As per the advice in other posts, I downloaded and ran Malwarebytes and AdwCleaner and i would like to know if I can/should delete the following files: Yes, it's in Italian but I think the results are clear. A Norton scan only came up with some cookies. Thank you for any advice you can give. My daughter loves Minecraft and I'm afraid something may have snuck in. MALWARE found this: Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 3 PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\CLASSES\Toolbar.CT1561552, Quarantined, [8e34bc75612a8aace58caecb64a0b34d], PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar.CT1561552, Quarantined, [903244edfa9178be93deaacfeb1927d9], PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar.CT1561552, Quarantined, [487af83923684beb6e034a2faf556f91], Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 25 Note: Just some .zip in Eudora attachments that were already quarantined. ______________________________________________ ADWCLEANER found this: ***** [ Servizi ] ***** ***** [ Cartelle ] ***** Cartella Trovato : C:\ProgramData\{35733029-9859-49C7-8475-1E78E2AAE413} Cartella Trovato : C:\ProgramData\{B3C2C1CD-6B77-4A96-B670-F734AC2A1CBC} Cartella Trovato : C:\Users\Colazingari\AppData\LocalLow\Conduit ***** [ File ] ***** ***** [ Collegamenti ] ***** ***** [ Attività pianificate ] ***** ***** [ Registry ] ***** Chiave Trovato : HKLM\SOFTWARE\Classes\S Chiave Trovato : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581} Chiave Trovato : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839} Chiave Trovato : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F} Chiave Trovato : HKLM\SOFTWARE\Classes\CLSID\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3} Chiave Trovato : HKLM\SOFTWARE\Classes\TypeLib\{C4C4F1F4-3074-4CB6-9FB8-0A64273166F0} Chiave Trovato : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D} Chiave Trovato : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C95A4E8E-816D-4655-8C79-D736DA1ADB6D} Chiave Trovato : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Chiave Trovato : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Chiave Trovato : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9} Chiave Trovato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0ABE0FED-50E7-4E42-A125-57C0A11DBCDE} Chiave Trovato : [x64] HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581} Chiave Trovato : [x64] HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839} Chiave Trovato : [x64] HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F} Chiave Trovato : [x64] HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Chiave Trovato : [x64] HKLM\SOFTWARE\Classes\CLSID\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3} Chiave Trovato : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Chiave Trovato : HKCU\Software\Imesh Chiave Trovato : HKCU\Software\YahooPartnerToolbar Chiave Trovato : HKCU\Software\AppDataLow\Toolbar Chiave Trovato : HKCU\Software\AppDataLow\Software\Conduit Chiave Trovato : HKLM\SOFTWARE\Conduit Chiave Trovato : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CoffeeCup Shopping Cart Creator 3.5.2357 Chiave Trovato : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CoffeeCup Shopping Cart Creator Pro 3.8.3841 Chiave Trovato : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\CoffeeCup Shopping Cart Creator 3.5.2357 Chiave Trovato : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\CoffeeCup Shopping Cart Creator Pro 3.8.3841 Chiave Trovato : [x64] HKCU\Software\Imesh Chiave Trovato : [x64] HKCU\Software\YahooPartnerToolbar Chiave Trovato : HKU\S-1-5-21-3080945909-2069881646-1017997644-1000\Software\AppDataLow\Software\Conduit Chiave Trovato : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{87C9C7C1-7E59-446D-AACE-D41A69D4CE54} Chiave Trovato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{87C9C7C1-7E59-446D-AACE-D41A69D4CE54} Dati Trovato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {87C9C7C1-7E59-446D-AACE-D41A69D4CE54} ***** [ Browser web ] ***** ########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [3878 byte] ##########
