Removal instructions for WinOptimizer

Content is republished with permission from Malwarebytes.

What is WinOptimizer?

The Malwarebytes research team has determined that WinOptimizer is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

This one also uses web push notifications:

How do I know if I am infected with WinOptimizer?

This is how the main screen of the system optimizer looks:

You will find these icons in your taskbar, your startmenu, and on your desktop:

and see these warnings during install:

and this type of screens during "operations":

You may see this entry in your list of installed programs:

How did WinOptimizer get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their website:

How do I remove WinOptimizer?

Our program Malwarebytes can detect and remove this potentially unwanted application.

Please download Malwarebytes for Windows to your desktop.
Double-click MBSetup.exe and follow the prompts to install the program.
When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
Click on the Get started button.
Click Scan to start a Threat Scan.
When the scan is finished click Quarantine to remove the found threats.
Reboot the system if prompted to complete the removal process.

Is there anything else I need to do to get rid of WinOptimizer?

No, Malwarebytes removes WinOptimizer completely.
If you have allowed the notifications you can read here how to disable them.

How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the WinOptimizer installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

You may see these entries in FRST logs:

(Ashampoo GmbH & Co. KG -> ) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\WO17.exe
C:\Users\{username}\AppData\Local\Ashampoo
C:\Users\Public\Desktop\Ashampoo WinOptimizer FREE.lnk
C:\ProgramData\Desktop\Ashampoo WinOptimizer FREE.lnk
C:\Users\Public\Desktop\Ashampoo Deals.url
C:\ProgramData\Desktop\Ashampoo Deals.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
C:\ProgramData\Ashampoo
C:\Program Files (x86)\Ashampoo

Ashampoo WinOptimizer FREE (HKLM-x32\...\{4209F371-8668-980C-19C9-F8698AB75135}_is1) (Version: 17.00.25 - Ashampoo GmbH & Co. KG)

