Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

How to remove Window Quick Manager

- - - - -
Started by Metallica , Sep 15 2016 10:14 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 15 September 2016 - 10:14 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is Window Quick Manager?

The Malwarebytes research team has determined that Window Quick Manager is adware. These adware applications display advertisements not originating from the sites you are browsing.
This one belongs to the WinRange family.

How do I know if my computer is affected by Window Quick Manager?

You may see this entry in your list of installed programs:

warning4.png

How did Window Quick Manager get on my computer?

Adware applications use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Window Quick Manager?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to:
    Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • If an update is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Window Quick Manager?
  • No, Malwarebytes' Anti-Malware removes Window Quick Manager completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Window Quick Manager adware. It would have warned you before the adware could install itself, giving you a chance to stop it before it became too late.


protection1.png


The web protection module also blocks some of the connections the installer tries to make:
 

protection2.png


Technical details for experts

Possible signs in FRST logs:


 (QG Inc.) C:\Program Files (x86)\winmake\WinQSync.exe
 (QG Inc.) C:\Program Files (x86)\winmake\WinQSync_.exe
 (QG Inc.) C:\Program Files (x86)\winmake\WinMake_.exe
 (QG Inc.) C:\Program Files (x86)\winmake\WinMake.exe
 R2 WinQSvc; C:\Program Files (x86)\winmake\WinQSync.exe [202240 2016-09-13] (QG Inc.) [File not signed]
 R2 WinQSvc2; C:\Program Files (x86)\winmake\WinQSync_.exe [128512 2016-09-13] (QG Inc.) [File not signed]
 C:\Users\{username}\AppData\Local\CEF
 C:\Program Files (x86)\winmake

Window Quick Manager (HKLM-x32\...\Window Quick Manager) (Version: 1.71 - QG Inc.)
() C:\Program Files (x86)\WinMake\libcef.dll
() C:\Program Files (x86)\WinMake\log4cplusU.dll
Alterations made by the installer:
 
