# AdwCleaner 7.0.6.0 - Logfile created on Thu Dec 28 19:28:15 2017 # Updated on 2017/21/12 by Malwarebytes # Database: 12-28-2017.2 # Running on Windows 10 Pro (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.Legacy, C:\Program Files (x86)\Common Files\freemake shared PUP.Optional.Mail.Ru, C:\ProgramData\Mail.Ru PUP.Optional.Mail.Ru, C:\Windows\System32\config\systemprofile\AppData\Local\Mail.Ru PUP.Optional.Mail.Ru, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Mail.Ru PUP.Optional.Mail.Ru, C:\Users\All Users\Mail.Ru ***** [ Files ] ***** PUP.Optional.Legacy, C:\END ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\Main | Start Page [http:\\mail.ru\cnt\10445?gp=811141] PUP.Optional.Legacy, [Data] - HKCU\Software\Microsoft\Internet Explorer\Main | Start Page [http:\\mail.ru\cnt\10445?gp=811141] PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-910666309-267904859-3003788689-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run | MailRuUpdater PUP.Optional.Mail.Ru, [Key] - HKLM\SOFTWARE\Mail.Ru PUP.Optional.Mail.Ru, [Key] - HKU\S-1-5-21-910666309-267904859-3003788689-1001\Software\Mail.Ru PUP.Optional.Mail.Ru, [Key] - HKU\S-1-5-21-910666309-267904859-3003788689-1001\Software\AppDataLow\Software\Mail.Ru PUP.Optional.Mail.Ru, [Key] - HKCU\Software\Mail.Ru PUP.Optional.Mail.Ru, [Key] - HKCU\Software\AppDataLow\Software\Mail.Ru PUP.Optional.Mail.Ru, [Key] - HKCU\Software\Google\Chrome\NativeMessagingHosts\ru.mail.go.ext_info_host PUP.Optional.Mail.Ru, [Key] - HKCU\Software\Mozilla\NativeMessagingHosts\ru.mail.go.ext_info_host PUP.Optional.FreeMakeConverter, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | ProductUpdater PUP.Optional.FreeMakeConverter, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | ProductUpdater PUP.Optional.ProductUpdater, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs | C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe PUP.Optional.ProductUpdater, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs | C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\FMUpdater.dll PUP.Optional.ProductUpdater, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs | C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\Toggling.dll PUP.Optional.ProductUpdater, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs | C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\Newtonsoft.Json.dll PUP.Optional.ProductUpdater, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs | C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\GAnalytics.dll PUP.Optional.ProductUpdater, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs | C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\GoCartMonad.dll ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries. ************************* ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########