Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for K9-PCFixer

- - - - -
Started by Metallica , Feb 24 2021 02:51 AM
systweak

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 24 February 2021 - 02:51 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is K9-PCFixer?

K9-PCFixer is a registry cleaner that triggers our PUP detection rules. By doing so we offer users a choice to consider whether they want to use this software. More information can be found on our Malwarebytes Labs blog.

How do I know if I am affected by K9-PCFixer?

This is how the main screen of the system optimizer looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see this type of windows during install:

warning0.png

warning1.png

warning2.png

and this type of screens during operations:

warning5.png

You may see this entry in your list of installed programs:

warning4.png

and these tasks in your list of Scheduled Tasks:

warning3.png

How did K9-PCFixer get on my computer?

These so-called registry cleaners use different methods of getting installed. The website for this one is no longer available, but the programs is still offered in bundlers.

How do I remove K9-PCFixer?

Our program Malwarebytes can detect and remove this PUP.
  • Please download Malwarebytes for Windows to your desktop.
  • Double-click MBSetup.exe and follow the prompts to install the program.
  • When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
  • Click on the Get started button.
  • Click Scan to start a Threat Scan.
  • When the scan is finished click Quarantine to remove the found threats.
  • Reboot the system if prompted to complete the removal process.
Is there anything else I need to do to get rid of K9-PCFixer?
  • No, Malwarebytes removes K9-PCFixer completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
What if I want to keep K9-PCFixer?

Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Heres how to do it.
  • Open Malwarebytes for Windows.
  • Click the Detection History
  • Click the Allow List
  • To add an item to the Allow List, click Add.
  • Select the exclusion type Allow a file or folder and use the Select a folder button to select the main folder for the software that you wish to keep.
  • Repeat this for any secondary files or folder(s) that belong to the software.
If you want to allow the program to connect to the Internet, for example to fetch updates, also add an exclusion of the type Allow an application to connect to the internet and use the Browse button to select the file you wish to grant access.

How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you in dealing with this registry cleaner.

As you can see below the full version of Malwarebytes would have warned you against the K9-PCFixer installer.

protection1.png


Technical details for experts

You may see these entries in FRST logs:

(SUPER TUNEUP TECHNOLOGIES LLP -> K9Tools) C:\Program Files (x86)\K9-PCFixer\K9-PCFixer.exe
Task: {465B49A1-8C4D-4DE4-B050-21FCA4DC01EA} - System32\Tasks\K9-PCFixer_UPDATES => C:\Program Files (x86)\K9-PCFixer\K9-PCFixer.exe [8187664 2015-03-09] (SUPER TUNEUP TECHNOLOGIES LLP -> K9Tools)
Task: {4AF29C44-87EB-4F0D-84C2-888B2801BFD0} - System32\Tasks\K9-PCP => C:\Program Files (x86)\K9-PCFixer\k9schedule.exe [607608 2015-03-09] (SUPER TUNEUP TECHNOLOGIES LLP -> K9Tools)
Task: {8045A3E0-0AEF-4EC9-A9B4-C606535DEBD7} - System32\Tasks\K9-PCFixer => C:\Program Files (x86)\K9-PCFixer\K9-PCFixer.exe [8187664 2015-03-09] (SUPER TUNEUP TECHNOLOGIES LLP -> K9Tools)
Task: {A0EBD465-E4CE-4065-BE74-9CE2D4854968} - System32\Tasks\K9-PCFixer_DEFAULT => C:\Program Files (x86)\K9-PCFixer\K9-PCFixer.exe [8187664 2015-03-09] (SUPER TUNEUP TECHNOLOGIES LLP -> K9Tools)
Task: C:\Windows\Tasks\K9-PCFixer_DEFAULT.job => C:\Program Files (x86)\K9-PCFixer\K9-PCFixer.exe
Task: C:\Windows\Tasks\K9-PCFixer_UPDATES.job => C:\Program Files (x86)\K9-PCFixer\K9-PCFixer.exe
C:\Users\{username}\AppData\Roaming\K9-PCFixer
C:\Windows\system32\Tasks\K9-PCP
C:\Windows\system32\Tasks\K9-PCFixer
C:\Windows\system32\Tasks\K9-PCFixer_UPDATES
C:\Windows\system32\Tasks\K9-PCFixer_DEFAULT
C:\ProgramData\Desktop\K9-PCFixer.lnk
C:\Windows\Tasks\K9-PCFixer_UPDATES.job
C:\Windows\Tasks\K9-PCFixer_DEFAULT.job
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K9-PCFixer
C:\Program Files (x86)\K9-PCFixer
() C:\Windows\system32\roboot64.exe
(K9 Tools ) C:\Users\{username}\Downloads\k9-pcfixer.exe
( ) C:\Users\{username}\Desktop\k9-pcfixer_QwuQ-B1.exe
C:\Users\{username}\AppData\Roaming\SimpleStar