Significant changes made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE
       Adds the file ash_inet2.dll"="11/19/2018 8:26 AM, 5568920 bytes, A
       Adds the file ash_libcurl.dll"="6/27/2018 9:58 AM, 1748480 bytes, A
       Adds the file defragwrapper.dll"="3/20/2020 8:59 AM, 241040 bytes, A
       Adds the file EXEDecrypt.exe"="3/20/2020 8:59 AM, 949136 bytes, A
       Adds the file exit.exe"="3/20/2020 8:59 AM, 1819536 bytes, A
       Adds the file gdiplus.dll"="3/20/2020 8:40 AM, 1646976 bytes, A
       Adds the file license-curl.txt"="1/3/2017 10:42 AM, 1065 bytes, A
       Adds the file license-DE.txt"="3/20/2020 9:35 AM, 5219 bytes, A
       Adds the file license-EN.txt"="3/20/2020 9:35 AM, 8733 bytes, A
       Adds the file product.xml"="3/20/2020 9:34 AM, 103 bytes, A
       Adds the file readme_da_dk.htm"="3/20/2020 9:35 AM, 1877 bytes, A
       Adds the file SetupDownloader.exe"="11/19/2018 8:26 AM, 46488 bytes, A
       Adds the file sqlite3.dll"="3/20/2020 8:44 AM, 848173 bytes, A
       Adds the file undelete.dll"="3/20/2020 8:44 AM, 242176 bytes, A
       Adds the file unins000.dat"="5/19/2020 8:46 AM, 309308 bytes, A
       Adds the file unins000.exe"="5/19/2020 8:46 AM, 1487192 bytes, A
       Adds the file unins000.msg"="5/19/2020 8:46 AM, 22605 bytes, A
       Adds the file WinOptimizerContextHandler64.dll"="3/20/2020 8:59 AM, 155024 bytes, A
       Adds the file WinOptimizerFW.exe"="3/20/2020 8:59 AM, 3517840 bytes, A
       Adds the file WO17.exe"="3/20/2020 8:59 AM, 9670032 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\data
       Adds the file BlankIcon.ico"="3/20/2020 8:40 AM, 1150 bytes, A
       Adds the file dc.ini"="3/20/2020 8:40 AM, 12867 bytes, A
       Adds the file DC-Files2.txt"="3/20/2020 8:40 AM, 378 bytes, A
       Adds the file DC-Files2_default.txt"="3/20/2020 8:40 AM, 376 bytes, A
       Adds the file DC-Folders2.txt"="3/20/2020 8:40 AM, 47 bytes, A
       Adds the file DC-Folders2_default.txt"="3/20/2020 8:40 AM, 47 bytes, A
       Adds the file hostsfile-backup"="3/20/2020 8:40 AM, 945 bytes, A
       Adds the file ratings_Plugins.dat"="3/20/2020 8:40 AM, 35085 bytes, A
       Adds the file SafeCookies.txt"="3/20/2020 8:40 AM, 132 bytes, A
       Adds the file services.dat"="3/20/2020 8:40 AM, 56026 bytes, A
       Adds the file services-fixed.ini"="3/20/2020 8:40 AM, 246 bytes, A
       Adds the file startup.dat"="3/20/2020 8:40 AM, 512157 bytes, A
       Adds the file TASK.xml"="3/20/2020 8:40 AM, 1007 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\flags
       Adds the file zh-tw.bmp"="7/19/2012 11:07 PM, 822 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\lang
       Adds the file ashinet3-ar-EG.ashLang"="10/15/2018 10:59 AM, 29540 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins
       Adds the file back.png"="3/20/2020 8:42 AM, 1008 bytes, A
       Adds the file back_Cleaner.png"="3/20/2020 8:42 AM, 1018 bytes, A
       Adds the file bgquitStoerer.bmp"="3/20/2020 8:42 AM, 631784 bytes, A
       Adds the file BIG_PleaseDoSomething.png"="3/20/2020 8:42 AM, 19100 bytes, A
       Adds the file DuplicateFinder_WARNING.bmp"="3/20/2020 8:42 AM, 480056 bytes, A
       Adds the file feedbackstar_empty.png"="3/20/2020 8:42 AM, 1296 bytes, A
       Adds the file feedbackstar_full.png"="3/20/2020 8:42 AM, 1305 bytes, A
       Adds the file fwexe_background.bmp"="3/20/2020 8:42 AM, 280856 bytes, A
       Adds the file GameBooster.bmp"="3/20/2020 8:42 AM, 248456 bytes, A
       Adds the file icon_smart_status_green.png"="3/20/2020 8:42 AM, 1012 bytes, A
       Adds the file icon_smart_status_red.png"="3/20/2020 8:42 AM, 1012 bytes, A
       Adds the file icon_smart_status_yellow.png"="3/20/2020 8:42 AM, 1012 bytes, A
       Adds the file LiveTuner_Action.bmp"="3/20/2020 8:43 AM, 194456 bytes, A
       Adds the file LiveTuner_Action_NAG.bmp"="3/20/2020 8:43 AM, 286256 bytes, A
       Adds the file LiveTuner_close.png"="3/20/2020 8:43 AM, 398 bytes, A
       Adds the file LiveTuner_close_hover.png"="3/20/2020 8:43 AM, 428 bytes, A
       Adds the file LiveTuner_Info.bmp"="3/20/2020 8:43 AM, 286256 bytes, A
       Adds the file nag_uninstall.png"="3/20/2020 8:44 AM, 24368 bytes, A
       Adds the file quit_buy_button_hover.bmp"="3/20/2020 8:44 AM, 29120 bytes, A
       Adds the file quit_buy_button_normal.bmp"="3/20/2020 8:44 AM, 29120 bytes, A
       Adds the file star_empty.png"="3/20/2020 8:44 AM, 1142 bytes, A
       Adds the file star_full.png"="3/20/2020 8:44 AM, 1140 bytes, A
       Adds the file star_half.png"="3/20/2020 8:44 AM, 1152 bytes, A
       Adds the file stripe.png"="3/20/2020 8:44 AM, 334121 bytes, A
       Adds the file StripeIndex.txt"="3/20/2020 8:44 AM, 7859 bytes, A
       Adds the file switch_disabled.png"="3/20/2020 8:44 AM, 1408 bytes, A
       Adds the file switch_off.png"="3/20/2020 8:44 AM, 1449 bytes, A
