# -------------------------------
# Malwarebytes AdwCleaner 8.0.8.0
# -------------------------------
# Build:    10-08-2020
# Database: 2020-09-29.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    11-02-2020
# Duration: 00:00:41
# OS:       Windows 8.1
# Scanned:  31837
# Detected: 61


***** [ Services ] *****

PUP.Optional.Legacy             WCAssistantService

***** [ Folders ] *****

Adware.pokki                    C:\Users\Majko\AppData\Local\Pokki
Adware.pokki                    C:\Users\Public\Pokki
PUP.Optional.Legacy             C:\Users\Kitti\AppData\Local\SweetLabs App Platform
PUP.Optional.WebCompanion       C:\Program Files (x86)\Lavasoft\Web Companion
PUP.Optional.WebCompanion       C:\ProgramData\Application Data\Lavasoft\Web Companion
PUP.Optional.WebCompanion       C:\ProgramData\Lavasoft\Web Companion
PUP.Optional.WebCompanion       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
PUP.Optional.WebCompanion       C:\Users\Kitti\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
PUP.Optional.WebCompanion       C:\Users\Kitti\AppData\Roaming\Lavasoft\Web Companion

***** [ Files ] *****

PUP.Optional.PCAppStore         C:\Users\Kitti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
PUP.Optional.WebCompanion       C:\Windows\Temp\WebCompanion.zip

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.Legacy             C:\Windows\System32\Tasks\SWEETLABS APP PLATFORM

***** [ Registry ] *****

Adware.pokki                    HKCU\Software\Classes\pokki
Adware.pokki                    HKCU\Software\SweetLabs App Platform
PUP.Adware.Heuristic            HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5786953d-67de-4223-a9ca-dd8bceb3ffb7}|DisplayIcon
PUP.Adware.Heuristic            HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5786953d-67de-4223-a9ca-dd8bceb3ffb7}|DisplayName
PUP.Adware.Heuristic            HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5786953d-67de-4223-a9ca-dd8bceb3ffb7}|UninstallString
PUP.Optional.InstallCore        HKCU\Software\csastats
PUP.Optional.Legacy             HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BDF61FAE-9D19-40F0-8F34-688DEB334CA9}
PUP.Optional.Legacy             HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
PUP.Optional.Legacy             HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_AP
PUP.Optional.Legacy             HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SweetLabs_Start_Menu
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{675BC329-4CDE-41E5-AEAE-1F5C56F89F27}
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SweetLabs App Platform
PUP.Optional.WebCompanion       HKCU\Software\Lavasoft\Web Companion
PUP.Optional.WebCompanion       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion       HKLM\Software\Wow6432Node\Lavasoft\Web Companion
PUP.Optional.WebCompanion       HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion       HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

PUP.Optional.DefaultSearch.ShrtCln Adaware Secure Search - nladljmabboanhihfkjacnnkgjhnokhj
PUP.Optional.DefaultSearch.ShrtCln nladljmabboanhihfkjacnnkgjhnokhj

***** [ Chromium URLs ] *****

PUP.Optional.Conduit            Conduit
PUP.Optional.Legacy             http://isearch.avg.com/?cid={2DCB7B6C-78AE-4160-97DA-9F95C2427FFD}&mid=95abc228e50147d0a628318208ae19c0-05924a822f820cd1838aea3081aac3fdeaa5fe0c&lang=en&ds=pp011&pr=sa&d=2012-07-03 21:53:08&v=11.1.0.12&sap=hp

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

Preinstalled.HPTouchSmart   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{604EC215-DD8F-4075-9B0F-26137F6FD54C} 
Preinstalled.HPTouchSmart   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CLMLSvc 
Preinstalled.HPTouchSmart   Task   C:\Windows\System32\Tasks\CLMLSVC 
Preinstalled.LenovoHotkeyManager   Folder   C:\Program Files\LENOVO\HOTKEY 
Preinstalled.LenovoHotkeyManager   Registry   HKLM\Software\Classes\CLSID\{A48CA1A4-C36B-44f2-8090-19E08DF4365E} 
Preinstalled.LenovoHotkeyManager   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|LenovoOptMouseUpdate 
Preinstalled.LenovoHotkeyManager   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Run|LenovoOptMouseUpdate 
Preinstalled.LenovoHotkeyManager   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\OnScreenDisplay 
Preinstalled.LenovoIMController   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Lenovo Dependency Package_is1 
Preinstalled.LenovoPower2Go   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} 
Preinstalled.LenovoPower2Go   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{40BF1E83-20EB-11D8-97C5-0009C5020658} 
Preinstalled.LenovoPowerDVD   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} 
Preinstalled.LenovoPowerDVD   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} 
Preinstalled.LenovoPowerManager   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8A9B95E3-1D69-4385-913C-DBECF5577AB4} 
Preinstalled.LenovoPowerManager   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A9B95E3-1D69-4385-913C-DBECF5577AB4} 
Preinstalled.LenovoPowerManager   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PMTask 
Preinstalled.LenovoPowerManager   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405} 
Preinstalled.LenovoPowerManager   Task   C:\Windows\System32\Tasks\PMTASK 
Preinstalled.LenovoSolutionCenter   Folder   C:\Program Files\LENOVO\LENOVO SOLUTION CENTER 
Preinstalled.LenovoThinkVantageCommunicationsUtility   Folder   C:\Program Files\LENOVO\COMMUNICATIONS UTILITY 
Preinstalled.LenovoThinkVantageCommunicationsUtility   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|LENOVO.TPKNRRES 
Preinstalled.LenovoThinkVantageCommunicationsUtility   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Run|LENOVO.TPKNRRES 
Preinstalled.LenovoThinkVantageCommunicationsUtility   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1 
Preinstalled.LenovoUpdate   Folder   C:\Program Files (x86)\LENOVO\SYSTEM UPDATE 
Preinstalled.LenovoUpdate   Registry   HKLM\Software\Wow6432Node\\Classes\CLSID\{25C64847-B900-48AD-A164-1B4F9B774650} 
Preinstalled.LenovoUpdate   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{25C64847-B900-48AD-A164-1B4F9B774650} 
Preinstalled.Pokki   File   C:\Users\Kitti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Menu.lnk 



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
