# AdwCleaner v5.119 - Logfile created 13/06/2016 at 16:58:15 # Updated 30/05/2016 by Xplode # Database : 2016-06-12.1 [Server] # Operating system : Windows 8.1 Pro (X64) # Username : pc user - AIDRIAN # Running from : C:\Users\pc user\Downloads\adwcleaner_5.119.exe # Option : Scan # Support : http://toolslib.net/forum ***** [ Services ] ***** Service Found : QMUdisk Service Found : TS888x64 Service Found : Program Manager ***** [ Folders ] ***** Folder Found : C:\ProgramData\apn Folder Found : C:\ProgramData\tencent Folder Found : C:\ProgramData\Tmp0x0x Folder Found : C:\ProgramData\TXQMPC Folder Found : C:\ProgramData\ytd video downloader Folder Found : C:\ProgramData\13438947756880973375 Folder Found : C:\ProgramData\{0b4c8161-0ef9-03b1-0b4c-c81610ef0584} Folder Found : C:\ProgramData\Application Data\apn Folder Found : C:\ProgramData\Application Data\tencent Folder Found : C:\ProgramData\Application Data\Tmp0x0x Folder Found : C:\ProgramData\Application Data\TXQMPC Folder Found : C:\ProgramData\Application Data\ytd video downloader Folder Found : C:\ProgramData\Application Data\13438947756880973375 Folder Found : C:\ProgramData\Application Data\{0b4c8161-0ef9-03b1-0b4c-c81610ef0584} Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ÃÀͼä¯ÀÀ Folder Found : C:\Program Files (x86)\Application Updater Folder Found : C:\Program Files (x86)\GreenTree Applications Folder Found : C:\Program Files (x86)\Window Update Folder Found : C:\Program Files (x86)\yessearches-bnd Folder Found : C:\Program Files (x86)\YTD Toolbar Folder Found : C:\Program Files (x86)\Winsere Folder Found : C:\Program Files (x86)\WinTaske Folder Found : C:\Program Files (x86)\QQBrowser Folder Found : C:\Program Files (x86)\Yahoo!\yset Folder Found : C:\Program Files (x86)\Common Files\ProgramManager Folder Found : C:\Program Files (x86)\Common Files\tencent Folder Found : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Application Updater Folder Found : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\tencent Folder Found : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil Folder Found : C:\Users\pc user\AppData\Local\MalwareProtectionLive Folder Found : C:\Users\pc user\AppData\Local\YSearchUtil Folder Found : C:\Users\pc user\AppData\LocalLow\ytd Folder Found : C:\Users\pc user\AppData\Roaming\BrowserExtensions Folder Found : C:\Users\pc user\AppData\Roaming\eCyber Folder Found : C:\Users\pc user\AppData\Roaming\OpenCandy Folder Found : C:\Users\pc user\AppData\Roaming\RPEng Folder Found : C:\Users\pc user\AppData\Roaming\Settings Manager Folder Found : C:\Users\pc user\AppData\Roaming\SSN Folder Found : C:\Users\pc user\AppData\Roaming\tencent Folder Found : C:\Users\pc user\AppData\Roaming\Update Manager Folder Found : C:\Users\pc user\AppData\Roaming\WinZiper Folder Found : C:\Users\pc user\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence Folder Found : C:\Users\pc user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 Folder Found : C:\Users\pc user\Desktop\tencent Folder Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\extensions\staged\{23BA1545-A651-4EDB-9568-45BE0CBAE475} Folder Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\deskCutv2@gmail.com Folder Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\{1b80ae74-4912-44fc-9f27-30f9252a5ad7} Folder Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\{24d26487-6274-48b1-b500-22f24884f971} Folder Found : C:\Users\pc user\AppData\Roaming\Opera Software\Opera Stable\Extensions\ccgmfdmilggeicjlilfkdccihkkdiagj Folder Found : C:\Program Files\Common Files\tencent Folder Found : C:\Users\pc user\AppData\Local\VirtualStore\Program Files (x86)\tencent Folder Found : C:\Users\Public\Documents\dmp ***** [ Files ] ***** File Found : C:\omniboxes.xml File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk File Found : C:\Windows\SysWOW64\lavasofttcpservice.dll File Found : C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini File Found : C:\Windows\SysWOW64\drivers\TS888x64.sys File Found : C:\Users\pc user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ÃÀͼä¯ÀÀ.lnk File Found : C:\Users\pc