       Adds the file switch_on.png"="3/20/2020 8:44 AM, 1638 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\ash_inet\v3
       Adds the file channel.download.html"="10/25/2017 8:32 AM, 5475 bytes, A
       Adds the file channel.download.update.html"="10/25/2017 8:32 AM, 5793 bytes, A
       Adds the file channel.news.html"="6/18/2018 11:12 AM, 3499 bytes, A
       Adds the file dialog.error.html"="10/25/2017 8:32 AM, 9946 bytes, A
       Adds the file dialog.idle.html"="10/25/2017 8:32 AM, 4761 bytes, A
       Adds the file license.serial.html"="11/8/2018 11:05 AM, 14372 bytes, A
       Adds the file license.startup.offline.html"="10/25/2017 8:32 AM, 4402 bytes, A
       Adds the file license.startup.offline.vnr.html"="10/25/2017 8:32 AM, 2256 bytes, A
       Adds the file system.report.html"="5/4/2018 10:44 AM, 16015 bytes, A
       Adds the file system.service.html"="10/2/2018 4:44 PM, 34125 bytes, A
       Adds the file system.settings.html"="6/18/2018 11:12 AM, 5914 bytes, A
       Adds the file system.setupdownloader.html"="11/29/2017 12:10 PM, 9197 bytes, A
       Adds the file trialbar.html"="12/8/2017 11:21 AM, 13372 bytes, A
       Adds the file upgradebar.html"="6/18/2018 11:12 AM, 31880 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\ash_inet\v3\css
       Adds the file bant.shared.min.css"="10/4/2017 12:50 PM, 8299 bytes, A
       Adds the file dialog.error.min.css"="10/25/2017 8:32 AM, 2131 bytes, A
       Adds the file license.serial.min.css"="11/8/2018 11:05 AM, 2174 bytes, A
       Adds the file license.startup.offline.min.css"="10/25/2017 8:32 AM, 451 bytes, A
       Adds the file license.startup.offline.vnr.min.css"="10/25/2017 8:32 AM, 357 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\ash_inet\v3\img
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\ash_inet\v3\img\menu
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\ash_inet\v3\js
       Adds the file bant-v1.min.js"="10/25/2017 8:32 AM, 4862 bytes, A
       Adds the file bant-v2.min.js"="10/25/2017 8:32 AM, 5392 bytes, A
       Adds the file bant-v2b.min.js"="10/25/2017 8:32 AM, 5088 bytes, A
       Adds the file build.offline.min.js"="6/19/2017 8:27 AM, 111116 bytes, A
       Adds the file dialog.error.min.js"="10/25/2017 8:32 AM, 1258 bytes, A
       Adds the file license.serial.min.js"="11/8/2018 11:05 AM, 6341 bytes, A
       Adds the file license.startup.offline.min.js"="10/25/2017 8:32 AM, 789 bytes, A
       Adds the file license.startup.offline.vnr.min.js"="10/25/2017 8:32 AM, 396 bytes, A
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\default
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\default\Energy
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\default\Startscreen2
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\default\startseite
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\light
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\light\Energy
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\light\Startscreen2
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\light\startseite
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\skins\LT_Icons
    Adds the folder C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\Translation
    Adds the folder C:\ProgramData\Ashampoo
       Adds the file ico_ashampoo_deals.ico"="1/9/2017 1:36 PM, 420246 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo WinOptimizer FREE
       Adds the file Ashampoo WinOptimizer FREE  .lnk"="5/19/2020 8:46 AM, 1264 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Ashampoo\boxshots
       Adds the file 5806.png"="5/19/2020 8:47 AM, 49430 bytes, A
    In the existing folder C:\Users\Public\Desktop
       Adds the file Ashampoo Deals.url"="5/19/2020 8:46 AM, 221 bytes, A
       Adds the file Ashampoo WinOptimizer FREE.lnk"="5/19/2020 8:46 AM, 1240 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer 17\contextmenus]
       "CONTEXTMENU_DECRYPT"="REG_SZ", "Decrypt with Ashampoo WinOptimizer"
       "CONTEXTMENU_DEFRAG"="REG_SZ", "Defragment with Ashampoo WinOptimizer"
       "CONTEXTMENU_DL"="REG_SZ", "Analyze the storage usage with Ashampoo WinOptimizer"
       "CONTEXTMENU_ENCRYPT"="REG_SZ", "Encrypt with Ashampoo WinOptimizer"
       "CONTEXTMENU_JOIN"="REG_SZ", "Join with Ashampoo WinOptimizer"
       "CONTEXTMENU_RECYCLE_FW"="REG_SZ", "Destroy content with Ashampoo WinOptimizer"
       "CONTEXTMENU_RECYCLE_UNDELETE"="REG_SZ", "Search for deleted files with Ashampoo WinOptimizer"
       "CONTEXTMENU_SHREDDER"="REG_SZ", "Destroy with Ashampoo WinOptimizer"
       "CONTEXTMENU_SPLIT"="REG_SZ", "Split with Ashampoo WinOptimizer"
       "EXE"="REG_SZ", "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\WO17.exe"
       "EXE_FW"="REG_SZ", "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\WinOptimizerFW.exe"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer 17\Options]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer 17\Stats]
