Malwarebytes

www.malwarebytes.com

-Log Details-
Scan Date: 8/15/17
Scan Time: 11:45 PM
Log File: Local C.txt
Administrator: Yes

-Software Information-
Version: 3.1.2.1733
Components Version: 1.0.160
Update Package Version: 1.0.2588
License: Free

-System Information-
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Rudi-PC\Rudi

-Scan Summary-
Scan Type: Custom Scan
Result: Completed
Objects Scanned: 125113
Threats Detected: 24
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 24 min, 52 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 1
Adware.Wajam,
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, No
Action By User, [1164], [-1],0.0.0

Registry Value: 7
Adware.Wajam, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET
SETTINGS|PROXYENABLE, No Action By User, [1164], [-1],0.0.0
Adware.Wajam, HKU\S-1-5-21-3551160591-2661254122-2128207769-
1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, No
Action By User, [1164], [-1],0.0.0
Adware.Wajam, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET
SETTINGS|PROXYENABLE, No Action By User, [1164], [-1],0.0.0
Adware.Wajam, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|
PROXYENABLE, No Action By User, [1164], [-1],0.0.0
Adware.Wajam, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|
PROXYSERVER, No Action By User, [1164], [-1],0.0.0
Adware.Wajam, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|
PROXYOVERRIDE, No Action By User, [1164], [-1],0.0.0
Adware.Wajam, HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET
SETTINGS|PROXYSETTINGSPERUSER, No Action By User, [1164], [-1],0.0.0

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 1
PUP.Optional.VideoBox, C:\PROGRAMDATA\WINDOWSVIDEOERRORREPORTING, No Action By
User, [2113], [405501],1.0.2588

File: 15
Rogue.SystemRepair, C:\PROGRAM FILES\7-ZIP\7Z.EXE, No Action By User, [3881],
[29974],1.0.2588
PUP.Optional.VideoBox, C:\PROGRAMDATA\WINDOWSVIDEOERRORREPORTING\WVERMGR.EXE, No
Action By User, [2113], [405501],1.0.2588
PUP.Optional.VideoBox,
C:\ProgramData\WindowsVideoErrorReporting\wvermgr.exe.config, No Action By User,
[2113], [405501],1.0.2588
PUP.Optional.WpaKill, C:\USERS\RUDI\DOWNLOADS\COMPRESSED\
[WWW.GIGAPURBALINGGA.COM]_RELOACT26F.RAR, No Action By User, [1346],
[330820],1.0.2588
PUP.Optional.WpaKill, C:\USERS\RUDI\DOWNLOADS\
[WWW.GIGAPURBALINGGA.COM]_RELOACT26F.RAR, No Action By User, [1346],
[330820],1.0.2588
Generic.Malware/Suspicious, C:\USERS\RUDI\DOWNLOADS\COMPRESSED\
[WWW.GIGAPURBALINGGA.COM]_IDM628B15_2.RAR, No Action By User, [0],
[392686],1.0.2588
Generic.Malware/Suspicious, C:\USERS\RUDI\DOWNLOADS\COMPRESSED\
[WWW.GIGAPURBALINGGA.COM]_PIDM628B16.RAR, No Action By User, [0], [392686],1.0.2588
Adware.Wajam, C:\WINDOWS\19FEB509E79FE5834C853655A87FB488.EXE, No Action By User,
[1164], [417297],1.0.2588
RiskWare.BitCoinMiner, C:\WINDOWS\SYSTEM32\EASEWARE.DRIVER.EXE, No Action By User,
[94], [354575],1.0.2588
Backdoor.Agent.Generic,
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MRSYS.EXE, No Action By
User, [633], [355551],1.0.2588
Hijack.HostFile, C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS, No Action By User, [322],
[329328],1.0.2588
Hijack.Host, C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS, No Action By User, [25],
[407375],1.0.2588
Hijack.Host, C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS, No Action By User, [25],
[407375],1.0.2588
Hijack.AutoConfigURL.PrxySvrRST, C:\WINDOWS\SYSTEM32\TASKS\INSTALLSHIELD UPDATE
SERVICE SCHEDULER, No Action By User, [317], [261680],1.0.2588
Hijack.AutoConfigURL.PrxySvrRST, C:\WINDOWS\SYSTEM32\TASKS\OPTIMIZE THUMBNAIL CACHE
FILES, No Action By User, [317], [328817],1.0.2588

Physical Sector: 0
(No malicious items detected)
(end)