K9 PCFixer (HKLM-x32\...\K9 PCFixer_is1) (Version: 1.8 - K9 Tools)
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\K9-PCFixer
       Adds the file CleanSchedule.exe"="3/9/2015 6:37 PM, 116496 bytes, A
       Adds the file FileList.rcp"="12/26/2014 6:56 PM, 13434 bytes, A
       Adds the file install_left_image.bmp"="12/23/2014 1:54 PM, 156296 bytes, A
       Adds the file isxdl.dll"="3/9/2015 6:37 PM, 156944 bytes, A
       Adds the file K9-PCFixer.exe"="3/9/2015 6:37 PM, 8187664 bytes, A
       Adds the file K9-PCFUninstall.exe"="3/9/2015 6:37 PM, 553232 bytes, A
       Adds the file k9schedule.exe"="3/9/2015 6:37 PM, 607608 bytes, A
       Adds the file RegList.rcp"="12/26/2014 6:56 PM, 91722 bytes, A
       Adds the file TPS.ico"="12/12/2014 1:32 PM, 34494 bytes, A
       Adds the file TraditionalCn_rcp_zh-tw.ini"="12/23/2014 12:05 PM, 49198 bytes, A
       Adds the file traditionalcn_uninst_zh-tw.ini"="12/12/2014 1:32 PM, 2692 bytes, A
       Adds the file unins000.dat"="2/24/2021 9:05 AM, 49545 bytes, A
       Adds the file unins000.exe"="2/24/2021 9:04 AM, 1209616 bytes, A
       Adds the file unins000.msg"="2/24/2021 9:05 AM, 22701 bytes, A
       Adds the file xmllite.dll"="12/12/2014 1:31 PM, 126976 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K9-PCFixer
       Adds the file K9-PCFixer.lnk"="2/24/2021 9:05 AM, 1049 bytes, A
       Adds the file Register K9-PCFixer.lnk"="2/24/2021 9:05 AM, 1075 bytes, A
       Adds the file Uninstall K9-PCFixer.lnk"="2/24/2021 9:05 AM, 1055 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\K9-PCFixer
       Adds the file backup6.bin"="2/24/2021 9:05 AM, 733 bytes, A
       Adds the file eng_rcp.dat"="2/24/2021 9:05 AM, 32700 bytes, A
       Adds the file log_02-24-2021.log"="2/24/2021 9:05 AM, 0 bytes, A
       Adds the file results.rcp"="2/24/2021 9:06 AM, 27266 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\SimpleStar\Simple Malware Protector
    In the existing folder C:\Users\{username}\Desktop
       Adds the file k9-pcfixer_QwuQ-B1.exe"="2/24/2021 9:03 AM, 2550808 bytes, A
    In the existing folder C:\Users\{username}\Downloads
       Adds the file k9-pcfixer.exe"="2/24/2021 9:04 AM, 3551552 bytes, A
    In the existing folder C:\Users\Public\Desktop
       Adds the file K9-PCFixer.lnk"="2/24/2021 9:05 AM, 1031 bytes, A
    In the existing folder C:\Windows\System32
       Adds the file roboot64.exe"="3/9/2015 6:37 PM, 19728 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file K9-PCFixer"="2/24/2021 9:05 AM, 3096 bytes, A
       Adds the file K9-PCFixer_DEFAULT"="2/24/2021 9:05 AM, 2888 bytes, A
       Adds the file K9-PCFixer_UPDATES"="2/24/2021 9:05 AM, 3044 bytes, A
       Adds the file K9-PCP"="2/24/2021 9:05 AM, 3338 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file K9-PCFixer_DEFAULT.job"="2/24/2021 9:05 AM, 278 bytes, A
       Adds the file K9-PCFixer_UPDATES.job"="2/24/2021 9:05 AM, 286 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "K9-PCFixer_DEFAULT.job"="REG_BINARY, ................................
       "K9-PCFixer_DEFAULT.job.fp"="REG_DWORD", 808380961
       "K9-PCFixer_UPDATES.job"="REG_BINARY, ................................
       "K9-PCFixer_UPDATES.job.fp"="REG_DWORD", 178312179
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\K9\PC\Fixer\Key\6]
       "(Default)"="REG_BINARY, ...........................................................................................................
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\K9-PCFixer]
       "AppVersion"="REG_SZ", "1.8.243.209"
       "aspurl"="REG_SZ", "http://d2uu7l47sbf1ja.cloudfront.net/k9pcp/k9pcp_default.exe"
       "Expired"="REG_DWORD", 0
       "FirstTimeASPFired"="REG_DWORD", 1
       "InstallASP"="REG_DWORD", 1
       "LaunchASP"="REG_DWORD", 1
       "MaxFixLimit"="REG_DWORD", 15
       "RCPURL"="REG_SZ", "http://www.k9pcfixer.com/pcfixer/price.asp?utm_source=site&utm_campaign=default&utm_medium=newbuild"
