Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Window management

- - - - -
Started by Metallica , Oct 03 2016 05:20 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 03 October 2016 - 05:20 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is Window management?

The Malwarebytes research team has determined that Window management is adware. These adware applications display advertisements not originating from the sites you are browsing.

How do I know if my computer is affected by Window management?

You may see this entry in your list of installed programs:

warning4.png

How did Window management get on my computer?

Adware applications use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Window management?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to:
    Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • If an update is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Window management?
  • No, Malwarebytes' Anti-Malware removes Window management completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this adware.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Window management adware. It would have warned you before the adware could install itself, giving you a chance to stop it before it became too late.

protection1.png


The web protection module also blocks some of the connections the installer tries to make:

protection2.png


Technical details for experts

Possible signs in FRST logs:
 (Dunloop interactive) C:\Program Files (x86)\winloop\WinLoopPattern.exe
 (Dunloop interactive) C:\Program Files (x86)\winloop\WinLoopPattern_.exe
 (Dunloop interactive) C:\Program Files (x86)\winloop\WinLoop.exe
 (Dunloop interactive) C:\Program Files (x86)\winloop\WinLoop_.exe
 R2 WinLoopSvc; C:\Program Files (x86)\winloop\WinLoopPattern.exe [134656 2016-09-26] (Dunloop interactive) [File not signed]
 R2 WinLoopSvc2; C:\Program Files (x86)\winloop\WinLoopPattern_.exe [128512 2016-09-26] (Dunloop interactive) [File not signed]
 C:\Program Files (x86)\winloop

