Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 3/13/18
Scan Time: 7:57 AM
Log File: c910962e-26ce-11e8-a55b-008cfa3496c7.json
Administrator: Yes
-Software Information-
Version: 3.4.4.2398
Components Version: 1.0.322
Update Package Version: 1.0.4330
License: Trial
-System Information-
OS: Windows 10 (Build 16299.248)
CPU: x64
File System: NTFS
User: DESKTOP-217O4S5\JAcK
-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 290880
Threats Detected: 48
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 8 min, 18 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 1
Adware.AnonymizerGadget.PrxySvrRST, C:\USERS\JACK\APPDATA\ROAMING\AGDATA\BIN\ANONYMIZERLAUNCHER.EXE, No Action By User, [14860], [490737],1.0.4330
Module: 1
Adware.AnonymizerGadget.PrxySvrRST, C:\USERS\JACK\APPDATA\ROAMING\AGDATA\BIN\ANONYMIZERLAUNCHER.EXE, No Action By User, [14860], [490737],1.0.4330
Registry Key: 13
Adware.Social2Search.EncJob, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\86875816b9a0d9f6ff57435080963a5f, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\86875816b9a0d9f6ff57435080963a5f, No Action By User, [7965], [-1],0.0.0
Adware.Social2Search.EncJob, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8AC8135C-7D0F-4CF6-824C-2E8EFC3C5271}, No Action By User, [7965], [-1],0.0.0
Adware.Social2Search.EncJob, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{8AC8135C-7D0F-4CF6-824C-2E8EFC3C5271}, No Action By User, [7965], [-1],0.0.0
PUP.Optional.Wajam, HKU\S-1-5-21-3250475609-3111670466-3239219275-1002\SOFTWARE\WajIEnhance, No Action By User, [73], [244670],1.0.4330
PUP.Optional.Wajam, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, No Action By User, [73], [-1],0.0.0
Adware.SearchAwesome, HKLM\SOFTWARE\SrcAAAesom Browser Enhancer, No Action By User, [4384], [424837],1.0.4330
Adware.SearchAwesome, HKLM\SOFTWARE\WOW6432NODE\SrcAAAesom Browser Enhancer, No Action By User, [4384], [424837],1.0.4330
Adware.Wajam, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\9d9161eb5c64197e6289eb840284924c, No Action By User, [150], [498505],1.0.4330
Adware.Wajam, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ccd57323c3dca8ec640485ba0d0c5b08, No Action By User, [150], [498505],1.0.4330
PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, No Action By User, [73], [170024],1.0.4330
PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, No Action By User, [73], [170024],1.0.4330
PUP.Optional.Wajam, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, No Action By User, [73], [170024],1.0.4330
Registry Value: 4
PUP.Optional.Wajam, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, No Action By User, [73], [-1],0.0.0
PUP.Optional.Wajam, HKU\S-1-5-21-3250475609-3111670466-3239219275-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, No Action By User, [73], [-1],0.0.0
PUP.Optional.Wajam, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, No Action By User, [73], [-1],0.0.0
Adware.AnonymizerGadget.PrxySvrRST, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|AnonymizerGadget, No Action By User, [14860], [490737],1.0.4330
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 2
Adware.Social2Search.EncJob, C:\PROGRAM FILES\86875816b9a0d9f6ff57435080963a5f, No Action By User, [7965], [415982],1.0.4330
Trojan.Agent, C:\WINDOWS\SYSWOW64\SSL, No Action By User, [17], [479103],1.0.4330
File: 27
Adware.Social2Search.EncJob, C:\USERS\JACK\APPDATA\ROAMING\Microsoft\Windows\Recent\WBE_uninstall.dat.lnk, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\PROGRAM FILES\86875816b9a0d9f6ff57435080963a5f\WBE_uninstall.dat, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\2ccc97723a504834ce3af46a94d6e667.exe, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\69548fa279162d0e55f2bf43e97e3360, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\b2fda2678e385cd7228abafe8b47b302.exe, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\dd1723c133187871813bcf004fad4b4c.ico, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\e11bf37b84d1a03a816210cedf878ce5.exe, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\mozcrt19.dll, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\nspr4.dll, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\nss3.dll, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\plc4.dll, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\plds4.dll, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\service.dat, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\service_64.dat, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\Program Files\86875816b9a0d9f6ff57435080963a5f\softokn3.dll, No Action By User, [7965], [415982],1.0.4330
Adware.Social2Search.EncJob, C:\WINDOWS\SYSTEM32\TASKS\86875816b9a0d9f6ff57435080963a5f, No Action By User, [7965], [-1],0.0.0
Trojan.Agent, C:\WINDOWS\SYSWOW64\SSL\XV.DB, No Action By User, [17], [479103],1.0.4330
Trojan.Agent, C:\Windows\SysWOW64\SSL\9755bceb514550c2 2.cer, No Action By User, [17], [479103],1.0.4330
Trojan.Agent, C:\Windows\SysWOW64\SSL\cert.db, No Action By User, [17], [479103],1.0.4330
Trojan.Agent, C:\Windows\SysWOW64\SSL\x.db, No Action By User, [17], [479103],1.0.4330
Adware.AnonymizerGadget.PrxySvrRST, C:\USERS\JACK\APPDATA\ROAMING\AGDATA\BIN\ANONYMIZERLAUNCHER.EXE, No Action By User, [14860], [490737],1.0.4330
Adware.Wajam, C:\WINDOWS\SYSTEM32\DRIVERS\9D9161EB5C64197E6289EB840284924C.SYS, No Action By User, [150], [498505],1.0.4330
Adware.Wajam, C:\WINDOWS\SYSTEM32\DRIVERS\CCD57323C3DCA8EC640485BA0D0C5B08.SYS, No Action By User, [150], [498505],1.0.4330
Generic.Malware/Suspicious, C:\$RECYCLE.BIN\S-1-5-21-3250475609-3111670466-3239219275-1002\$RIJU661\2CCC97723A504834CE3AF46A94D6E667.EXE, No Action By User, [0], [392686],1.0.4330
MachineLearning/Anomalous.100%, C:\$RECYCLE.BIN\S-1-5-21-3250475609-3111670466-3239219275-1002\$RIJU661\E11BF37B84D1A03A816210CEDF878CE5.EXE, No Action By User, [0], [392687],1.0.4330
Adware.AnonymizerGadget.PrxySvrRST, C:\PROGRAM FILES (X86)\ANONYMIZERGADGET\ANONYMIZERLAUNCHER.EXE, No Action By User, [14860], [490738],1.0.4330
Generic.Malware/Suspicious, C:\$RECYCLE.BIN\S-1-5-21-3250475609-3111670466-3239219275-1002\$RIJU661\B2FDA2678E385CD7228ABAFE8B47B302.EXE, No Action By User, [0], [392686],1.0.4330
Physical Sector: 0
(No malicious items detected)
(end)
malware report313.txt
