# AdwCleaner v6.046 - Logfile created 07/05/2017 at 20:01:16
# Updated on 24/04/2017 by Malwarebytes
# Database : 2017-05-05.1 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X86)
# Username : Pat - PAT-PC
# Running from : C:\Users\Pat\Downloads\adwcleaner_6.046.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****

No malicious services found.


***** [ Folders ] *****

Folder Found:  C:\ProgramData\Avg_Update_0814tb
Folder Found:  C:\Users\Pat\AppData\Local\VNT
Folder Found:  C:\Users\Pat\AppData\Local\YSearchUtil
Folder Found:  C:\Users\Pat\AppData\LocalLow\facemoods.com
Folder Found:  C:\ProgramData\Ask
Folder Found:  C:\ProgramData\Partner
Folder Found:  C:\ProgramData\Application Data\Ask
Folder Found:  C:\ProgramData\Application Data\Partner
Folder Found:  C:\Program Files\AVG Security Toolbar
Folder Found:  C:\windows\system32\config\systemprofile\AppData\Local\YSearchUtil
Folder Found:  C:\windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search


***** [ Files ] *****

File Found:  C:\Program Files\Mozilla Firefox\avg-secure-search.xml
File Found:  C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Found:  C:\Program Files\Mozilla Firefox\avg-secure-search.xml
File Found:  C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Found:  C:\Program Files\Mozilla Firefox\avg-secure-search.xml
File Found:  C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Found:  C:\Program Files\Mozilla Firefox\avg-secure-search.xml


***** [ DLL ] *****

No malicious DLLs found.


***** [ WMI ] *****

No malicious keys found.


***** [ Shortcuts ] *****

No infected shortcut found.


***** [ Scheduled Tasks ] *****

No malicious task found.


***** [ Registry ] *****

Key Found:  HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Found:  HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Key Found:  HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Key Found:  HKLM\SOFTWARE\Classes\SdcUser.SdcMailCtl
Key Found:  HKLM\SOFTWARE\Classes\SdcUser.SdcMailCtl.1
Key Found:  HKLM\SOFTWARE\Classes\Search.BrowserWndAPI
Key Found:  HKLM\SOFTWARE\Classes\Search.BrowserWndAPI.1
Key Found:  HKLM\SOFTWARE\Classes\Search.PugiObj
Key Found:  HKLM\SOFTWARE\Classes\Search.PugiObj.1
Key Found:  HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Found:  HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found:  HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Found:  HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Found:  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found:  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found:  HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found:  HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found:  HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found:  HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found:  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found:  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
Value Found:  HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Value Found:  HKU\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks [{D8278076-BC68-4484-9233-6E7F1628B56C}]
Key Found:  HKU\.DEFAULT\Software\AskPartnerNetwork
Key Found:  HKU\.DEFAULT\Software\AVG Secure Search
Key Found:  HKU\.DEFAULT\Software\Auslogics
Key Found:  HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
Key Found:  HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\APN PIP
Key Found:  HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\VNT
Key Found:  HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\YahooPartnerToolbar
Key Found:  HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2802963544-327318797-2809920788-1000\Software\facemoods.com
Key Found:  HKU\S-1-5-18\Software\AskPartnerNetwork
Key Found:  HKU\S-1-5-18\Software\AVG Secure Search
Key Found:  HKU\S-1-5-18\Software\Auslogics
Key Found:  HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
Key Found:  HKCU\Software\APN PIP
Key Found:  HKCU\Software\VNT
Key Found:  HKCU\Software\YahooPartnerToolbar
Key Found:  HKLM\SOFTWARE\PIP
Key Found:  HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984}
Key Found:  HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Found:  HKU\S-1-5-21-2802963544-327318797-2809920788-1000\Software\Microsoft\Internet Explorer\SearchScopes\{B7BE46A8-B1C3-4403-96E9-97B5AC4D910C}
Key Found:  HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984}
Key Found:  HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Found:  HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7BE46A8-B1C3-4403-96E9-97B5AC4D910C}
Key Found:  HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984}
Key Found:  HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found:  HKCU\SOFTWARE\Classes\ChromeHTML
Value Found:  HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Found:  HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Found:  HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]


***** [ Web browsers ] *****

Firefox pref Found:  [C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\prefs.js] - "browser.search.defaultengine" -  "Ask Search"
Firefox pref Found:  [C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\prefs.js] - "browser.search.order.1" -  "Ask Search"
Firefox pref Found:  [C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\prefs.js] - "browser.search.selectedEngine" -  "Ask Search"
Firefox pref Found:  [C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\prefs.js] - "extensions.APN_TB.first-previous-keyword-url" -  ""
Firefox pref Found:  [C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\v1kw8rww.default\prefs.js] - "extensions.ASI-G.my-keyword-url" -  "\"hxxp://asksearch.ask.com/redirect?client=ff&src=kw&tb=ASI-G&o=APN10705&itbv=1
No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [7837 Bytes] - [07/05/2017 20:01:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7910 Bytes] ##########