2019-10-22 18:05:55 : [Application] AdwCleaner 7 . 4 . 2 launched 2019-10-22 18:06:11 : [AdwUpgrade] Checking application updates 2019-10-22 18:06:12 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-22 18:06:12 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-22 18:06:12 : [SslCert] Locality Name ("Santa Clara") 2019-10-22 18:06:12 : [SslCert] Organization ("Malwarebytes Inc") 2019-10-22 18:06:12 : [SslCert] Certificate EffectiveDate: "pon. pa? 2 00:00:00 2017 GMT" 2019-10-22 18:06:12 : [SslCert] Certificate ExpirationDate: "wt. pa? 6 12:00:00 2020 GMT" 2019-10-22 18:06:12 : [SslCert] ALPN: None 2019-10-22 18:06:12 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-22 18:06:12 : [SslCert] KXE: "ECDH" 2019-10-22 18:06:12 : [SslCert] Protocol: "TLSv1.2" 2019-10-22 18:06:13 : [Telemetry] Status code: QVariant(int, 200) 2019-10-22 18:06:14 : [Button clicked] EULA agreed 2019-10-22 18:06:21 : [Button clicked] Scan 2019-10-22 18:06:21 : [Scan] Started 2019-10-22 18:06:22 : [Database] Downloading database 2019-10-22 18:06:24 : [Database] Checking integrity 2019-10-22 18:06:24 : [Database] Found 2588 families 2019-10-22 18:06:24 : [Database] Database v "2019-10-21.1" 2019-10-22 18:06:27 : [Loading paths] Local paths loaded 2019-10-22 18:06:27 : [Loading paths] Chrome paths loaded 2019-10-22 18:06:27 : [Loading paths] User Keys loaded 2019-10-22 18:06:27 : [Module initialized] "File" 2019-10-22 18:06:27 : [Module initialized] "Folder" 2019-10-22 18:06:27 : [Module initialized] "RegistryKey" 2019-10-22 18:06:27 : [Module initialized] "RegistryValue" 2019-10-22 18:06:28 : [Module initialized] "TaskName" 2019-10-22 18:06:28 : [Module initialized] "Service" 2019-10-22 18:06:28 : [Module initialized] "Winlogon" 2019-10-22 18:07:36 : [Module initialized] "URL" 2019-10-22 18:07:36 : [Module initialized] "RegAppInit" 2019-10-22 18:07:36 : [Module initialized] "RegClasses" 2019-10-22 18:07:36 : [Module initialized] "DNS" 2019-10-22 18:07:37 : [Module initialized] "RegFirewallPolicy" 2019-10-22 18:07:37 : [Module initialized] "RegGuid" 2019-10-22 18:07:37 : [Module initialized] "RegIEElevationPolicy" 2019-10-22 18:07:37 : [Module initialized] "RegOther" 2019-10-22 18:07:37 : [Module initialized] "RegProductID" 2019-10-22 18:07:37 : [Module initialized] "RegSoftware" 2019-10-22 18:07:37 : [Module initialized] "RegStartup" 2019-10-22 18:07:37 : [Module initialized] "WMI" 2019-10-22 18:07:37 : [Module initialized] "ChromiumExt" 2019-10-22 18:07:37 : [Module initialized] "FirefoxExt" 2019-10-22 18:07:37 : [Module initialize] Scan Browser 2019-10-22 18:07:40 : [Module initialize] Scan Browser FF 2019-10-22 18:07:40 : [Module initialize] FF start pages loaded 2019-10-22 18:07:40 : [Module initialize] FF search providers loaded 2019-10-22 18:07:40 : [Module initialize] FF plugin list loaded 2019-10-22 18:07:40 : [Scan] Exclusions loaded 2019-10-22 18:07:51 : [Scan] Item detected: "PUP.Optional.Legacy" , "C:\\Users\\Rafa3\\AppData\\Local\\Mindspark_Interactive_Net" [ "Folder" ] 2019-10-22 18:07:55 : [Scan] Item detected: "PUP.Optional.Legacy" , "HKCU\\Software\\dobreprogramy" [ "Registry" ] 2019-10-22 18:07:55 : [Scan] Item detected: "PUP.Optional.Legacy" , "HKCU\\Software\\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I" [ "Registry" ] 2019-10-22 18:07:59 : [Scan] Item detected: "Preinstalled.LenovoPowerDVD" , "C:\\Windows\\System32\\Tasks\\PDVDSERV12 TASK" [ "Task" ] 2019-10-22 18:07:59 : [Scan] Item detected: "localScan" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\PDVDServ12 Task" [ "Registry" ] 2019-10-22 18:07:59 : [Scan] Item detected: "Preinstalled.LenovoPowerDVD" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tree\\PDVDServ12 Task" [ "Registry" ] 2019-10-22 18:07:59 : [Scan] Item detected: "Preinstalled.LenovoPowerDVD" , "HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Schedule\\TaskCache\\Tasks\\{6523BFE4-0C78-43E0-BA96-6BF1C32F7BBE}\u0000" [ "Registry" ] 2019-10-22 18:07:59 : [Scan] Item detected: "Preinstalled.LenovoPowerDVD" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" [ "Registry" ] 2019-10-22 18:07:59 : [Scan] Item detected: "Preinstalled.LenovoPowerDVD" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.CyberLinkShellExtension" , "HKLM\\Software\\Classes\\CLSID\\{3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.HPCleanFLC" , "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office.lnk" [ "File" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoREACHit" , "C:\\Users\\Rafa3\\AppData\\Local\\LENOVO\\REACHIT" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoREACHit" , "C:\\Program Files (x86)\\LENOVO\\REACHIT" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoREACHit" , "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\LENOVO\\REACHIT" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoREACHit" , "HKLM\\Software\\Classes\\CLSID\\{2B3256D4-49AA-11D1-8429-0050AE509033}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoREACHit" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Shell Extensions\\Approved|{2B3256D4-49AA-11D1-8429-0050AE509033}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoREACHit" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoSHAREit" , "C:\\Users\\Rafa3\\AppData\\Local\\LENOVO\\SHAREIT" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoSHAREit" , "C:\\Program Files (x86)\\LENOVO\\SHAREIT" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoSHAREit" , "HKLM\\Software\\Classes\\CLSID\\{430BD134-576D-4E75-87CD-0F5C6221A82B}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoSHAREit" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SHAREit_is1" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPhotoMaster" , "C:\\Users\\Rafa3\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Lenovo Photo Master.lnk" [ "File" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPhotoMaster" , "C:\\Users\\Public\\Desktop\\Lenovo Photo Master.lnk" [ "File" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPhotoMaster" , "C:\\Program Files (x86)\\LENOVO\\LENOVO PHOTO MASTER" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPhotoMaster" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BC94C56A-3649-420C-8756-2ADEBE399D33}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPhotoMaster" , "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run|PhotoMasterImportAgent" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPower2Go" , "C:\\Program Files (x86)\\LENOVO\\POWER2GO" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPower2Go" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPower2Go" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPower2Go" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Run|CLMLServer_For_P2G8" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPower2Go" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run32|CLMLServer_For_P2G8" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPower2Go" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Run|CLVirtualDrive" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoPower2Go" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run32|CLVirtualDrive" [ "Registry" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoCCSDK" , "C:\\Program Files (x86)\\LENOVO\\CCSDK" [ "Folder" ] 2019-10-22 18:08:01 : [Scan] Item detected: "Preinstalled.LenovoCCSDK" , "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{67827BB6-4B05-6181-921A-E49FC484E859}" [ "Registry" ] 2019-10-22 18:08:02 : [Scan] Item detected: "PUP.Optional.Vondos" , "C:\\Users\\Rafa3\\AppData\\Roaming\\Browser-Security" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "PUP.Optional.InstallCore" , "HKCU\\Software\\csastats" [ "Registry" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoAcceleratorApplication" , "C:\\Program Files (x86)\\LENOVO\\LENOVOPORTAL" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoExperienceImprovement" , "C:\\Program Files\\LENOVO\\EXPERIENCEIMPROVEMENT" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoExperienceImprovement" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\LenovoExperienceImprovement" [ "Registry" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoSolutionCenter" , "C:\\Program Files\\LENOVO\\LENOVO SOLUTION CENTER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoSolutionCenter" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F925868A-2F2C-414B-A5A7-C613039CE9E4}" [ "Registry" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoUtility" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run|LenovoUtility" [ "Registry" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoUtility" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run|LenovoUtility" [ "Registry" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "C:\\Users\\Rafa3\\AppData\\Local\\LENOVO\\IMCONTROLLER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "C:\\Windows\\System32\\Tasks\\LENOVO\\IMCONTROLLER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "C:\\Windows\\System32\\drivers\\LENOVO\\IMCONTROLLER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "C:\\Program Files (x86)\\LENOVO\\IMCONTROLLER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "C:\\Program Files\\LENOVO\\IMCONTROLLER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "C:\\ProgramData\\LENOVO\\IMCONTROLLER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Lenovo Dependency Package_is1" [ "Registry" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoIMController" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1720B0E0-C520-43A6-B677-97A1D80F3B99}" [ "Registry" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoQuickOptimizer" , "C:\\Program Files\\LENOVO\\QUICKOPTIMIZER" [ "Folder" ] 2019-10-22 18:08:03 : [Scan] Item detected: "Preinstalled.LenovoQuickOptimizer" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D2C871B-1B9F-45AC-9C43-2BB18089CDFA}" [ "Registry" ] 2019-10-22 18:08:04 : [Scan] Item detected: "PUP.Optional.ProductSetup.A" , "HKCU\\Software\\PRODUCTSETUP" [ "Registry" ] 2019-10-22 18:08:05 : [Telemetry] Sending to Influx 2019-10-22 18:08:07 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-10-22 18:08:07 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-10-22 18:08:07 : [SslCert] Locality Name () 2019-10-22 18:08:07 : [SslCert] Organization () 2019-10-22 18:08:07 : [SslCert] Certificate EffectiveDate: "czw. pa? 17 14:50:26 2019 GMT" 2019-10-22 18:08:07 : [SslCert] Certificate ExpirationDate: "?r. sty 15 14:50:26 2020 GMT" 2019-10-22 18:08:07 : [SslCert] ALPN: Yes 2019-10-22 18:08:07 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-22 18:08:07 : [SslCert] KXE: "ECDH" 2019-10-22 18:08:07 : [SslCert] Protocol: "TLSv1.2" 2019-10-22 18:08:07 : [Telemetry] Status code: QVariant(int, 204) 2019-10-22 18:08:07 : [Telemetry] Sending to DSE 2019-10-22 18:08:08 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-22 18:08:08 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-22 18:08:08 : [SslCert] Locality Name ("San Jose") 2019-10-22 18:08:08 : [SslCert] Organization ("Malwarebytes Inc.") 2019-10-22 18:08:08 : [SslCert] Certificate EffectiveDate: "czw. lut 22 00:00:00 2018 GMT" 2019-10-22 18:08:08 : [SslCert] Certificate ExpirationDate: "?r. kwi 22 12:00:00 2020 GMT" 2019-10-22 18:08:08 : [SslCert] ALPN: Yes 2019-10-22 18:08:08 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-22 