       "RENEWALURL"="REG_SZ", "http://www.k9pcfixer.com/pcfixer/renewal.asp?utm_source=site&utm_campaign=default&utm_medium=newbuild"
       "TELNO"="REG_SZ", "(855) 716-7017"
       "utm_campaign"="REG_SZ", "default"
       "utm_medium"="REG_SZ", "newbuild"
       "utm_source"="REG_SZ", "site"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\K9-PCFixer\LANG]
       "LangID"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\K9Tools\Params]
       "affiliateid"="REG_SZ", ""
       "delayASP"="REG_DWORD", 1
       "utm_campaign"="REG_SZ", "default"
       "utm_medium"="REG_SZ", "newbuild"
       "utm_source"="REG_SZ", "site"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\K9 PCFixer_is1]
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\K9-PCFixer\K9-PCFixer.exe"
       "DisplayName"="REG_SZ", "K9 PCFixer"
       "DisplayVersion"="REG_SZ", "1.8"
       "EstimatedSize"="REG_DWORD", 12759
       "HelpLink"="REG_SZ", "http://www.k9pcfixer.com/"
       "Inno Setup: App Path"="REG_SZ", "C:\Program Files (x86)\K9-PCFixer"
       "Inno Setup: Icon Group"="REG_SZ", "K9-PCFixer"
       "Inno Setup: Language"="REG_SZ", "en"
       "Inno Setup: Setup Version"="REG_SZ", "5.5.5 (u)"
       "Inno Setup: User"="REG_SZ", "{username}"
       "InstallDate"="REG_SZ", "20210224"
       "InstallLocation"="REG_SZ", "C:\Program Files (x86)\K9-PCFixer\"
       "MajorVersion"="REG_DWORD", 1
       "MinorVersion"="REG_DWORD", 8
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "K9 Tools"
       "QuietUninstallString"="REG_SZ", ""C:\Program Files (x86)\K9-PCFixer\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ", ""C:\Program Files (x86)\K9-PCFixer\unins000.exe" /silent"
       "URLInfoAbout"="REG_SZ", "http://www.k9pcfixer.com/"
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application]
       "AutoBackupLogFiles"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Simple Malware Protector]
       "EventMessageFile"="REG_EXPAND_SZ, "C:\Windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll"
    [HKEY_CURRENT_USER\Software\K9\PC\Fixer\Key\6]
       "(Default)"="REG_BINARY, ....................................................................................................................
    [HKEY_CURRENT_USER\Software\K9-PCFixer]
       "AutoRepair"="REG_DWORD", 0
       "ConfirmBkUps"="REG_DWORD", 1
       "CurrentScanTime"="REG_BINARY, ........
       "ErrorCount"="REG_DWORD", 68
       "FirstRun"="REG_DWORD", 1
       "GoToSystemTrayOnClose"="REG_DWORD", 0
       "ImprovementProgram"="REG_DWORD", 1
       "NumTimesRCPRunned"="REG_DWORD", 1
       "RegErrFoundTillDate"="REG_DWORD", 0
       "RegErrsFixedLast"="REG_DWORD", 0
       "RegErrsFixedTillDate"="REG_DWORD", 0
       "ScheduledTime"="REG_SZ", ""
       "SetChkDontShowRedTrayPopup"="REG_DWORD", 0
       "SetChkREmovableMedia"="REG_DWORD", 1
       "SetChkSkipEmptyKeys"="REG_DWORD", 1
       "SetEnableSound"="REG_DWORD", 1
       "StartAutoScanOnLaunch"="REG_DWORD", 0
       "StartAutoScanPMUI"="REG_DWORD", 0
       "StartAutoTutorial"="REG_DWORD", 1
       "StartMinimized"="REG_DWORD", 0
       "StartScan"="REG_DWORD", 0
       "StartWhenWinBoots"="REG_DWORD", 1
       "StrLastOptimizeTime"="REG_SZ", ""
       "StrLastScan"="REG_SZ", "Wed. February 24, 2021. 09:06 AM"
       "StrLastScanResults"="REG_SZ", "68"
       "StrLastStartupOpt"="REG_SZ", ""
       "StrLatestRegDefrag"="REG_SZ", ""
       "StrLatestRestorePoint"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\K9-PCFixer\LANG]
       "LangCode"="REG_SZ", "en"
       "LangID"="REG_DWORD", 0
Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 2/24/21
Scan Time: 9:15 AM
Log File: 86dfaafe-7678-11eb-a3c7-080027235d76.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1173
Update Package Version: 1.0.37425
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}-PC\{username}

