# -------------------------------
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build:    12-17-2019
# Database: 2019-12-17.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-30-2019
# Duration: 00:01:22
# OS:       Windows 10 Home
# Scanned:  35232
# Detected: 81


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Adware.Heuristic            C:\ProgramData\4116FE0227737BC9
PUP.Optional.Chromatic          C:\Users\Administrator\AppData\Local\Chromatic Browser
PUP.Optional.Chromatic          C:\Users\Guest\AppData\Local\Chromatic Browser
PUP.Optional.Chromatic          C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
PUP.Optional.Legacy             C:\ProgramData\RoboSaver
PUP.Optional.Legacy             C:\Users\Administrator\AppData\Local\torch
PUP.Optional.Legacy             C:\Users\Guest\AppData\Local\torch
PUP.Optional.Legacy             C:\Users\HomeGroupUser$\AppData\Local\torch
PUP.Optional.Legacy             C:\Users\Jana\AppData\Local\torch
PUP.Optional.Legacy             C:\Users\Public\Documents\Downloaded Installers
PUP.Optional.MultiPlug          C:\ProgramData\ALLSAVER
PUP.Optional.MultiPlug          C:\ProgramData\TAKETHECOUPON
PUP.Optional.MultiPlug          C:\ProgramData\YOUTUBEADBLOCKE

***** [ Files ] *****

PUP.Optional.Legacy             C:\Windows\System32\drivers\swdumon.sys
PUP.Optional.Legacy             C:\Windows\System32\log\iSafeKrnlCall.log
PUP.Optional.MindSpark          C:\Users\Jana\AppData\Local\Google\Chrome\User Data\Default\LOCAL STORAGE\HTTP_MYRADIOACCESS.DL.MYWAY.COM_0.LOCALSTORAGE
PUP.Optional.MindSpark          C:\Users\Jana\AppData\Local\Google\Chrome\User Data\Default\LOCAL STORAGE\HTTP_MYRADIOACCESS.DL.MYWAY.COM_0.LOCALSTORAGE-JOURNAL
PUP.Optional.MindSpark          C:\Users\Jana\AppData\Local\Google\Chrome\User Data\Default\LOCAL STORAGE\HTTP_MYRADIOACCESS.DL.TB.ASK.COM_0.LOCALSTORAGE
PUP.Optional.MindSpark          C:\Users\Jana\AppData\Local\Google\Chrome\User Data\Default\LOCAL STORAGE\HTTP_MYRADIOACCESS.DL.TB.ASK.COM_0.LOCALSTORAGE-JOURNAL

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Adware.Heuristic            HKLM\SOFTWARE\Classes\Toolbar.CT1750559
PUP.Optional.Ask                HKU\.DEFAULT\Software\AskPartnerNetwork
PUP.Optional.Ask                HKU\S-1-5-18\Software\AskPartnerNetwork
PUP.Optional.Conduit            HKCU\Software\Conduit
PUP.Optional.Jawego             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2F993686-9316-42CD-AA1B-EED49C5DCB56}
PUP.Optional.Jawego             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Tuneup Pro
PUP.Optional.Legacy             HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
PUP.Optional.Legacy             HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|BackgroundContainer
PUP.Optional.Legacy             HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|BackgroundContainerV2
PUP.Optional.Legacy             HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Optimizer Pro
PUP.Optional.Legacy             HKCU\Software\Mozilla\Extends
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A540626-C25F-49CF-83B1-9BE2ABA65AAC}
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\advanced-System Protector_startup
PUP.Optional.Legacy             HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ApnTBMon
PUP.Optional.Legacy             HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
PUP.Optional.Legacy             HKU\S-1-5-18\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
PUP.Optional.MyPCBackup         HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{65CA9B83-2A85-40C3-935C-C788698BE695}
PUP.Optional.MyPCBackup         HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65CA9B83-2A85-40C3-935C-C788698BE695}
PUP.Optional.MyPCBackup         HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LaunchSignup
PUP.Optional.OptimizerPro       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{947EC942-F0D9-4C1D-B5C8-D93B7D457536}
PUP.Optional.OptimizerPro       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimizer Pro Schedule
PUP.Optional.SlimCleanerPlus    HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.SlimCleanerPlus    HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
PUP.Optional.SlimCleanerPlus    HKLM\Software\Wow6432Node\SlimWare Utilities Inc
PUP.Optional.SupTab             HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
PUP.Optional.SupTab             HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID|{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
PUP.Optional.SweetPage.ShrtCln  HKLM\Software\Microsoft\Internet Explorer\Main|Default_Search_URL
PUP.Optional.SweetPage.ShrtCln  HKLM\Software\Microsoft\Internet Explorer\Main|Search Page