       "DBEntries_scanned"="REG_QWORD, ....
       "Files_scanned"="REG_QWORD, ....
       "Folders_scanned"="REG_QWORD, c...
       "Registry_KeysScanned"="REG_QWORD, ....
       "Registry_ValuesScanned"="REG_QWORD, ....
       "WO_Starts"="REG_QWORD, ....
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer FREE]
       "AppDir"="REG_SZ", "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet]
       "Edition"="REG_SZ", "eid=30303"
       "InfoChannelID_0"="REG_SZ", "-updates-"
       "InfoChannelID_1"="REG_SZ", "ashnews"
       "InfoChannelID_2"="REG_SZ", "-upgrades-"
       "InfoChannelID_3"="REG_SZ", "-cross-"
       "Product"="REG_SZ", "5806"
       "SharewareType"="REG_DWORD", 1
       "ShowTrialAlwaysIfUnregistered"="REG_DWORD", 1
       "UpdateType"="REG_DWORD", 2
       "UpgradeType"="REG_DWORD", 3
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet\ashnews]
       "Settings"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet\-cross-]
       "Settings"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet\-upgrades-]
       "Settings"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Ashampoo\Ashampoo WinOptimizer FREE\Options]
       "ForceLanguage_LCID"="REG_SZ", "en-us"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\{4C2351D7-7CAF-4D5D-9CB8-815019A5ADB3}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{A74A65B0-DDD3-4399-8ED9-B9215BCD81C8}]
       "(Default)"="REG_SZ", "WinOptimizerContextHandler"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\WinOptimizerContextHandler.DLL]
       "AppID"="REG_SZ", "{A74A65B0-DDD3-4399-8ED9-B9215BCD81C8}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{45495078-B36D-4865-A67B-45CD8742AA1B}]
       "(Default)"="REG_SZ", "Extension Class"
       "AppID"="REG_SZ", "{A74A65B0-DDD3-4399-8ED9-B9215BCD81C8}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4C2351D7-7CAF-4D5D-9CB8-815019A5ADB3}]
       "(Default)"="REG_SZ", "WinOptimizerContextHandler"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\WO_FileWiper]
       "(Default)"="REG_SZ", "Destroy content with Ashampoo WinOptimizer"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FD165B0C-68F1-48EE-93B3-163F8595E80F}]
       "(Default)"="REG_SZ", "IExtension"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{87B9C42D-3317-4109-B7FC-802675ABC5DA}\1.0]
       "(Default)"="REG_SZ", "WinOptimizerContextHandler 1.0 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Ashampoo\Ashampoo WinOptimizer FREE]
       "AppDir"="REG_SZ", "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE"
       "UiSurvey"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet]
       "Edition"="REG_SZ", "eid=30303"
       "InfoChannelID_0"="REG_SZ", "-updates-"
       "InfoChannelID_1"="REG_SZ", "ashnews"
       "InfoChannelID_2"="REG_SZ", "-upgrades-"
       "InfoChannelID_3"="REG_SZ", "-cross-"
       "Product"="REG_SZ", "5806"
       "regKey"="REG_SZ", "AWFRA3-77B7F7-F75A6B"
       "SharewareType"="REG_DWORD", 1
       "ShowTrialAlwaysIfUnregistered"="REG_DWORD", 1
       "starts"="REG_DWORD", 2
       "UpdateType"="REG_DWORD", 2
       "UpgradeName"="REG_SZ", "WinOptimizer 18"
       "UpgradeType"="REG_DWORD", 3
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet\ashnews]
       "Settings"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet\-cross-]
       "Settings"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Ashampoo\Ashampoo WinOptimizer FREE\ash_inet\-upgrades-]
       "Settings"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Ashampoo\Ashampoo WinOptimizer FREE\Options]
       "ForceLanguage_LCID"="REG_SZ", "en-us"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4209F371-8668-980C-19C9-F8698AB75135}_is1]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\WO17.exe"
       "DisplayName"="REG_SZ", "Ashampoo WinOptimizer FREE"
       "DisplayVersion"="REG_SZ", "17.00.25"
       "EstimatedSize"="REG_DWORD", 0
       "HelpLink"="REG_SZ", "https://www.ashampoo.com/support"
       "Inno Setup: App Path"="REG_SZ", "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE"
       "Inno Setup: Deselected Tasks"="REG_SZ", ""
       "Inno Setup: Icon Group"="REG_SZ", "Ashampoo\Ashampoo WinOptimizer FREE"
       "Inno Setup: Language"="REG_SZ", "en_us"
       "Inno Setup: Selected Tasks"="REG_SZ", "desktopicon"
       "Inno Setup: Setup Version"="REG_SZ", "5.6.1 (u)"
       "Inno Setup: User"="REG_SZ", "{username}"
       "InstallDate"="REG_SZ", "20200519"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\"
       "MajorVersion"="REG_DWORD", 17
       "MinorVersion"="REG_DWORD", 0
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "Ashampoo GmbH & Co. KG"
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer FREE\unins000.exe""
       "URLInfoAbout"="REG_SZ", "https://www.ashampoo.com"
       "URLUpdateInfo"="REG_SZ", "https://www.ashampoo.com"
       "VersionMajor"="REG_DWORD", 17
       "VersionMinor"="REG_DWORD", 0

Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/19/20
Scan Time: 9:01 AM
Log File: 8ad9702a-999e-11ea-8d56-00ffdcc6fdfc.json

-Software Information-
Version: 4.1.0.56
Components Version: 1.0.920
Update Package Version: 1.0.24086
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 232886
Threats Detected: 19
Threats Quarantined: 19
Time Elapsed: 2 min, 16 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 1
PUP.Optional.WinOptimizer, C:\PROGRAM FILES (X86)\ASHAMPOO\ASHAMPOO WINOPTIMIZER FREE\WINOPTIMIZERCONTEXTHANDLER64.DLL, Quarantined, 3517, 821494, , , , 

Registry Key: 16
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\WinOptimizerContextHandler.DLL, Quarantined, 3517, 821497, 1.0.24086, , ame, 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\WinOptimizerContextHandler.DLL, Quarantined, 3517, 821497, 1.0.24086, , ame, 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\CLSID\{45495078-B36D-4865-A67B-45CD8742AA1B}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\CLSID\{45495078-B36D-4865-A67B-45CD8742AA1B}\InprocServer32, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\WinOptimizerContextHandler.Extension.1, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\TYPELIB\{87B9C42D-3317-4109-B7FC-802675ABC5DA}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\INTERFACE\{FD165B0C-68F1-48EE-93B3-163F8595E80F}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FD165B0C-68F1-48EE-93B3-163F8595E80F}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FD165B0C-68F1-48EE-93B3-163F8595E80F}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{87B9C42D-3317-4109-B7FC-802675ABC5DA}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{87B9C42D-3317-4109-B7FC-802675ABC5DA}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\CLSID\{4C2351D7-7CAF-4D5D-9CB8-815019A5ADB3}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\*\SHELLEX\CONTEXTMENUHANDLERS\{4C2351D7-7CAF-4D5D-9CB8-815019A5ADB3}, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\CLSID\{4C2351D7-7CAF-4D5D-9CB8-815019A5ADB3}\InprocServer32, Quarantined, 3517, 821494, , , , 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\WinOptimizerContextHandler.Extension, Quarantined, 3517, 821494, 1.0.24086, , ame, 
PUP.Optional.WinOptimizer, HKLM\SOFTWARE\CLASSES\APPID\WinOptimizerContextHandler.DLL, Quarantined, 3517, 821497, 1.0.24086, , ame, 

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 2
PUP.Optional.WinOptimizer, C:\USERS\PUBLIC\DESKTOP\Ashampoo Deals.url, Quarantined, 3517, 821500, 1.0.24086, , ame, 
PUP.Optional.WinOptimizer, C:\PROGRAM FILES (X86)\ASHAMPOO\ASHAMPOO WINOPTIMIZER FREE\WINOPTIMIZERCONTEXTHANDLER64.DLL, Quarantined, 3517, 821494, , , , 

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 19 May 2020 - 03:02 AM

Advertisements

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us