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 233361
Threats Detected: 37
Threats Quarantined: 36
Time Elapsed: 3 min, 49 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
PUP.Optional.AdvancedSystemProtector, C:\PROGRAM FILES (X86)\K9-PCFIXER\K9-PCFIXER.EXE, Quarantined, 541, 886280, , , , , E1E81F084D7FB244F664C83A652BA0D0, 3400723D3A550400313E0B8F7F57364A02B6C8AA59E3C07DD339EF53DD2B4F0E

Module: 1
PUP.Optional.AdvancedSystemProtector, C:\PROGRAM FILES (X86)\K9-PCFIXER\K9-PCFIXER.EXE, Quarantined, 541, 886280, , , , , E1E81F084D7FB244F664C83A652BA0D0, 3400723D3A550400313E0B8F7F57364A02B6C8AA59E3C07DD339EF53DD2B4F0E

Registry Key: 16
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\WOW6432NODE\K9-PCFixer, Quarantined, 541, 886287, 1.0.37425, , ame, , , 
PUP.Optional.AdvancedSystemProtector, HKCU\SOFTWARE\K9-PCFixer, Quarantined, 541, 886289, 1.0.37425, , ame, , , 
PUP.Optional.AdvancedSystemProtector, HKCU\SOFTWARE\K9\PC\Fixer, Quarantined, 541, 886290, 1.0.37425, , ame, , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\WOW6432NODE\K9\PC\Fixer, Quarantined, 541, 886286, 1.0.37425, , ame, , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\K9-PCFixer_DEFAULT, Quarantined, 541, 886284, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{A0EBD465-E4CE-4065-BE74-9CE2D4854968}, Quarantined, 541, 886284, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{A0EBD465-E4CE-4065-BE74-9CE2D4854968}, Quarantined, 541, 886284, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\K9-PCP, Quarantined, 541, 886284, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{4AF29C44-87EB-4F0D-84C2-888B2801BFD0}, Quarantined, 541, 886284, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{4AF29C44-87EB-4F0D-84C2-888B2801BFD0}, Quarantined, 541, 886284, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\K9-PCFixer, Quarantined, 541, 886280, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{8045A3E0-0AEF-4EC9-A9B4-C606535DEBD7}, Quarantined, 541, 886280, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{8045A3E0-0AEF-4EC9-A9B4-C606535DEBD7}, Quarantined, 541, 886280, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\K9-PCFixer_UPDATES, Quarantined, 541, 886280, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{465B49A1-8C4D-4DE4-B050-21FCA4DC01EA}, Quarantined, 541, 886280, , , , , , 
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{465B49A1-8C4D-4DE4-B050-21FCA4DC01EA}, Quarantined, 541, 886280, , , , , , 

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 1
PUP.Optional.AdvancedSystemProtector, C:\USERS\{username}\APPDATA\ROAMING\K9-PCFIXER, Removal Failed, 541, 886283, 1.0.37425, , ame, , , 

