2019-10-14 21:08:34 : [Application] AdwCleaner 7 . 4 . 1 launched 2019-10-14 21:08:37 : [Telemetry] Sending hello ication updates 2019-10-14 21:08:38 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-14 21:08:38 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-14 21:08:38 : [SslCert] Locality Name ("Santa Clara") 2019-10-14 21:08:38 : [SslCert] Organization ("Malwarebytes Inc") 2019-10-14 21:08:38 : [SslCert] Certificate EffectiveDate: "pon. pa? 2 00:00:00 2017 GMT" 2019-10-14 21:08:38 : [SslCert] Certificate ExpirationDate: "wt. pa? 6 12:00:00 2020 GMT" 2019-10-14 21:08:38 : [SslCert] ALPN: None 2019-10-14 21:08:38 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-14 21:08:38 : [SslCert] KXE: "ECDH" 2019-10-14 21:08:38 : [SslCert] Protocol: "TLSv1.2" 2019-10-14 21:08:38 : [Telemetry] Status code: QVariant(int, 200) 2019-10-14 21:08:39 : [Button clicked] EULA agreed 2019-10-14 21:08:49 : [Button clicked] Settings menu item 2019-10-14 21:09:08 : [Button clicked] Log files menu item 2019-10-14 21:09:11 : [Button clicked] Dashboard menu item 2019-10-14 21:09:13 : [Button clicked] Quarantine menu item 2019-10-14 21:09:21 : [Button clicked] Dashboard menu item 2019-10-14 21:10:18 : [Button clicked] Scan 2019-10-14 21:10:18 : [Scan] Started 2019-10-14 21:10:18 : [Database] Downloading database 2019-10-14 21:10:20 : [Database] Checking integrity 2019-10-14 21:10:20 : [Database] Found 2586 families 2019-10-14 21:10:20 : [Database] Database v "2019-10-14.1" 2019-10-14 21:10:21 : [Loading paths] Local paths loaded 2019-10-14 21:10:21 : [Loading paths] Chrome paths loaded 2019-10-14 21:10:21 : [Loading paths] User Keys loaded 2019-10-14 21:10:21 : [Module initialized] "File" 2019-10-14 21:10:21 : [Module initialized] "Folder" 2019-10-14 21:10:21 : [Module initialized] "RegistryKey" 2019-10-14 21:10:21 : [Module initialized] "RegistryValue" 2019-10-14 21:10:21 : [Module initialized] "TaskName" 2019-10-14 21:10:21 : [Module initialized] "Service" 2019-10-14 21:10:21 : [Module initialized] "Winlogon" 2019-10-14 21:10:21 : [Module initialized] "URL" 2019-10-14 21:10:21 : [Module initialized] "RegAppInit" 2019-10-14 21:10:21 : [Module initialized] "RegClasses" 2019-10-14 21:10:21 : [Module initialized] "DNS" 2019-10-14 21:10:21 : [Module initialized] "RegFirewallPolicy" 2019-10-14 21:10:21 : [Module initialized] "RegGuid" 2019-10-14 21:10:21 : [Module initialized] "RegIEElevationPolicy" 2019-10-14 21:10:21 : [Module initialized] "RegOther" 2019-10-14 21:10:21 : [Module initialized] "RegProductID" 2019-10-14 21:10:21 : [Module initialized] "RegSoftware" 2019-10-14 21:10:21 : [Module initialized] "RegStartup" 2019-10-14 21:10:21 : [Module initialized] "WMI" 2019-10-14 21:10:21 : [Module initialized] "ChromiumExt" 2019-10-14 21:10:21 : [Module initialized] "FirefoxExt" 2019-10-14 21:10:21 : [Module initialize] Scan Browser 2019-10-14 21:10:22 : [Module initialize] Scan Browser FF 2019-10-14 21:10:22 : [Module initialize] FF start pages loaded 2019-10-14 21:10:22 : [Module initialize] FF search providers loaded 2019-10-14 21:10:22 : [Module initialize] FF plugin list loaded 2019-10-14 21:10:22 : [Scan] Exclusions loaded 2019-10-14 21:10:26 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "C:\\Windows\\System32\\Tasks\\ERRORFIXKIT" [ "Task" ] 2019-10-14 21:10:26 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-14 21:10:26 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-14 21:10:26 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9BD65709-129A-4E6B-A886-F2358F833CB0}\u0000" [ "Registry" ] 2019-10-14 21:10:26 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\Software\\ErrorFixKIT" [ "Registry" ] 2019-10-14 21:10:27 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "C:\\Program Files (x86)\\ASUS\\SPLENDID" [ "Folder" ] 2019-10-14 21:10:27 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "C:\\Windows\\System32\\Tasks\\ASUS SPLENDID ACMON" [ "Task" ] 2019-10-14 21:10:27 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ASUS Splendid ACMON" [ "Registry" ] 2019-10-14 21:10:27 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ASUS Splendid ACMON" [ "Registry" ] 2019-10-14 21:10:27 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{706A649B-64F6-4DC7-98B8-B12160ABB23F}\u0000" [ "Registry" ] 2019-10-14 21:10:27 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{0969AF05-4FF6-4C00-9406-43599238DE0D}" [ "Registry" ] 2019-10-14 21:10:27 : [Scan] Item detected: "Preinstalled.ASUSProductRegistration" , "C:\\ProgramData\\ASUS\\APRP" [ "Folder" ] 2019-10-14 21:10:29 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "C:\\Windows\\System32\\Tasks\\UPDATE CHECKER" [ "Task" ] 2019-10-14 21:10:29 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\Update Checker" [ "Registry" ] 2019-10-14 21:10:29 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\Update Checker" [ "Registry" ] 2019-10-14 21:10:29 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9275F7F0-8754-4DC6-A4CC-124E532E8C6F}\u0000" [ "Registry" ] 2019-10-14 21:10:30 : [Telemetry] Sending to Influx 2019-10-14 21:10:30 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-10-14 21:10:30 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-10-14 21:10:30 : [SslCert] Locality Name () 2019-10-14 21:10:30 : [SslCert] Organization () 2019-10-14 21:10:30 : [SslCert] Certificate EffectiveDate: "niedz. sie 18 10:50:38 2019 GMT" 2019-10-14 21:10:30 : [SslCert] Certificate ExpirationDate: "sob. lis 16 10:50:38 2019 GMT" 2019-10-14 21:10:30 : [SslCert] ALPN: Yes 2019-10-14 21:10:30 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-14 21:10:30 : [SslCert] KXE: "ECDH" 2019-10-14 21:10:30 : [SslCert] Protocol: "TLSv1.2" 2019-10-14 21:10:30 : [Telemetry] Status code: QVariant(int, 204) 2019-10-14 21:10:30 : [Telemetry] Sending to DSE 2019-10-14 21:10:31 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-14 21:10:31 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-14 21:10:31 : [SslCert] Locality Name ("San Jose") 2019-10-14 21:10:31 : [SslCert] Organization ("Malwarebytes Inc.") 2019-10-14 21:10:31 : [SslCert] Certificate EffectiveDate: "czw. lut 22 00:00:00 2018 GMT" 2019-10-14 21:10:31 : [SslCert] Certificate ExpirationDate: "?r. kwi 22 12:00:00 2020 GMT" 2019-10-14 21:10:31 : [SslCert] ALPN: Yes 2019-10-14 21:10:31 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-14 21:10:31 : [SslCert] KXE: "ECDH" 2019-10-14 21:10:31 : [SslCert] Protocol: "TLSv1.2" 2019-10-14 21:10:31 : [Telemetry] Status code: QVariant(int, 201) 2019-10-14 21:10:31 : [Scan] Finished 2019-10-14 21:10:53 : [Button clicked] Next 2019-10-14 21:10:58 : [Button clicked] Bundleware found ok button 2019-10-14 21:11:10 : [Button clicked] Quarantine menu item 2019-10-14 21:11:13 : [Button clicked] Dashboard menu item 2019-10-14 21:11:32 : [Button clicked] Previous 2019-10-14 21:11:36 : [Button clicked] Cancel 2019-10-14 21:11:37 : [Button clicked] Survey closed 2019-10-14 21:11:37 : [Telemetry] Sending NPS Survey 2019-10-14 21:11:38 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-10-14 21:11:38 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-10-14 21:11:38 : [SslCert] Locality Name () 2019-10-14 21:11:38 : [SslCert] Organization () 2019-10-14 21:11:38 : [SslCert] Certificate EffectiveDate: "niedz. sie 18 10:50:38 2019 GMT" 2019-10-14 21:11:38 : [SslCert] Certificate ExpirationDate: "sob. lis 16 10:50:38 2019 GMT" 2019-10-14 21:11:38 : [SslCert] ALPN: Yes 2019-10-14 21:11:38 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-14 21:11:38 : [SslCert] KXE: "ECDH" 2019-10-14 21:11:38 : [SslCert] Protocol: "TLSv1.2" 2019-10-14 21:11:38 : [Telemetry] Status code: QVariant(int, 204) 2019-10-14 21:11:43 : [Application] Closing AdwCleaner 2019-10-15 13:57:59 : [Application] AdwCleaner 7 . 