user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Malware Protection Live.lnk File Found : C:\Users\pc user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aliexpress .lnk File Found : C:\Users\pc user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Booking .lnk File Found : C:\Users\pc user\Desktop\Booking.URL File Found : C:\Users\pc user\Desktop\Aliexpress.URL File Found : C:\Users\Guest\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ÃÀͼä¯ÀÀ.lnk File Found : C:\Users\Guest\Desktop\Facebook.lnk File Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\searchplugins\yahoo_ff.xml File Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\searchplugins\search-provided-by-yahoo.xml File Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\searchplugins\default.xml File Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\invalidprefs.js File Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo_ff.xml File Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\default.xml File Found : C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo-lavasoft.xml File Found : C:\Users\pc user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage File Found : C:\Users\pc user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_foxi69.tlscdn.com_0.localstorage-journal File Found : C:\Users\pc user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage File Found : C:\Users\pc user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal File Found : C:\Users\pc user\AppData\Roaming\Opera Software\Opera Stable\Local Storage\chrome-extension_ccgmfdmilggeicjlilfkdccihkkdiagj_0.localstorage File Found : C:\Windows\SysNative\LavasoftTcpService64.dll File Found : C:\Windows\SysNative\LavasoftTcpServiceOff.ini File Found : C:\Windows\SysNative\drivers\TFsFltX64.sys ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled tasks ] ***** Task Found : updateTask Task Found : task Update Task Found : WinTaske Task Found : Browser Updater Task(Core) ***** [ Registry ] ***** Key Found : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE Key Found : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP Key Found : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com Key Found : HKEY_CLASSES_ROOT\.qmgc Key Found : HKLM\SOFTWARE\Classes\WinZippers.001 Key Found : HKLM\SOFTWARE\Classes\WinZippers.7z Key Found : HKLM\SOFTWARE\Classes\WinZippers.arj Key Found : HKLM\SOFTWARE\Classes\WinZippers.bz2 Key Found : HKLM\SOFTWARE\Classes\WinZippers.bzip2 Key Found : HKLM\SOFTWARE\Classes\WinZippers.cab Key Found : HKLM\SOFTWARE\Classes\WinZippers.cpio Key Found : HKLM\SOFTWARE\Classes\WinZippers.deb Key Found : HKLM\SOFTWARE\Classes\WinZippers.dmg Key Found : HKLM\SOFTWARE\Classes\WinZippers.fat Key Found : HKLM\SOFTWARE\Classes\WinZippers.gz Key Found : HKLM\SOFTWARE\Classes\WinZippers.gzip Key Found : HKLM\SOFTWARE\Classes\WinZippers.hfs Key Found : HKLM\SOFTWARE\Classes\WinZippers.iso Key Found : HKLM\SOFTWARE\Classes\WinZippers.lha Key Found : HKLM\SOFTWARE\Classes\WinZippers.lzh Key Found : HKLM\SOFTWARE\Classes\WinZippers.lzma Key Found : HKLM\SOFTWARE\Classes\WinZippers.ntfs Key Found : HKLM\SOFTWARE\Classes\WinZippers.rar Key Found : HKLM\SOFTWARE\Classes\WinZippers.rpm Key Found : HKLM\SOFTWARE\Classes\WinZippers.squashfs Key Found : HKLM\SOFTWARE\Classes\WinZippers.swm Key Found : HKLM\SOFTWARE\Classes\WinZippers.tar Key Found : HKLM\SOFTWARE\Classes\WinZippers.taz Key Found : HKLM\SOFTWARE\Classes\WinZippers.tbz Key Found : HKLM\SOFTWARE\Classes\WinZippers.tbz2 Key Found : HKLM\SOFTWARE\Classes\WinZippers.tgz Key Found : HKLM\SOFTWARE\Classes\WinZippers.tpz Key Found : HKLM\SOFTWARE\Classes\WinZippers.txz Key Found : HKLM\SOFTWARE\Classes\WinZippers.vhd Key Found : HKLM\SOFTWARE\Classes\WinZippers.wim Key Found : HKLM\SOFTWARE\Classes\WinZippers.xar Key Found : HKLM\SOFTWARE\Classes\WinZippers.xz Key Found : HKLM\SOFTWARE\Classes\WinZippers.z Key Found : HKLM\SOFTWARE\Classes\WinZippers.zip Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [deskCutv2@gmail.com] Key Found : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeoo Key Found : HKLM\SOFTWARE\Classes\metnsd Key Found : HKLM\SOFTWARE\Classes\MTview.bmp Key Found : HKLM\SOFTWARE\Classes\MTview.dib Key Found : HKLM\SOFTWARE\Classes\MTview.emf Key Found : HKLM\SOFTWARE\Classes\MTview.exif Key Found : HKLM\SOFTWARE\Classes\MTview.gif Key Found : HKLM\SOFTWARE\Classes\MTview.ico Key Found : HKLM\SOFTWARE\Classes\MTview.jfif Key Found : HKLM\SOFTWARE\Classes\MTview.jpe Key Found : HKLM\SOFTWARE\Classes\MTview.jpeg Key Found : HKLM\SOFTWARE\Classes\MTview.jpg Key Found : HKLM\SOFTWARE\Classes\MTview.png Key Found : HKLM\SOFTWARE\Classes\MTview.tif Key Found : HKLM\SOFTWARE\Classes\MTview.tiff Key Found : HKLM\SOFTWARE\Classes\MTview.wmf Key Found : HKLM\SOFTWARE\Classes\qmgcfiles Key Found : HKLM\SOFTWARE\Classes\AppID\{20B9C05C-99C9-4BAB-B596-FB0C0E1C9F55} Key Found : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1} Key Found : HKCU\Software\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8} Key Found : HKLM\SOFTWARE\Classes\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} Key Found : HKLM\SOFTWARE\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64} Key Found : HKLM\SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Key Found : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8} Key Found : HKLM\SOFTWARE\Classes\CLSID\{EC0FA563-E0F2-406F-8659-1E728458A91E} Key Found : HKLM\SOFTWARE\Classes\CLSID\{88260EA6-BC91-42DF-ABEF-4A683E8A3C23} Key Found : HKLM\SOFTWARE\Classes\CLSID\{4C097DF1-0716-4FA1-84A9-025BC1E7B03F} Key Found : HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9} Key Found : HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4} Key Found : HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D} Key Found : HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD} Key Found : HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519} Key Found : HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF} Key Found : HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890} Key Found : HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105} Key Found : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E} Key Found : HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}] Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}] Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}] Key Found : HKCU\Software\genieo Key Found : HKCU\Software\Mozilla\Extends Key Found : HKCU\Software\PRODUCTSETUP Key Found : HKCU\Software\ssn Key Found : HKCU\Software\WajIEnhance Key Found : HKCU\Software\WEBAPP Key Found : HKCU\Software\yahooprovidedsearch Key Found : HKCU\Software\STA Key Found : HKCU\Software\YTD Key Found : HKCU\Software\csastats Key Found : HKCU\Software\GreenTree Applications\YTD Key Found : HKCU\Software\AppDataLow\Software\Browser Extensions Key Found : HKCU\Software\AppDataLow\Software\Settings Manager Key Found : HKCU\Software\AppDataLow\Software\YTD Key Found : HKLM\SOFTWARE\Application Updater Key Found : HKLM\SOFTWARE\hdcode Key Found : HKLM\SOFTWARE\omniboxesSoftware Key Found : HKLM\SOFTWARE\yessearchesSoftware Key Found : HKLM\SOFTWARE\Lavasoft\Web Companion Key Found : HKLM\SOFTWARE\YTD Key Found : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678} Key Found : HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{96F04C1B-E352-4A90-BED4-11A0FA968BC2}_is1 Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MalwareProtectionLive Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet Key Found : [x64] HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678} Key Found : HKU\.DEFAULT\Software\AskPartnerNetwork Key Found : HKU\.DEFAULT\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678} Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\genieo Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Mozilla\Extends Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\PRODUCTSETUP Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\ssn Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\WajIEnhance Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\WEBAPP Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\yahooprovidedsearch Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\STA Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\YTD Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\csastats Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\GreenTree