Window management (HKLM-x32\...\Window management) (Version: 1.73 - Dunloop interactive)
Alterations made by the installer:
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\winloop
       Adds the file cef.pak"="6/20/2016 8:37 AM, 2749972 bytes, A
       Adds the file cef_100_percent.pak"="6/20/2016 8:37 AM, 146067 bytes, A
       Adds the file cef_200_percent.pak"="6/20/2016 8:37 AM, 235262 bytes, A
       Adds the file cef_extensions.pak"="6/20/2016 8:37 AM, 4409164 bytes, A
       Adds the file d3dcompiler_43.dll"="6/20/2016 8:37 AM, 2106216 bytes, A
       Adds the file d3dcompiler_47.dll"="6/20/2016 8:37 AM, 3709120 bytes, A
       Adds the file devtools_resources.pak"="6/20/2016 8:37 AM, 4740603 bytes, A
       Adds the file icudtl.dat"="6/20/2016 8:37 AM, 10127152 bytes, A
       Adds the file libcef.dll"="6/20/2016 8:37 AM, 52043776 bytes, A
       Adds the file libcurl.dll"="10/27/2014 6:11 PM, 1358336 bytes, A
       Adds the file libEGL.dll"="6/20/2016 8:37 AM, 80384 bytes, A
       Adds the file libGLESv2.dll"="6/20/2016 8:37 AM, 1734656 bytes, A
       Adds the file log4cplusU.dll"="1/14/2015 11:55 AM, 386560 bytes, A
       Adds the file msvcp120.dll"="11/24/2014 9:23 AM, 455328 bytes, A
       Adds the file msvcr120.dll"="11/24/2014 9:23 AM, 970912 bytes, A
       Adds the file natives_blob.bin"="6/20/2016 8:37 AM, 415490 bytes, A
       Adds the file setuserspace.exe"="9/26/2016 1:38 PM, 1890304 bytes, A
       Adds the file setuserspace_.exe"="9/26/2016 1:41 PM, 1822208 bytes, A
       Adds the file snapshot_blob.bin"="6/20/2016 8:37 AM, 517972 bytes, A
       Adds the file Uninstall.exe"="10/3/2016 8:48 AM, 189962 bytes, A
       Adds the file widevinecdmadapter.dll"="6/20/2016 8:37 AM, 212992 bytes, A
       Adds the file WinLoop.exe"="9/26/2016 1:55 PM, 680448 bytes, A
       Adds the file WinLoop_.exe"="9/26/2016 1:29 PM, 662528 bytes, A
       Adds the file WinLoopPattern.exe"="9/26/2016 1:54 PM, 134656 bytes, A
       Adds the file WinLoopPattern_.exe"="9/26/2016 1:50 PM, 128512 bytes, A
       Adds the file wow_helper.exe"="5/13/2016 9:59 AM, 67072 bytes, A
    Adds the folder C:\Program Files (x86)\winloop\che
       Adds the file Cookies"="10/3/2016 8:50 AM, 9216 bytes, A
       Adds the file Cookies-journal"="10/3/2016 8:50 AM, 0 bytes, A
       Adds the file data_0"="10/3/2016 8:48 AM, 45056 bytes, A
       Adds the file data_1"="10/3/2016 8:48 AM, 270336 bytes, A
       Adds the file data_2"="10/3/2016 8:48 AM, 1056768 bytes, A
       Adds the file data_3"="10/3/2016 8:48 AM, 4202496 bytes, A
       Adds the file f_000001"="10/3/2016 8:48 AM, 33369 bytes, A
       Adds the file f_000002"="10/3/2016 8:48 AM, 36558 bytes, A
       Adds the file f_000003"="10/3/2016 8:48 AM, 21680 bytes, A
       Adds the file f_000004"="10/3/2016 8:48 AM, 41182 bytes, A
       Adds the file f_000005"="10/3/2016 8:48 AM, 17278 bytes, A
       Adds the file f_000006"="10/3/2016 8:48 AM, 23945 bytes, A
       Adds the file f_000007"="10/3/2016 8:48 AM, 98457 bytes, A
       Adds the file f_000008"="10/3/2016 8:48 AM, 25786 bytes, A
       Adds the file f_000009"="10/3/2016 8:48 AM, 28391 bytes, A
       Adds the file f_00000a"="10/3/2016 8:48 AM, 306719 bytes, A
       Adds the file f_00000b"="10/3/2016 8:48 AM, 25630 bytes, A
       Adds the file f_00000c"="10/3/2016 8:48 AM, 32798 bytes, A
       Adds the file f_00000d"="10/3/2016 8:48 AM, 59189 bytes, A
       Adds the file f_00000e"="10/3/2016 8:48 AM, 41372 bytes, A
       Adds the file f_00000f"="10/3/2016 8:48 AM, 87460 bytes, A
       Adds the file f_000010"="10/3/2016 8:48 AM, 233679 bytes, A
       Adds the file f_000011"="10/3/2016 8:49 AM, 28020 bytes, A
       Adds the file f_000012"="10/3/2016 8:49 AM, 29691 bytes, A
       Adds the file f_000013"="10/3/2016 8:49 AM, 26964 bytes, A
       Adds the file f_000014"="10/3/2016 8:49 AM, 49660 bytes, A
       Adds the file f_000015"="10/3/2016 8:49 AM, 23823 bytes, A
       Adds the file f_000016"="10/3/2016 8:50 AM, 62709 bytes, A
       Adds the file index"="10/3/2016 8:48 AM, 524656 bytes, A
       Adds the file Visited Links"="10/3/2016 8:48 AM, 131072 bytes, A
    Adds the folder C:\Program Files (x86)\winloop\che\GPUCache
       Adds the file data_0"="10/3/2016 8:48 AM, 8192 bytes, A
       Adds the file data_1"="10/3/2016 8:48 AM, 270336 bytes, A
       Adds the file data_2"="10/3/2016 8:48 AM, 8192 bytes, A
       Adds the file data_3"="10/3/2016 8:48 AM, 8192 bytes, A
       Adds the file index"="10/3/2016 8:48 AM, 262512 bytes, A
    Adds the folder C:\Program Files (x86)\winloop\che1
       Adds the file Cookies"="10/3/2016 8:51 AM, 11264 bytes, A
       Adds the file Cookies-journal"="10/3/2016 8:51 AM, 0 bytes, A
       Adds the file data_0"="10/3/2016 8:49 AM, 45056 bytes, A
       Adds the file data_1"="10/3/2016 8:48 AM, 270336 bytes, A
       Adds the file data_2"="10/3/2016 8:49 AM, 1056768 bytes, A
       Adds the file data_3"="10/3/2016 8:49 AM, 4202496 bytes, A
       Adds the file f_000001"="10/3/2016 8:49 AM, 32745 bytes, A
       Adds the file f_000002"="10/3/2016 8:49 AM, 22390 bytes, A
       Adds the file f_000003"="10/3/2016 8:49 AM, 23870 bytes, A
       Adds the file f_000004"="10/3/2016 8:49 AM, 74413 bytes, A
       Adds the file f_000005"="10/3/2016 8:49 AM, 95786 bytes, A
       Adds the file f_000006"="10/3/2016 8:49 AM, 27330 bytes, A
       Adds the file f_000007"="10/3/2016 8:49 AM, 103622 bytes, A
       Adds the file f_000008"="10/3/2016 8:49 AM, 105731 bytes, A
       Adds the file f_000009"="10/3/2016 8:49 AM, 19887 bytes, A
       Adds the file f_00000a"="10/3/2016 8:49 AM, 233679 bytes, A
       Adds the file f_00000b"="10/3/2016 8:49 AM, 17553 bytes, A
       Adds the file f_00000c"="10/3/2016 8:49 AM, 16575 bytes, A
       Adds the file f_00000d"="10/3/2016 8:49 AM, 162008 bytes, A
       Adds the file f_00000e"="10/3/2016 8:49 AM, 22197 bytes, A
       Adds the file f_00000f"="10/3/2016 8:49 AM, 31043 bytes, A
       Adds the file f_000010"="10/3/2016 8:51 AM, 26092 bytes, A
       Adds the file f_000011"="10/3/2016 8:51 AM, 21034 bytes, A
       Adds the file f_000012"="10/3/2016 8:51 AM, 58775 bytes, A
       Adds the file f_000013"="10/3/2016 8:51 AM, 20972 bytes, A
       Adds the file f_000014"="10/3/2016 8:51 AM, 49244 bytes, A
       Adds the file f_000015"="10/3/2016 8:51 AM, 20627 bytes, A
       Adds the file f_000016"="10/3/2016 8:51 AM, 72887 bytes, A
       Adds the file index"="10/3/2016 8:48 AM, 524656 bytes, A
       Adds the file Visited Links"="10/3/2016 8:51 AM, 131072 bytes, A
    Adds the folder C:\Program Files (x86)\winloop\che1\GPUCache
       Adds the file data_0"="10/3/2016 8:48 AM, 8192 bytes, A
       Adds the file data_1"="10/3/2016 8:48 AM, 270336 bytes, A
       Adds the file data_2"="10/3/2016 8:48 AM, 8192 bytes, A
       Adds the file data_3"="10/3/2016 8:48 AM, 8192 bytes, A
       Adds the file index"="10/3/2016 8:48 AM, 262512 bytes, A
    Adds the folder C:\Program Files (x86)\winloop\locales
    Adds the folder C:\Program Files (x86)\winloop\plugins
       Adds the file pepflashplayer.dll"="6/30/2016 3:25 AM, 31555776 bytes, A
    Adds the folder C:\Program Files (x86)\winloop\Update
    Adds the folder C:\Users\{username}\AppData\Local\CEF\User Data\Dictionaries