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\winmake
       Adds the file cef.pak"="6/20/2016 8:37 AM, 2749972 bytes, A
       Adds the file cef_100_percent.pak"="6/20/2016 8:37 AM, 146067 bytes, A
       Adds the file cef_200_percent.pak"="6/20/2016 8:37 AM, 235262 bytes, A
       Adds the file cef_extensions.pak"="6/20/2016 8:37 AM, 4409164 bytes, A
       Adds the file d3dcompiler_43.dll"="6/20/2016 8:37 AM, 2106216 bytes, A
       Adds the file d3dcompiler_47.dll"="6/20/2016 8:37 AM, 3709120 bytes, A
       Adds the file devtools_resources.pak"="6/20/2016 8:37 AM, 4740603 bytes, A
       Adds the file icudtl.dat"="6/20/2016 8:37 AM, 10127152 bytes, A
       Adds the file libcef.dll"="6/20/2016 8:37 AM, 52043776 bytes, A
       Adds the file libcurl.dll"="10/27/2014 6:11 PM, 1358336 bytes, A
       Adds the file libEGL.dll"="6/20/2016 8:37 AM, 80384 bytes, A
       Adds the file libGLESv2.dll"="6/20/2016 8:37 AM, 1734656 bytes, A
       Adds the file log4cplusU.dll"="1/14/2015 11:55 AM, 386560 bytes, A
       Adds the file msvcp120.dll"="11/24/2014 9:23 AM, 455328 bytes, A
       Adds the file msvcr120.dll"="11/24/2014 9:23 AM, 970912 bytes, A
       Adds the file natives_blob.bin"="6/20/2016 8:37 AM, 415490 bytes, A
       Adds the file release.log"="9/15/2016 5:38 PM, 0 bytes, A
       Adds the file snapshot_blob.bin"="6/20/2016 8:37 AM, 517972 bytes, A
       Adds the file Uninstall.exe"="9/15/2016 5:38 PM, 189936 bytes, A
       Adds the file widevinecdmadapter.dll"="6/20/2016 8:37 AM, 212992 bytes, A
       Adds the file WinMake.exe"="9/13/2016 2:36 PM, 711680 bytes, A
       Adds the file WinMake_.exe"="9/13/2016 2:32 PM, 711680 bytes, A
       Adds the file WinQSync.exe"="9/13/2016 2:27 PM, 202240 bytes, A
       Adds the file WinQSync_.exe"="9/13/2016 2:30 PM, 128512 bytes, A
       Adds the file winqtask.exe"="9/13/2016 2:19 PM, 1890304 bytes, A
       Adds the file winqtask_.exe"="9/13/2016 2:24 PM, 1822208 bytes, A
       Adds the file wow_helper.exe"="5/13/2016 9:59 AM, 67072 bytes, A
    Adds the folder C:\Program Files (x86)\winmake\cache
       Adds the file Cookies"="9/15/2016 5:38 PM, 7168 bytes, A
       Adds the file Cookies-journal"="9/15/2016 5:38 PM, 0 bytes, A
       Adds the file data_0"="9/15/2016 5:38 PM, 45056 bytes, A
       Adds the file f_00001e"="9/15/2016 5:39 PM, 100173 bytes, A
       Adds the file index"="9/15/2016 5:38 PM, 262512 bytes, A
       Adds the file Visited Links"="9/15/2016 5:39 PM, 131072 bytes, A
    Adds the folder C:\Program Files (x86)\winmake\cache\GPUCache
    Adds the folder C:\Program Files (x86)\winmake\cache1
    Adds the folder C:\Program Files (x86)\winmake\cache1\GPUCache
    Adds the folder C:\Program Files (x86)\winmake\locales
    Adds the folder C:\Program Files (x86)\winmake\plugins
       Adds the file pepflashplayer.dll"="6/30/2016 3:25 AM, 31555776 bytes, A
    Adds the folder C:\Program Files (x86)\winmake\Update
    Adds the folder C:\Users\{username}\AppData\Local\CEF\User Data\Dictionaries

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\okwinmake]
       "ID"="REG_SZ", "0CF65EE2-079F-4EF4-915F-2688D5816EA4"
       "InstallAMID"="REG_SZ", ""
       "InstallSID"="REG_SZ", ""
       "Version"="REG_SZ", "171"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Window Quick Manager]
       "DisplayName"="REG_SZ", "Window Quick Manager"
       "DisplayVersion"="REG_SZ", "1.71"
       "EstimatedSize"="REG_DWORD", 94776
       "InstallDate"="REG_SZ", "20150915"
       "Publisher"="REG_SZ", "QG Inc."
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\winmake\uninstall.exe""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting]
       "DontShowUI"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\okwinmake]
       "ID"="REG_SZ", "0CF65EE2-079F-4EF4-915F-2688D5816EA4"
       "InstallAMID"="REG_SZ", "0"
       "InstallDate"="REG_SZ", "15.09.2016 17:38"
       "InstallSID"="REG_SZ", ""
       "restart1"="REG_SZ", "1"
       "restart2"="REG_SZ", "1"
       "Success"="REG_SZ", "1"
       "Version"="REG_SZ", "171"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinQSvc]
       "DisplayName"="REG_SZ", "Window Quick Manager"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\winmake\WinQSync.exe"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
       "WOW64"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinQSvc2]
       "DisplayName"="REG_SZ", "Window Quick Manager2"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\winmake\WinQSync_.exe"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
       "WOW64"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\winmnt]
       "Success"="REG_SZ", "1"
Malwarebytes Anti-Malware log:
 
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 9/15/2016
Scan Time: 5:44 PM
Logfile: mbamWindowQuickManager.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.09.15.08
Rootkit Database: v2016.08.15.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 321200
Time Elapsed: 10 min, 32 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 6
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinMake.exe, 2724, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898]
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinMake.exe, 3488, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898]
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinMake_.exe, 2596, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898]
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinMake_.exe, 3216, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898]
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinQSync.exe, 3096, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898]
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinQSync_.exe, 3928, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898]