4 . 1 launched 2019-10-15 13:58:03 : [Telemetry] Sending hello ication updates 2019-10-15 13:58:04 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-15 13:58:04 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-15 13:58:04 : [SslCert] Locality Name ("Santa Clara") 2019-10-15 13:58:04 : [SslCert] Organization ("Malwarebytes Inc") 2019-10-15 13:58:04 : [SslCert] Certificate EffectiveDate: "pon. pa? 2 00:00:00 2017 GMT" 2019-10-15 13:58:04 : [SslCert] Certificate ExpirationDate: "wt. pa? 6 12:00:00 2020 GMT" 2019-10-15 13:58:04 : [SslCert] ALPN: None 2019-10-15 13:58:04 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 13:58:04 : [SslCert] KXE: "ECDH" 2019-10-15 13:58:04 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 13:58:04 : [Telemetry] Status code: QVariant(int, 200) 2019-10-15 13:58:12 : [Button clicked] Scan 2019-10-15 13:58:12 : [Scan] Started 2019-10-15 13:58:13 : [Database] Downloading database 2019-10-15 13:58:15 : [Database] Checking integrity 2019-10-15 13:58:15 : [Database] Found 2586 families 2019-10-15 13:58:15 : [Database] Database v "2019-10-14.1" 2019-10-15 13:58:15 : [Loading paths] Local paths loaded 2019-10-15 13:58:15 : [Loading paths] Chrome paths loaded 2019-10-15 13:58:15 : [Loading paths] User Keys loaded 2019-10-15 13:58:15 : [Module initialized] "File" 2019-10-15 13:58:15 : [Module initialized] "Folder" 2019-10-15 13:58:15 : [Module initialized] "RegistryKey" 2019-10-15 13:58:15 : [Module initialized] "RegistryValue" 2019-10-15 13:58:16 : [Module initialized] "TaskName" 2019-10-15 13:58:16 : [Module initialized] "Service" 2019-10-15 13:58:16 : [Module initialized] "Winlogon" 2019-10-15 13:58:19 : [Module initialized] "URL" 2019-10-15 13:58:19 : [Module initialized] "RegAppInit" 2019-10-15 13:58:19 : [Module initialized] "RegClasses" 2019-10-15 13:58:19 : [Module initialized] "DNS" 2019-10-15 13:58:19 : [Module initialized] "RegFirewallPolicy" 2019-10-15 13:58:19 : [Module initialized] "RegGuid" 2019-10-15 13:58:19 : [Module initialized] "RegIEElevationPolicy" 2019-10-15 13:58:19 : [Module initialized] "RegOther" 2019-10-15 13:58:19 : [Module initialized] "RegProductID" 2019-10-15 13:58:19 : [Module initialized] "RegSoftware" 2019-10-15 13:58:19 : [Module initialized] "RegStartup" 2019-10-15 13:58:19 : [Module initialized] "WMI" 2019-10-15 13:58:19 : [Module initialized] "ChromiumExt" 2019-10-15 13:58:19 : [Module initialized] "FirefoxExt" 2019-10-15 13:58:19 : [Module initialize] Scan Browser 2019-10-15 13:58:20 : [Module initialize] Scan Browser FF 2019-10-15 13:58:20 : [Module initialize] FF start pages loaded 2019-10-15 13:58:20 : [Module initialize] FF search providers loaded 2019-10-15 13:58:20 : [Module initialize] FF plugin list loaded 2019-10-15 13:58:20 : [Scan] Exclusions loaded 2019-10-15 13:58:30 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "C:\\Windows\\System32\\Tasks\\ERRORFIXKIT" [ "Task" ] 2019-10-15 13:58:30 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9BD65709-129A-4E6B-A886-F2358F833CB0}\u0000" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\Software\\ErrorFixKIT" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "C:\\Program