# -------------------------------

# Malwarebytes AdwCleaner 7.2.4.0

# -------------------------------
# Build: 09-25-2018
# Database: 2018-11-14.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 11-14-2018
# Duration: 00:00:31
# OS: Windows 7 Professional
# Cleaned: 54
# Failed: 1

***** [ Services ] *****

Deleted Updater.Mail.Ru

***** [ Folders ] *****

Deleted C:\Program Files\Default Company Name

Deleted C:\ProgramData\42A3D2E4-5863-1
Deleted C:\ProgramData\42A3D2E4-39A1-0
Deleted C:\ProgramData\ByteFence
Deleted C:\ProgramData\Mail.Ru
Deleted C:\Program Files\Mail.Ru
Deleted C:\Windows\System32\config\systemprofile\AppData\Local\Mail.Ru
Deleted C:\Users\jhon\AppData\Local\Mail.Ru
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart
Application Controller
Deleted C:\Program Files\Smart Application Controller
Deleted C:\Users\jhon\AppData\Roaming\Smart Application Controller

***** [ Files ] *****

Deleted C:\Users\jhon\Desktop\?????? ? ?????????.url

Deleted C:\Users\jhon\Favorites\?????? ? ?????????.url
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Facebook.lnk
Deleted C:\Users\Public\Desktop\Facebook.lnk
Deleted C:\Users\jhon\Favorites\Mail.Ru.url
Deleted C:\Users\jhon\AppData\Roaming\Microsoft\Internet Explorer\Quick
Launch\Mail.Ru.lnk

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted C:\Windows\System32\Tasks\MailRuUpdater

***** [ Registry ] *****

Deleted
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
Deleted HKU\S-1-5-18\Software\ByteFence
Deleted HKU\.DEFAULT\Software\ByteFence
Deleted HKLM\Software\Wow6432Node\ByteFence
Deleted HKLM\SOFTWARE\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION|ByteFence.exe
Deleted HKCU\Software\Conduit
Deleted HKLM\Software\Conduit
Deleted HKCU\Software\csastats
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Run|MailRuUpdater
Deleted
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater
Deleted HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\
{68AE298D-7E8A-4F53-BE55-15D2B065F6C0}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\
{8E8F97CD-60B5-456F-A201-73065652D099}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E8F97CD-
60B5-456F-A201-73065652D099}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{8E8F97CD-60B5-456F-A201-73065652D099}
Deleted HKLM\Software\Classes\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099}
Deleted HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Tasks\{2EE537F2-6A97-4F0E-B0BE-126598641D15}
Deleted HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Schedule\TaskCache\Tree\MailRuUpdater
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C0C3A6C6-
03BC-4195-8FCB-AEA091301353}
Deleted HKCU\Software\Microsoft\Internet Explorer\AboutUrls|Tabs
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-
4ac6-41f2-a955-ea576e553146}
Deleted HKCU\Software\AppDataLow\Software\Mail.Ru
Deleted HKCU\Software\Mail.Ru
Deleted HKLM\Software\Mail.Ru
Deleted HKCU\Software\Mozilla\NativeMessagingHosts\ru.mail.go.ext_info_host
Deleted
HKCU\Software\Google\Chrome\NativeMessagingHosts\ru.mail.go.ext_info_host
Deleted HKLM\Software\Classes\IESearchPlugin.MailRuBHO
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-
C22C-4172-89FF-45215A135AC7}
Deleted HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted HKCU\Software\One System Care
Deleted HKCU\Software\PRODUCTSETUP
Deleted
HKCU\Software\ProductSetup\Uninstall\0S1P1T1C1R1MtT0P1C1F2X1L1Q1P1QtT1S2UtT0Y1T1M1F
1F
Deleted HKCU\Software\ProductSetup\Uninstall\0B2U2Z1P0F1P1G1R1P1V0A1Q1Q0O1G

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

Deleted ????? Mail.Ru

Deleted ???????? ???????? Mail.Ru
Not Deleted ?????
Deleted ?????

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

*************************

[+] Delete Tracing Keys

[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5846 octets] - [14/11/2018 11:21:13]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########