File: 18
PUP.Optional.SysTweak, C:\WINDOWS\SYSTEM32\ROBOOT64.EXE, Quarantined, 2881, 395666, 1.0.37425, , ame, , CB134A73A439669F0C7D5C074D70B412, 0B674CB506BC93C63965BA3E70918B2D21DFED6CD75AA8672F26D9D98431C973
PUP.Optional.AdvancedSystemProtector, C:\Users\{username}\AppData\Roaming\K9-PCFixer\backup6.bin, Quarantined, 541, 886283, , , , , 6CBDFA4EF463B5D015AFC5CDC17B5C38, E34EF16ED63052F64ACF0765DF51F2414C829B37C697ACE295C19E139BF246C4
PUP.Optional.AdvancedSystemProtector, C:\Users\{username}\AppData\Roaming\K9-PCFixer\eng_rcp.dat, Quarantined, 541, 886283, , , , , D5CC56D57C0D3B931C33F4B1CE748D43, 634402B60C3A6C8D250A700846391C3C8A15B0FFF687ED27692085F78301A088
PUP.Optional.AdvancedSystemProtector, C:\Users\{username}\AppData\Roaming\K9-PCFixer\log_02-24-2021.log, Quarantined, 541, 886283, , , , , EB7D371AA461E39851FF476E2DBACB84, 6100D32BFD6B2DBC408EE15BCBBBFE8DE5D946B4130974A0E1CA85CDA8CF3F4F
PUP.Optional.AdvancedSystemProtector, C:\Users\{username}\AppData\Roaming\K9-PCFixer\results.rcp, Quarantined, 541, 886283, , , , , 3F80BC3D5D4D73FFF4D4A025446B5A8A, 9B7D2612DB6F0FE3DB72ABA026AB33C512722125CFAE6C575018DF881C7511BF
PUP.Optional.AdvancedSystemProtector, C:\WINDOWS\TASKS\K9-PCFixer_DEFAULT.job, Quarantined, 541, 886284, , , , , 8CE629CA2E1F60D9BC64F50693AD8C7F, 7E5E3D5B7289AEB3B0B1544B88272653D16208505A09A12032ADC1D596BB49AA
PUP.Optional.AdvancedSystemProtector, C:\WINDOWS\SYSTEM32\TASKS\K9-PCFixer_DEFAULT, Quarantined, 541, 886284, 1.0.37425, , ame, , 05E78681F070782746B32B85018B301A, F62F004140856C1C8F185232C4D1DE9A66FFEE4E28DD3D5DD7FE06D3DBD64D20
PUP.Optional.AdvancedSystemProtector, C:\WINDOWS\SYSTEM32\TASKS\K9-PCP, Quarantined, 541, 886284, 1.0.37425, , ame, , EE75E9A7708CC879AF6897AACFD50B99, 1894015D5DC75BE3E9434FA5F97180A0C85B24C95B0561C434CF9732D68BF7DB
PUP.Optional.AdvancedSystemProtector, C:\WINDOWS\SYSTEM32\TASKS\K9-PCFixer, Quarantined, 541, 886280, , , , , 374B1411CF739F7A02DDA3E2DB38F609, 664EC84AF5F4399DAC33A8853611FD77A1AFB18F39F941D66EC43A2A1627AAFD
PUP.Optional.AdvancedSystemProtector, C:\WINDOWS\TASKS\K9-PCFixer_UPDATES.job, Quarantined, 541, 886280, , , , , BF745A82D3C1551D652CC9E410B3473A, 5345581391CDCBD5A90D7CC23075F2967E28EB50D5CAEAEE727B42778CA299FB