Files (x86)\\ASUS\\SPLENDID" [ "Folder" ] 2019-10-15 13:58:30 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "C:\\Windows\\System32\\Tasks\\ASUS SPLENDID ACMON" [ "Task" ] 2019-10-15 13:58:30 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ASUS Splendid ACMON" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ASUS Splendid ACMON" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{706A649B-64F6-4DC7-98B8-B12160ABB23F}\u0000" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{0969AF05-4FF6-4C00-9406-43599238DE0D}" [ "Registry" ] 2019-10-15 13:58:30 : [Scan] Item detected: "Preinstalled.ASUSProductRegistration" , "C:\\ProgramData\\ASUS\\APRP" [ "Folder" ] 2019-10-15 13:58:33 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "C:\\Windows\\System32\\Tasks\\UPDATE CHECKER" [ "Task" ] 2019-10-15 13:58:33 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\Update Checker" [ "Registry" ] 2019-10-15 13:58:33 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\Update Checker" [ "Registry" ] 2019-10-15 13:58:33 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9275F7F0-8754-4DC6-A4CC-124E532E8C6F}\u0000" [ "Registry" ] 2019-10-15 13:58:33 : [Telemetry] Sending to Influx 2019-10-15 13:58:34 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-10-15 13:58:34 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-10-15 13:58:34 : [SslCert] Locality Name () 2019-10-15 13:58:34 : [SslCert] Organization () 2019-10-15 13:58:34 : [SslCert] Certificate EffectiveDate: "niedz. sie 18 10:50:38 2019 GMT" 2019-10-15 13:58:34 : [SslCert] Certificate ExpirationDate: "sob. lis 16 10:50:38 2019 GMT" 2019-10-15 13:58:34 : [SslCert] ALPN: Yes 2019-10-15 13:58:34 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 13:58:34 : [SslCert] KXE: "ECDH" 2019-10-15 13:58:34 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 13:58:34 : [Telemetry] Status code: QVariant(int, 204) 2019-10-15 13:58:34 : [Telemetry] Sending to DSE 2019-10-15 13:58:35 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-15 13:58:35 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-15 13:58:35 : [SslCert] Locality Name ("San Jose") 2019-10-15 13:58:35 : [SslCert] Organization ("Malwarebytes Inc.") 2019-10-15 13:58:35 : [SslCert] Certificate EffectiveDate: "czw. lut 22 00:00:00 2018 GMT" 2019-10-15 13:58:35 : [SslCert] Certificate ExpirationDate: "?r. kwi 22 12:00:00 2020 GMT" 2019-10-15 13:58:35 : [SslCert] ALPN: Yes 2019-10-15 13:58:35 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 13:58:35 : [SslCert] KXE: "ECDH" 2019-10-15 13:58:35 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 13:58:35 : [Telemetry] Status code: QVariant(int, 201) 2019-10-15 13:58:35 : [Scan] Finished 2019-10-15 13:58:40 : [Button clicked] Next 2019-10-15 13:58:42 : [Button clicked] Previous 2019-10-15 13:58:45 : [Button clicked] Next 2019-10-15 13:58:46 : [Button clicked] Previous 2019-10-15 13:58:54 : [Button clicked] Next 2019-10-15 13:59:27 : [Application] Closing AdwCleaner 2019-10-15 13:59:33 : [Application] AdwCleaner 7 . 4 . 