Modules: 21
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcef.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcef.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcef.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcef.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcurl.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcurl.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcurl.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcurl.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcurl.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\log4cplusU.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\log4cplusU.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\log4cplusU.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\log4cplusU.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcp120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcp120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcp120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcp120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcr120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcr120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcr120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcr120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 

Registry Keys: 5
PUP.Optional.WinMake, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Window Quick Manager, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinQSvc, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinQSvc2, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, HKLM\SOFTWARE\OKWINMAKE, Quarantined, [6f05462c8317c86eb1d148a710f4c838], 
PUP.Optional.WinMake, HKLM\SOFTWARE\WOW6432NODE\OKWINMAKE, Quarantined, [c4b011613d5deb4b5f23bc330004db25], 

Registry Values: 2
PUP.Optional.WinMake, HKLM\SOFTWARE\OKWINMAKE|Version, 171, Quarantined, [6f05462c8317c86eb1d148a710f4c838]
PUP.Optional.WinMake, HKLM\SOFTWARE\WOW6432NODE\OKWINMAKE|Version, 171, Quarantined, [c4b011613d5deb4b5f23bc330004db25]

Registry Data: 0
(No malicious items detected)

Folders: 8
PUP.Optional.WinMake, C:\Program Files (x86)\winmake, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\GPUCache, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\GPUCache, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\plugins, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\Update, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 

Files: 114
PUP.Optional.WinMake, C:\Users\{username}\Desktop\install.exe, Quarantined, [4d27b6bc97039a9c4639608fcd3711ef], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcef.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libGLESv2.dll, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cef.pak, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cef_100_percent.pak, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cef_200_percent.pak, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cef_extensions.pak, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\d3dcompiler_43.dll, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\d3dcompiler_47.dll, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\devtools_resources.pak, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\icudtl.dat, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libcurl.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\libEGL.dll, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\log4cplusU.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcp120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\msvcr120.dll, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\natives_blob.bin, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\release.log, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\snapshot_blob.bin, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\Uninstall.exe, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\widevinecdmadapter.dll, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinMake.exe, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinMake_.exe, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinQSync.exe, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\WinQSync_.exe, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\winqtask.exe, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\winqtask_.exe, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\wow_helper.exe, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\Cookies, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\Cookies-journal, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\data_0, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\data_1, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\data_2, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\data_3, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\f_000001, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\f_000002, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\f_000003, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\index, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\Visited Links, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\GPUCache\data_0, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\GPUCache\data_1, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\GPUCache\data_2, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\GPUCache\data_3, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache\GPUCache\index, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\Cookies, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\Cookies-journal, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\data_0, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\data_1, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\data_2, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\data_3, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\f_000001, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\f_000002, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\f_000003, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\index, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\Visited Links, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\GPUCache\data_0, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\GPUCache\data_1, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\GPUCache\data_2, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\GPUCache\data_3, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\cache1\GPUCache\index, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\he.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\am.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ar.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\bg.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\bn.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ca.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\cs.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\da.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\de.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\el.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\en-GB.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\en-US.pak, Delete-on-Reboot, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\es-419.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\es.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\et.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\fa.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\fi.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\fil.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\fr.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\gu.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\hi.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\hr.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\hu.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\id.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\it.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ja.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\kn.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ko.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\lt.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\lv.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ml.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\mr.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ms.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\nb.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\nl.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\pl.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\pt-BR.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\pt-PT.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ro.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ru.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\sk.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\sl.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\sr.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\sv.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\sw.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\ta.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\te.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\th.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\tr.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\uk.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\vi.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\zh-CN.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\locales\zh-TW.pak, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 
PUP.Optional.WinMake, C:\Program Files (x86)\winmake\plugins\pepflashplayer.dll, Quarantined, [185c6210bae0c86e2d53ae410ef66898], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.