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Preinstalled Software ] *****

Preinstalled.HPMediaSmart   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EDD3BFF5-4BDB-4175-B8D4-0BB64C487BFD} 
Preinstalled.HPMediaSmart   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MirageAgent 
Preinstalled.HPMediaSmart   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{01FB4998-33C4-4431-85ED-079E3EEFE75D} 
Preinstalled.HPMediaSmart   Task   C:\Windows\System32\Tasks\MIRAGEAGENT 
Preinstalled.LenovoEasyCamera   Folder   C:\Program Files (x86)\USB CAMERA 
Preinstalled.LenovoEasyCamera   Folder   C:\Program Files (x86)\USB CAMERA2 
Preinstalled.LenovoEasyCamera   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|331BigDog 
Preinstalled.LenovoEasyCamera   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|331BigDog 
Preinstalled.LenovoEasyCamera   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332} 
Preinstalled.LenovoEasyCamera   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0333} 
Preinstalled.LenovoEnergyManagement   Folder   C:\Program Files (x86)\LENOVO\ENERGY MANAGEMENT 
Preinstalled.LenovoEnergyManagement   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Energy Management 
Preinstalled.LenovoEnergyManagement   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|EnergyUtility 
Preinstalled.LenovoEnergyManagement   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Energy Management 
Preinstalled.LenovoEnergyManagement   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Run|EnergyUtility 
Preinstalled.LenovoEnergyManagement   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB} 
Preinstalled.LenovoEnergyManagement   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{D0956C11-0F60-43FE-99AD-524E833471BB} 
Preinstalled.LenovoPower2Go   File   C:\Users\TEMP.JANKA.000\Desktop\CyberLink Power2Go.lnk 
Preinstalled.LenovoPower2Go   File   C:\Users\TEMP.JANKA.001\Desktop\CyberLink Power2Go.lnk 
Preinstalled.LenovoPower2Go   File   C:\Users\TEMP.JANKA\Desktop\CyberLink Power2Go.lnk 
Preinstalled.LenovoPower2Go   File   C:\Users\TEMP\Desktop\CyberLink Power2Go.lnk 
Preinstalled.LenovoPower2Go   Folder   C:\Program Files (x86)\LENOVO\POWER2GO 
Preinstalled.LenovoPower2Go   Folder   C:\Users\TEMP.JANKA.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LENOVO\POWER2GO 
Preinstalled.LenovoPower2Go   Folder   C:\Users\TEMP.JANKA.001\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LENOVO\POWER2GO 
Preinstalled.LenovoPower2Go   Folder   C:\Users\TEMP.JANKA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LENOVO\POWER2GO 
Preinstalled.LenovoPower2Go   Folder   C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LENOVO\POWER2GO 
Preinstalled.LenovoPower2Go   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|UpdateP2GShortCut 
Preinstalled.LenovoPower2Go   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{40BF1E83-20EB-11D8-97C5-0009C5020658} 
Preinstalled.LenovoPowerDVD   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|RemoteControl10 
Preinstalled.LenovoPowerDVD   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} 
Preinstalled.LenovoPowerDVD   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} 
Preinstalled.LenovoYouCam   Folder   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LENOVO\YOUCAM 
Preinstalled.LenovoYouCam   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|YouCam Mirage 
Preinstalled.LenovoYouCam   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|YouCam Tray 



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