1 launched 2019-10-15 13:59:34 : [AdwUpgrade] Checking application updates 2019-10-15 13:59:35 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-15 13:59:35 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-15 13:59:35 : [SslCert] Locality Name ("Santa Clara") 2019-10-15 13:59:35 : [SslCert] Organization ("Malwarebytes Inc") 2019-10-15 13:59:35 : [SslCert] Certificate EffectiveDate: "pon. pa? 2 00:00:00 2017 GMT" 2019-10-15 13:59:35 : [SslCert] Certificate ExpirationDate: "wt. pa? 6 12:00:00 2020 GMT" 2019-10-15 13:59:35 : [SslCert] ALPN: None 2019-10-15 13:59:35 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 13:59:35 : [SslCert] KXE: "ECDH" 2019-10-15 13:59:35 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 13:59:35 : [Telemetry] Status code: QVariant(int, 200) 2019-10-15 13:59:38 : [Button clicked] Scan 2019-10-15 13:59:38 : [Scan] Started 2019-10-15 13:59:38 : [Database] Downloading database 2019-10-15 13:59:39 : [Database] Checking integrity 2019-10-15 13:59:40 : [Database] Found 2586 families 2019-10-15 13:59:40 : [Database] Database v "2019-10-14.1" 2019-10-15 13:59:40 : [Loading paths] Local paths loaded 2019-10-15 13:59:40 : [Loading paths] Chrome paths loaded 2019-10-15 13:59:40 : [Loading paths] User Keys loaded 2019-10-15 13:59:40 : [Module initialized] "File" 2019-10-15 13:59:40 : [Module initialized] "Folder" 2019-10-15 13:59:40 : [Module initialized] "RegistryKey" 2019-10-15 13:59:40 : [Module initialized] "RegistryValue" 2019-10-15 13:59:40 : [Module initialized] "TaskName" 2019-10-15 13:59:40 : [Module initialized] "Service" 2019-10-15 13:59:40 : [Module initialized] "Winlogon" 2019-10-15 13:59:40 : [Module initialized] "URL" 2019-10-15 13:59:40 : [Module initialized] "RegAppInit" 2019-10-15 13:59:40 : [Module initialized] "RegClasses" 2019-10-15 13:59:40 : [Module initialized] "DNS" 2019-10-15 13:59:40 : [Module initialized] "RegFirewallPolicy" 2019-10-15 13:59:40 : [Module initialized] "RegGuid" 2019-10-15 13:59:40 : [Module initialized] "RegIEElevationPolicy" 2019-10-15 13:59:40 : [Module initialized] "RegOther" 2019-10-15 13:59:40 : [Module initialized] "RegProductID" 2019-10-15 13:59:40 : [Module initialized] "RegSoftware" 2019-10-15 13:59:40 : [Module initialized] "RegStartup" 2019-10-15 13:59:40 : [Module initialized] "WMI" 2019-10-15 13:59:40 : [Module initialized] "ChromiumExt" 2019-10-15 13:59:40 : [Module initialized] "FirefoxExt" 2019-10-15 13:59:40 : [Module initialize] Scan Browser 2019-10-15 13:59:41 : [Module initialize] Scan Browser FF 2019-10-15 13:59:41 : [Module initialize] FF start pages loaded 2019-10-15 13:59:41 : [Module initialize] FF search providers loaded 2019-10-15 13:59:41 : [Module initialize] FF plugin list loaded 2019-10-15 13:59:41 : [Scan] Exclusions loaded 2019-10-15 13:59:44 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "C:\\Windows\\System32\\Tasks\\ERRORFIXKIT" [ "Task" ] 2019-10-15 13:59:44 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9BD65709-129A-4E6B-A886-F2358F833CB0}\u0000" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "PUP.Optional.ErrorFixKit" , "HKLM\\Software\\ErrorFixKIT" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "C:\\Program Files (x86)\\ASUS\\SPLENDID" [ "Folder" ] 2019-10-15 13:59:44 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "C:\\Windows\\System32\\Tasks\\ASUS SPLENDID ACMON" [ "Task" ] 2019-10-15 13:59:44 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ASUS Splendid ACMON" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ASUS Splendid ACMON" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{706A649B-64F6-4DC7-98B8-B12160ABB23F}\u0000" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "Preinstalled.ASUSSplendid" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{0969AF05-4FF6-4C00-9406-43599238DE0D}" [ "Registry" ] 2019-10-15 13:59:44 : [Scan] Item detected: "Preinstalled.ASUSProductRegistration" , "C:\\ProgramData\\ASUS\\APRP" [ "Folder" ] 2019-10-15 13:59:46 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "C:\\Windows\\System32\\Tasks\\UPDATE CHECKER" [ "Task" ] 2019-10-15 13:59:46 