12] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########