PUP.Optional.AdvancedSystemProtector, C:\WINDOWS\SYSTEM32\TASKS\K9-PCFixer_UPDATES, Quarantined, 541, 886280, , , , , EA1E1716576D39DAE9CE9AD50C1E4E41, 36DAF44CDD61DC78BE1590CBACF0341E5CB3C35784C506BAAA7F3C99C7E8E86F
PUP.Optional.AdvancedSystemProtector, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\K9-PCFixer.lnk, Quarantined, 541, 886280, , , , , 74D71FAFD47B4CCB9BB095125584C356, BA46E58061F1C420AA57942E4E09A2CECAA19405672235E296218F5D608F1BFC
PUP.Optional.AdvancedSystemProtector, C:\PROGRAM FILES (X86)\K9-PCFIXER\K9-PCFIXER.EXE, Quarantined, 541, 886280, 1.0.37425, F0CCB8FDE1613214406FA151, dds, 01128759, E1E81F084D7FB244F664C83A652BA0D0, 3400723D3A550400313E0B8F7F57364A02B6C8AA59E3C07DD339EF53DD2B4F0E
PUP.Optional.SysTweak, C:\PROGRAM FILES (X86)\K9-PCFIXER\CLEANSCHEDULE.EXE, Quarantined, 2881, 310352, 1.0.37425, , ame, , ADD9853C7FADC61255F4CEB403A210E4, D9ADFC3AC5CD8FDEF98B3F48218D51D104FF6A947557641C1069AD8A24489EAC
PUP.Optional.AdvancedSystemProtector, C:\USERS\{username}\DESKTOP\MALWAREPROTECTOR.EXE, Quarantined, 541, 911866, 1.0.37425, , ame, , 20B90A718CF55D95616A79342DBA5D06, C88800519501E455CF6A45CD88776E54CE094A90B03312CF5ACBC796932E3A42
Generic.Malware/Suspicious, C:\USERS\{username}\DOWNLOADS\K9-PCFIXER.EXE, Quarantined, 0, 392686, 1.0.37425, , shuriken, , 2672EA75CA6E136CAC7AE0156C6343F5, 899714C40EC2EFD1205726231B6A29F062B61D4A01BACD10EC80A9480A3143D7
PUP.Optional.InstallCore.Generic, C:\USERS\{username}\DESKTOP\K9-PCFIXER_QWUQ-B1.EXE, Quarantined, 9665, 511908, 1.0.37425, , ame, , 8013CA3E372D0A31C2944B502828EC3C, 063840AB837FC5B03A8477ECB4403A8416447F2D34EE9B01841EEA3BE6A9B606
PUP.Optional.AdvancedSystemProtector, C:\USERS\{username}\DOWNLOADS\MALWAREPROTECTOR.EXE, Quarantined, 541, 911866, 1.0.37425, , ame, , 20B90A718CF55D95616A79342DBA5D06, C88800519501E455CF6A45CD88776E54CE094A90B03312CF5ACBC796932E3A42

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this potentially unwanted program.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials



Also tagged with one or more of these keywords: systweak

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.