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\Update Checker" [ "Registry" ] 2019-10-15 13:59:46 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\Update Checker" [ "Registry" ] 2019-10-15 13:59:46 : [Scan] Item detected: "Preinstalled.ASUSLiveUpdate" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9275F7F0-8754-4DC6-A4CC-124E532E8C6F}\u0000" [ "Registry" ] 2019-10-15 13:59:47 : [Telemetry] Sending to Influx 2019-10-15 13:59:47 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-10-15 13:59:47 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-10-15 13:59:47 : [SslCert] Locality Name () 2019-10-15 13:59:47 : [SslCert] Organization () 2019-10-15 13:59:47 : [SslCert] Certificate EffectiveDate: "niedz. sie 18 10:50:38 2019 GMT" 2019-10-15 13:59:47 : [SslCert] Certificate ExpirationDate: "sob. lis 16 10:50:38 2019 GMT" 2019-10-15 13:59:47 : [SslCert] ALPN: Yes 2019-10-15 13:59:47 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 13:59:47 : [SslCert] KXE: "ECDH" 2019-10-15 13:59:47 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 13:59:47 : [Telemetry] Status code: QVariant(int, 204) 2019-10-15 13:59:47 : [Telemetry] Sending to DSE 2019-10-15 13:59:48 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-15 13:59:48 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-15 13:59:48 : [SslCert] Locality Name ("San Jose") 2019-10-15 13:59:48 : [SslCert] Organization ("Malwarebytes Inc.") 2019-10-15 13:59:48 : [SslCert] Certificate EffectiveDate: "czw. lut 22 00:00:00 2018 GMT" 2019-10-15 13:59:48 : [SslCert] Certificate ExpirationDate: "?r. kwi 22 12:00:00 2020 GMT" 2019-10-15 13:59:48 : [SslCert] ALPN: Yes 2019-10-15 13:59:48 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 13:59:48 : [SslCert] KXE: "ECDH" 2019-10-15 13:59:48 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 13:59:48 : [Telemetry] Status code: QVariant(int, 201) 2019-10-15 13:59:48 : [Scan] Finished 2019-10-15 14:00:24 : [Button clicked] Next 2019-10-15 14:00:32 : [Button clicked] Clean & repair 2019-10-15 14:00:43 : [Button clicked] Dialog button clicked [ 2 ] 2019-10-15 14:00:43 : [Cleaning] Started 2019-10-15 14:00:43 : [Cleaning] Unable to Open process - "[System Process]" 0 2019-10-15 14:00:43 : [Cleaning] Unable to Open process - "System" 0 2019-10-15 14:00:43 : [Cleaning] Unable to Open process - "Registry" 0 2019-10-15 14:00:43 : [Cleaning] Unable to Open process - "SgrmBroker.exe" 0 2019-10-15 14:00:43 : [Cleaning] Unable to Open process - "SecurityHealthService.exe" 0 2019-10-15 14:00:43 : [Quarantine] Session folder: "C:\\AdwCleaner\\Quarantine\\v1\\20191015.160043" 2019-10-15 14:00:43 : [Cleaning] Processing: "PUP.Optional.ErrorFixKit" , "C:\\Windows\\System32\\Tasks\\ERRORFIXKIT" [ "Task" ] 2019-10-15 14:00:43 : [Cleaning] Quarantined: "PUP.Optional.ErrorFixKit" , "C:\\Windows\\System32\\Tasks\\ERRORFIXKIT" [ "Task" ] 2019-10-15 14:00:43 : [Cleaning] Processing: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-15 14:00:44 : [Cleaning] Quarantined: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\ErrorFixKIT" [ "Registry" ] 2019-10-15 14:00:44 : [Cleaning] Processing: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9BD65709-129A-4E6B-A886-F2358F833CB0}\u0000" [ "Registry" ] 2019-10-15 14:00:44 : [Cleaning] Quarantined: "PUP.Optional.ErrorFixKit" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{9BD65709-129A-4E6B-A886-F2358F833CB0}\u0000" [ "Registry" ] 2019-10-15 14:00:44 : [Cleaning] Processing: "PUP.Optional.ErrorFixKit" , "HKLM\\Software\\ErrorFixKIT" [ "Registry" ] 2019-10-15 14:00:44 : [Cleaning] Quarantined: "PUP.Optional.ErrorFixKit" , "HKLM\\Software\\ErrorFixKIT" [ "Registry" ] 2019-10-15 14:00:44 : [Engine Additional Action] "Delete Tracing Keys" 2019-10-15 14:00:47 : [Engine Additional Action] "Reset Winsock" 2019-10-15 14:00:47 : [Telemetry] Sending to Influx 2019-10-15 14:00:48 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-10-15 14:00:48 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-10-15 14:00:48 : [SslCert] Locality Name () 2019-10-15 14:00:48 : [SslCert] Organization () 2019-10-15 14:00:48 : [SslCert] Certificate EffectiveDate: "niedz. sie 18 10:50:38 2019 GMT" 2019-10-15 14:00:48 : [SslCert] Certificate ExpirationDate: "sob. lis 16 10:50:38 2019 GMT" 2019-10-15 14:00:48 : [SslCert] ALPN: Yes 2019-10-15 14:00:48 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 14:00:48 : [SslCert] KXE: "ECDH" 2019-10-15 14:00:48 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 14:00:48 : [Telemetry] Status code: QVariant(int, 204) 2019-10-15 14:00:48 : [Telemetry] Sending to DSE 2019-10-15 14:00:49 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-15 14:00:49 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-15 14:00:49 : [SslCert] Locality Name ("San Jose") 2019-10-15 14:00:49 : [SslCert] Organization ("Malwarebytes Inc.") 2019-10-15 14:00:49 : [SslCert] Certificate EffectiveDate: "czw. lut 22 00:00:00 2018 GMT" 2019-10-15 14:00:49 : [SslCert] Certificate ExpirationDate: "?r. kwi 22 12:00:00 2020 GMT" 2019-10-15 14:00:49 : [SslCert] ALPN: Yes 2019-10-15 14:00:49 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 14:00:49 : [SslCert] KXE: "ECDH" 2019-10-15 14:00:49 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 14:00:49 : [Telemetry] Status code: QVariant(int, 201) 2019-10-15 14:00:49 : [Cleaning] Finished 2019-10-15 14:00:55 : [Button clicked] Dialog button clicked [ 6 ] 2019-10-15 14:00:55 : [Application] Closing AdwCleaner 2019-10-15 14:02:42 : [Application] AdwCleaner 7 . 4 . 1 launched 2019-10-15 14:02:43 : [MBBanner] Checking Iris 2019-10-15 14:02:43 : [IRIS] Making request 2019-10-15 14:02:43 : [AdwUpgrade] Checking application updates 2019-10-15 14:02:44 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-15 14:02:44 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-15 14:02:44 : [SslCert] Locality Name ("Santa Clara") 2019-10-15 14:02:44 : [SslCert] Organization ("Malwarebytes Inc") 2019-10-15 14:02:44 : [SslCert] Certificate EffectiveDate: "pon. pa? 2 00:00:00 2017 GMT" 2019-10-15 14:02:44 : [SslCert] Certificate ExpirationDate: "wt. pa? 6 12:00:00 2020 GMT" 2019-10-15 14:02:44 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-15 14:02:44 : [SslCert] ALPN: None 2019-10-15 14:02:44 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-15 14:02:44 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 14:02:44 : [SslCert] Locality Name ("Santa Clara") 2019-10-15 14:02:44 : [SslCert] KXE: "ECDH" 2019-10-15 14:02:44 : [SslCert] Organization ("Malwarebytes Inc") 2019-10-15 14:02:44 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 14:02:44 : [SslCert] Certificate EffectiveDate: "pon. pa? 2 00:00:00 2017 GMT" 2019-10-15 14:02:44 : [SslCert] Certificate ExpirationDate: "wt. pa? 6 12:00:00 2020 GMT" 2019-10-15 14:02:44 : [SslCert] ALPN: None 2019-10-15 14:02:44 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-15 14:02:45 : [SslCert] KXE: "ECDH" 2019-10-15 14:02:45 : [SslCert] Protocol: "TLSv1.2" 2019-10-15 14:02:45 : [Telemetry] Status code: QVariant(int, 200) 2019-10-15 14:02:45 : [File Downloader] Error downloading ( QNetworkReply::NetworkError(ContentNotFoundError) ) 2019-10-15 14:02:45 : [IRIS] Failed 2019-10-15 14:02:51 : [Button clicked] View Log