Applications\YTD Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\AppDataLow\Software\Browser Extensions Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\AppDataLow\Software\Settings Manager Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\AppDataLow\Software\YTD Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3A787631-66A2-4634-B928-A37E73B58FB6} Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager Key Found : HKU\S-1-5-18\Software\AskPartnerNetwork Key Found : HKU\S-1-5-18\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678} Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9 Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044 Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxps://ph.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_16_23¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dph%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtDtA0F0DyDyEzzyEtD0D0BtCtCtA0AtN0D0Tzu0StCyCtByEtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2SyByBtDzzzzyDzytBtGyEtA0FtBtGyE0B0A0BtGtByB0ByEtGtByC0DtByByDtC0DyE0CtC0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtD0F0AzzyEzztDtG0BtDyByBtGyEyByBtBtGzz0F0E0FtGtDtBtBtCyBtDzyzzzyyC0Ezy2QtN0A0LzuyE%26cr%3D436527993%26a%3Dwncy_gmmedply_16_23%26os_ver%3D6.3%26os%3DWindows%2B8.1%2BPro Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages] - hxxps://ph.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_16_23¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dph%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtDtA0F0DyDyEzzyEtD0D0BtCtCtA0AtN0D0Tzu0StCyCtBtDtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0FtAtB0DtDtCzytGyB0A0FyCtGyEtDzzyDtGyDzyyBtBtG0FyC0FyBtDtByD0A0FyE0D0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtD0F0AzzyEzztDtG0BtDyByBtGyEyByBtBtGzz0F0E0FtGtDtBtBtCyBtDzyzzzyyC0Ezy2QtN0A0LzuyE%26cr%3D1810272187%26a%3Dwbf_ir_16_23%26os_ver%3D6.3%26os%3DWindows%2B8.1%2BPro Data Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxps://ph.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_16_23¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dph%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtDtA0F0DyDyEzzyEtD0D0BtCtCtA0AtN0D0Tzu0StCyCtByEtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2SyByBtDzzzzyDzytBtGyEtA0FtBtGyE0B0A0BtGtByB0ByEtGtByC0DtByByDtC0DyE0CtC0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtD0F0AzzyEzztDtG0BtDyByBtGyEyByBtBtGzz0F0E0FtGtDtBtBtCyBtDzyzzzyyC0Ezy2QtN0A0LzuyE%26cr%3D436527993%26a%3Dwncy_gmmedply_16_23%26os_ver%3D6.3%26os%3DWindows%2B8.1%2BPro Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxps://ph.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_16_23¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dph%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtDtA0F0DyDyEzzyEtD0D0BtCtCtA0AtN0D0Tzu0StCyCtByEtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2SyByBtDzzzzyDzytBtGyEtA0FtBtGyE0B0A0BtGtByB0ByEtGtByC0DtByByDtC0DyE0CtC0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtD0F0AzzyEzztDtG0BtDyByBtGyEyByBtBtGzz0F0E0FtGtDtBtBtCyBtDzyzzzyyC0Ezy2QtN0A0LzuyE%26cr%3D436527993%26a%3Dwncy_gmmedply_16_23%26os_ver%3D6.3%26os%3DWindows%2B8.1%2BPro Data Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxps://ph.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_gmmedply_16_23¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dph%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtDtA0F0DyDyEzzyEtD0D0BtCtCtA0AtN0D0Tzu0StCyCtByEtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2SyByBtDzzzzyDzytBtGyEtA0FtBtGyE0B0A0BtGtByB0ByEtGtByC0DtByByDtC0DyE0CtC0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtD0F0AzzyEzztDtG0BtDyByBtGyEyByBtBtGzz0F0E0FtGtDtBtBtCyBtDzyzzzyyC0Ezy2QtN0A0LzuyE%26cr%3D436527993%26a%3Dwncy_gmmedply_16_23%26os_ver%3D6.3%26os%3DWindows%2B8.1%2BPro Data Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages] - hxxps://ph.