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\okwinloop]
       "ID"="REG_SZ", "F5BB80FE-6457-49B2-99C5-612BA26B4D7F"
       "InstallAMID"="REG_SZ", ""
       "InstallSID"="REG_SZ", ""
       "Version"="REG_SZ", "173"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Window management]
       "DisplayName"="REG_SZ", "Window management"
       "DisplayVersion"="REG_SZ", "1.73"
       "EstimatedSize"="REG_DWORD", 94777
       "InstallDate"="REG_SZ", "20151003"
       "Publisher"="REG_SZ", "Dunloop interactive"
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\winloop\uninstall.exe""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\okwinloop]
       "ID"="REG_SZ", "F5BB80FE-6457-49B2-99C5-612BA26B4D7F"
       "InstallAMID"="REG_SZ", "0"
       "InstallDate"="REG_SZ", "03.10.2016 8:48"
       "InstallSID"="REG_SZ", ""
       "restart1"="REG_SZ", "1"
       "restart2"="REG_SZ", "1"
       "Success"="REG_SZ", "1"
       "Version"="REG_SZ", "173"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinLoopSvc]
       "DisplayName"="REG_SZ", "Window management"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\winloop\WinLoopPattern.exe"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
       "WOW64"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinLoopSvc2]
       "DisplayName"="REG_SZ", "Window management2"
       "ErrorControl"="REG_DWORD", 1
       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\winloop\WinLoopPattern_.exe"
       "ObjectName"="REG_SZ", "LocalSystem"
       "Start"="REG_DWORD", 2
       "Type"="REG_DWORD", 16
       "WOW64"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\winmnt]
       "Success"="REG_SZ", "1"
Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/3/2016
Scan Time: 1:01 PM
Logfile: mbamWinLoop.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.10.03.05
Rootkit Database: v2016.09.26.02
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 323050
Time Elapsed: 9 min, 55 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 6
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\setuserspace.exe, 3624, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6]
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoop.exe, 4052, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6]
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoopPattern.exe, 312, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6]
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoopPattern_.exe, 2524, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6]
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoop_.exe, 3652, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6]
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoop_.exe, 3752, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6]