18:08:08 : [SslCert] KXE: "ECDH" 2019-10-22 18:08:08 : [SslCert] Protocol: "TLSv1.2" 2019-10-22 18:08:08 : [Telemetry] Status code: QVariant(int, 201) 2019-10-22 18:08:08 : [Scan] Finished 2019-10-22 18:34:42 : [Button clicked] Next 2019-10-22 18:34:46 : [Button clicked] Bundleware found ok button 2019-10-22 18:34:49 : [Button clicked] Clean & repair 2019-10-22 18:34:57 : [Button clicked] Dialog button clicked [ 2 ] 2019-10-22 18:34:57 : [Cleaning] Started 2019-10-22 18:34:57 : [Cleaning] Unable to Open process - "[System Process]" 0 2019-10-22 18:34:57 : [Cleaning] Unable to Open process - "System" 0 2019-10-22 18:34:57 : [Cleaning] Unable to Open process - "Registry" 0 2019-10-22 18:34:58 : [Cleaning] Unable to Open process - "Memory Compression" 0 2019-10-22 18:34:58 : [Cleaning] Unable to Open process - "NisSrv.exe" 0 2019-10-22 18:34:58 : [Cleaning] Unable to Open process - "SecurityHealthService.exe" 0 2019-10-22 18:34:58 : [Cleaning] Unable to Open process - "SgrmBroker.exe" 0 2019-10-22 18:34:58 : [Quarantine] Session folder: "C:\\AdwCleaner\\Quarantine\\v1\\20191022.203458" 2019-10-22 18:34:58 : [Cleaning] Processing: "PUP.Optional.Legacy" , "C:\\Users\\Rafa3\\AppData\\Local\\Mindspark_Interactive_Net" [ "Folder" ] 2019-10-22 18:34:58 : [Quarantine] Created quarantine record. 2019-10-22 18:34:58 : [recurseProcessNameHashes]: "C:\\AdwCleaner\\Quarantine\\v1\\20191022.203458\\1" 2019-10-22 18:34:58 : [recurseProcessNameHashes]: "C:\\AdwCleaner\\Quarantine\\v1\\20191022.203458\\1\\Mindspark_Interactive_Net" 2019-10-22 18:34:58 : [recurseProcessNameHashes]: "C:\\AdwCleaner\\Quarantine\\v1\\20191022.203458\\1\\Mindspark_Interactive_Net\\GoUnzip.exe_StrongName_gzmrfrrkrve1wghp1nel3iobez4nojnd" 2019-10-22 18:34:58 : [recurseProcessNameHashes]: "C:\\AdwCleaner\\Quarantine\\v1\\20191022.203458\\1\\Mindspark_Interactive_Net\\GoUnzip.exe_StrongName_gzmrfrrkrve1wghp1nel3iobez4nojnd\\1.2.0.464" 2019-10-22 18:34:58 : [recurseProcessNameHashes]: Done. 2019-10-22 18:34:58 : [recurseProcessNameHashes]: Done. 2019-10-22 18:34:58 : [recurseProcessNameHashes]: Done. 2019-10-22 18:34:58 : [recurseProcessNameHashes]: Done. 2019-10-22 18:34:58 : [Cleaning] Cleaned the item. 2019-10-22 18:34:58 : [Cleaning] Updated quarantine index file. 2019-10-22 18:34:59 : [Cleaning] ObjectsProcessed = 1 2019-10-22 18:34:59 : [Cleaning] Quarantined: "PUP.Optional.Legacy" , "C:\\Users\\Rafa3\\AppData\\Local\\Mindspark_Interactive_Net" [ "Folder" ] 2019-10-22 18:34:59 : [Cleaning] Processing: "PUP.Optional.Legacy" , "HKCU\\Software\\dobreprogramy" [ "Registry" ] 2019-10-22 18:34:59 : [Quarantine] Created quarantine record. 2019-10-22 18:34:59 : [Cleaning] Cleaned the item. 2019-10-22 18:34:59 : [Cleaning] Updated quarantine index file. 2019-10-22 18:34:59 : [Cleaning] ObjectsProcessed = 2 2019-10-22 18:34:59 : [Cleaning] Quarantined: "PUP.Optional.Legacy" , "HKCU\\Software\\dobreprogramy" [ "Registry" ] 2019-10-22 18:34:59 : [Cleaning] Processing: "PUP.Optional.Legacy" , "HKCU\\Software\\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I" [ "Registry" ] 2019-10-22 18:34:59 : [Quarantine] Created quarantine record. 2019-10-22 18:34:59 : [Cleaning] Cleaned the item. 2019-10-22 18:34:59 : [Cleaning] Updated quarantine index file. 2019-10-22 18:34:59 : [Cleaning] ObjectsProcessed = 3 2019-10-22 18:34:59 : [Cleaning] Quarantined: "PUP.Optional.Legacy" , "HKCU\\Software\\1Q1F1S1C1P1E1C1F1N1C1T1H2UtF1E1I" [ "Registry" ] 2019-10-22 18:34:59 : [Cleaning] Processing: "PUP.Optional.Vondos" , "C:\\Users\\Rafa3\\AppData\\Roaming\\Browser-Security" [ "Folder" ] 2019-10-22 18:34:59 : [Quarantine] Created quarantine record. 