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_16_23¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dph%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtDtA0F0DyDyEzzyEtD0D0BtCtCtA0AtN0D0Tzu0StCyCtBtDtN1L2XzutAtFtBtBtFtAtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StC0FtAtB0DtDtCzytGyB0A0FyCtGyEtDzzyDtGyDzyyBtBtG0FyC0FyBtDtByD0A0FyE0D0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0BtD0F0AzzyEzztDtG0BtDyByBtGyEyByBtBtGzz0F0E0FtGtDtBtBtCyBtDzyzzzyyC0Ezy2QtN0A0LzuyE%26cr%3D1810272187%26a%3Dwbf_ir_16_23%26os_ver%3D6.3%26os%3DWindows%2B8.1%2BPro Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{DED0806E-053D-4B42-9F4F-30BBBB84E84B}] Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{8CD75710-60A8-4157-8BB0-02042258119E}] Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5B58C278-EA94-46BD-B210-A602B132EC10} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{65462EB1-B783-4702-8C0A-37B011E40328} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8CDE19E6-71C2-4B46-89B7-35F6A18C571A} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A1A1350F-46D1-40E7-B1EE-7DCFE145099C} Data Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {A1A1350F-46D1-40E7-B1EE-7DCFE145099C} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C0C3A6C6-03BC-4195-8FCB-AEA091301353} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5B58C278-EA94-46BD-B210-A602B132EC10} Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146} Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5B58C278-EA94-46BD-B210-A602B132EC10} Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8CDE19E6-71C2-4B46-89B7-35F6A18C571A} Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\SearchScopes\{5B58C278-EA94-46BD-B210-A602B132EC10} Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\SearchScopes\{65462EB1-B783-4702-8C0A-37B011E40328} Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\SearchScopes\{8CDE19E6-71C2-4B46-89B7-35F6A18C571A} Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\SearchScopes\{A1A1350F-46D1-40E7-B1EE-7DCFE145099C} Data Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {A1A1350F-46D1-40E7-B1EE-7DCFE145099C} Key Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Internet Explorer\SearchScopes\{C0C3A6C6-03BC-4195-8FCB-AEA091301353} Value Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [ApnTBMon] Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Extensions] Value Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Windows\CurrentVersion\Run [Browser Extensions] Value Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [GenieoSystemTray] Value Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [GenieoUpdaterService] Value Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [MalwareProtectionLive] Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [MTView] Value Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [SearchSettings] Value Found : HKU\S-1-5-21-857764097-2768608196-515561602-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [ssn] Key Found : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WindowsMangerProtect Key Found : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\winzipersvc Key Found : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\qkseeService ***** [ Web browsers ] ***** [C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\prefs.js] Found : user_pref("extensions.JSksw4LMIjOvtenE.scode", "(function(){try{if(window.location.href.indexOf(\"pjs8pdg8pjY9pdg5rTU7rjwHrY\")>-1){return;}}catch(e){}try{var d=[[\"www.ewoss.com\",\"livewebcams.xyz\"[...] [C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\prefs.js] Found : \",\"websearch.mocaflix.com\",\"search.easylifeapp.com\",\"searchy.easylifeapp.com\",\"us.yhs4.search.yahoo.com\",\"search.gboxapp.com\",\"searchiy.gboxapp.com\",\"bestonlinegadgetguide.com\",\"odpu.c[...] [C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\prefs.js] Found : he-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|ama[...] [C:\Users\pc user\AppData\Roaming\Mozilla\Firefox\Profiles\dp71wocd.default\prefs.js] Found : Element(e),k=e.parentNode;k.insertBefore(g,e);k.removeChild(e)}}};this[\"superfiles.com\"]=new function(){this.init=function(){for(var d=\r\nh.utils.query_selector_all(\"#tag_download\"),a=0;a