Modules: 5
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libcef.dll, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libcef.dll, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libcurl.dll, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libcurl.dll, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libcurl.dll, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 

Registry Keys: 5
PUP.Optional.WinLoop, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Window management, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinLoopSvc, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinLoopSvc2, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, HKLM\SOFTWARE\OKWINLOOP, Quarantined, [775adcb80199ab8b598bea1812f3f808], 
PUP.Optional.WinLoop, HKLM\SOFTWARE\WOW6432NODE\OKWINLOOP, Quarantined, [a9281b79990170c6aa3ad9297095758b], 

Registry Values: 4
PUP.Optional.WinLoop, HKLM\SOFTWARE\OKWINLOOP|Version, 173, Quarantined, [775adcb80199ab8b598bea1812f3f808]
PUP.Optional.WinLoop, HKLM\SOFTWARE\WOW6432NODE\OKWINLOOP|Version, 173, Quarantined, [a9281b79990170c6aa3ad9297095758b]
PUP.Optional.WinLoop, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinLoopSvc|ImagePath, C:\Program Files (x86)\winloop\WinLoopPattern.exe, Quarantined, [8948b7dd9bfff73f8d55bd45867fa060]
PUP.Optional.WinLoop, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinLoopSvc2|ImagePath, C:\Program Files (x86)\winloop\WinLoopPattern_.exe, Quarantined, [c1105c38dac0ad898062cf339372b749]

Registry Data: 0
(No malicious items detected)

Folders: 8
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\GPUCache, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\GPUCache, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\plugins, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\Update, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 

Files: 125
PUP.Optional.WinLoop, C:\Users\{username}\Desktop\install.exe, Quarantined, [f3def69e9109979faf23a95912f38c74], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libcef.dll, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libGLESv2.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\cef.pak, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\cef_100_percent.pak, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\cef_200_percent.pak, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\cef_extensions.pak, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\d3dcompiler_43.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\d3dcompiler_47.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\devtools_resources.pak, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\icudtl.dat, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libcurl.dll, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\libEGL.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\log4cplusU.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\msvcp120.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\msvcr120.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\natives_blob.bin, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\setuserspace.exe, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\setuserspace_.exe, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\snapshot_blob.bin, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\Uninstall.exe, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\widevinecdmadapter.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoop.exe, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoopPattern.exe, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoopPattern_.exe, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\WinLoop_.exe, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\wow_helper.exe, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\Cookies, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\Cookies-journal, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\data_0, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\data_1, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\data_2, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\data_3, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000001, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000002, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000003, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000004, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000005, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000006, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000007, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000008, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000009, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_00000a, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_00000b, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_00000c, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_00000d, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_00000e, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_00000f, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000010, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000011, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\f_000012, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\index, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\Visited Links, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\GPUCache\data_0, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\GPUCache\data_1, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\GPUCache\data_2, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\GPUCache\data_3, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che\GPUCache\index, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\Cookies, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\Cookies-journal, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\data_0, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\data_1, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\data_2, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\data_3, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\index, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\Visited Links, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\GPUCache\data_0, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\GPUCache\data_1, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\GPUCache\data_2, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\GPUCache\data_3, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\che1\GPUCache\index, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\he.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\am.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ar.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\bg.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\bn.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ca.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\cs.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\da.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\de.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\el.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\en-GB.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\en-US.pak, Delete-on-Reboot, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\es-419.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\es.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\et.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\fa.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\fi.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\fil.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\fr.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\gu.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\hi.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\hr.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\hu.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\id.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\it.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ja.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\kn.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ko.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\lt.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\lv.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ml.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\mr.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ms.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\nb.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\nl.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\pl.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\pt-BR.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\pt-PT.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ro.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ru.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\sk.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\sl.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\sr.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\sv.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\sw.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\ta.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\te.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\th.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\tr.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\uk.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\vi.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\zh-CN.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\locales\zh-TW.pak, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 
PUP.Optional.WinLoop, C:\Program Files (x86)\winloop\plugins\pepflashplayer.dll, Quarantined, [6e63fc98e0ba6fc7617db34fb1544ab6], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.