2019-10-22 18:34:59 : [recurseProcessNameHashes]: "C:\\AdwCleaner\\Quarantine\\v1\\20191022.203458\\4" 2019-10-22 18:34:59 : [recurseProcessNameHashes]: "C:\\AdwCleaner\\Quarantine\\v1\\20191022.203458\\4\\Browser-Security" 2019-10-22 18:34:59 : [recurseProcessNameHashes]: Done. 2019-10-22 18:34:59 : [recurseProcessNameHashes]: Done. 2019-10-22 18:34:59 : [Cleaning] Cleaned the item. 2019-10-22 18:34:59 : [Cleaning] Updated quarantine index file. 2019-10-22 18:34:59 : [Cleaning] ObjectsProcessed = 4 2019-10-22 18:34:59 : [Cleaning] Quarantined: "PUP.Optional.Vondos" , "C:\\Users\\Rafa3\\AppData\\Roaming\\Browser-Security" [ "Folder" ] 2019-10-22 18:34:59 : [Cleaning] Processing: "PUP.Optional.InstallCore" , "HKCU\\Software\\csastats" [ "Registry" ] 2019-10-22 18:34:59 : [Quarantine] Created quarantine record. 2019-10-22 18:34:59 : [Cleaning] Cleaned the item. 2019-10-22 18:34:59 : [Cleaning] Updated quarantine index file. 2019-10-22 18:35:00 : [Cleaning] ObjectsProcessed = 5 2019-10-22 18:35:00 : [Cleaning] Quarantined: "PUP.Optional.InstallCore" , "HKCU\\Software\\csastats" [ "Registry" ] 2019-10-22 18:35:00 : [Cleaning] Processing: "PUP.Optional.ProductSetup.A" , "HKCU\\Software\\PRODUCTSETUP" [ "Registry" ] 2019-10-22 18:35:00 : [Quarantine] Created quarantine record. 2019-10-22 18:35:00 : [Cleaning] Cleaned the item. 2019-10-22 18:35:00 : [Cleaning] Updated quarantine index file. 2019-10-22 18:35:00 : [Cleaning] ObjectsProcessed = 6 2019-10-22 18:35:00 : [Cleaning] Quarantined: "PUP.Optional.ProductSetup.A" , "HKCU\\Software\\PRODUCTSETUP" [ "Registry" ] 2019-10-22 18:35:00 : [Engine Additional Action] "Delete Tracing Keys" 2019-10-22 18:35:03 : [Engine Additional Action] "Reset Winsock" 2019-10-22 18:35:03 : [Telemetry] Sending to Influx 2019-10-22 18:35:04 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-10-22 18:35:04 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-10-22 18:35:04 : [SslCert] Locality Name () 2019-10-22 18:35:04 : [SslCert] Organization () 2019-10-22 18:35:04 : [SslCert] Certificate EffectiveDate: "czw. pa? 17 14:50:26 2019 GMT" 2019-10-22 18:35:04 : [SslCert] Certificate ExpirationDate: "?r. sty 15 14:50:26 2020 GMT" 2019-10-22 18:35:04 : [SslCert] ALPN: Yes 2019-10-22 18:35:04 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-22 18:35:04 : [SslCert] KXE: "ECDH" 2019-10-22 18:35:04 : [SslCert] Protocol: "TLSv1.2" 2019-10-22 18:35:04 : [Telemetry] Status code: QVariant(int, 204) 2019-10-22 18:35:04 : [Telemetry] Sending to DSE 2019-10-22 18:35:05 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-10-22 18:35:05 : [SslCert] Issued to ("*.malwarebytes.com") 2019-10-22 18:35:05 : [SslCert] Locality Name ("San Jose") 2019-10-22 18:35:05 : [SslCert] Organization ("Malwarebytes Inc.") 2019-10-22 18:35:05 : [SslCert] Certificate EffectiveDate: "czw. lut 22 00:00:00 2018 GMT" 2019-10-22 18:35:05 : [SslCert] Certificate ExpirationDate: "?r. kwi 22 12:00:00 2020 GMT" 2019-10-22 18:35:05 : [SslCert] ALPN: Yes 2019-10-22 18:35:05 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-10-22 18:35:05 : [SslCert] KXE: "ECDH" 2019-10-22 18:35:05 : [SslCert] Protocol: "TLSv1.2" 2019-10-22 18:35:05 : [Telemetry] Status code: QVariant(int, 201) 2019-10-22 18:35:05 : [Cleaning] Finished 2019-10-22 18:35:08 : [Button clicked] Dialog button clicked [ 6 ] 2019-10-22 18:35:09 : [Application] Closing AdwCleaner 2019-10-22 18:38:03 : [Application] AdwCleaner 7 . 4 . 2 launched 2019-10-22 18:38:45 : [MBBanner] Checking Iris 2019-10-22 18:38:45 : [IRIS] Making request 2019-10-22 18:38:45 : [Telemetry] Sending hello 2019-10-22 18:38:45 : [AdwUpgrade] Checking application updates 2019-10-22 18:38:46 : [Telemetry] Status code: QVariant(Invalid) rkReply::NetworkError(HostNotFoundError) ) 2019-10-22 18:38:46 : [IRIS] Failed 2019-10-22 18:39:08 : [Button clicked] View Log 2019-10-22 18:39:49 : [Button clicked] Log files menu item