Jump to content

Search the Community

Showing results for tags 'pup.optional.pcoptimizerpro'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Android Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3 Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • False Positives
    • Translator Lounge
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 2 results

  1. What is PC Optimizer Pro?The Malwarebytes research team has determined that PC Optimizer Pro is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.More information can be found on our Malwarebytes Labs blog.How do I know if I am infected with PC Optimizer Pro?This is how the main screen of the system optimizer looks:You will find these icons in your taskbar, your startmenu, your right-click menu, and on your desktop:and see these warnings during install:and this screen during "operations":You may see this entry in your list of installed programs:and these tasks in your list of Scheduled Tasks:How did PC Optimizer Pro get on my computer?These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their website:How do I remove PC Optimizer Pro?Our program Malwarebytes can detect and remove this potentially unwanted application. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of PC Optimizer Pro? No, Malwarebytes removes PC Optimizer Pro completely. This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks. How would the full version of Malwarebytes help protect me?We hope our application and this guide have helped you eradicate this system optimizer.As you can see below the full version of Malwarebytes would have protected you against the PC Optimizer Pro installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late. and we block access to their domain: Technical details for expertsYou may see these entries in FRST logs: (Xportsoft Technologies) C:\Program Files\PC Optimizer Pro\PCOptimizerPro.exe C:\Windows\System32\Tasks\PC Optimizer Pro Updates C:\Windows\System32\Tasks\PC Optimizer Pro64 Scan C:\Windows\System32\Tasks\PC Optimizer Pro Idle C:\Windows\System32\Tasks\PC Optimizer Pro64 startups C:\Users\Public\Desktop\PC Optimizer Pro.lnk C:\Windows\Tasks\PC Optimizer Pro Updates.job C:\Windows\Tasks\PC Optimizer Pro Idle.job C:\Windows\Tasks\PC Optimizer Pro64 startups.job C:\Windows\Tasks\PC Optimizer Pro64 Scan.job C:\ProgramData\PC Optimizer Pro C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Optimizer Pro C:\Program Files\PC Optimizer Pro PC Optimizer Pro (HKLM\...\PC Optimizer Pro) (Version: 8.1.1.3 - Xportsoft Technologies) <==== ATTENTION Task: {40C0E937-E245-4E4D-AFA0-ADF8A091AB63} - System32\Tasks\PC Optimizer Pro64 Scan => C:\Program Files\PC Optimizer Pro\StartApps.exe [2018-05-14] (Xportsoft Technologies) <==== ATTENTION Task: {B74B0B8F-207E-4606-A368-EB857B144DC9} - System32\Tasks\PC Optimizer Pro Idle => C:\Program Files\PC Optimizer Pro\StartApps.exe [2018-05-14] (Xportsoft Technologies) <==== ATTENTION Task: {C5B23C4D-31C2-446E-B432-247FDD101532} - System32\Tasks\PC Optimizer Pro64 startups => C:\Program Files\PC Optimizer Pro\StartApps.exe [2018-05-14] (Xportsoft Technologies) <==== ATTENTION Task: {D564F511-6242-41BA-975D-6AD0875B8DF0} - System32\Tasks\PC Optimizer Pro Updates => C:\Program Files\PC Optimizer Pro\StartApps.exe [2018-05-14] (Xportsoft Technologies) <==== ATTENTION Task: C:\Windows\Tasks\PC Optimizer Pro Idle.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION Task: C:\Windows\Tasks\PC Optimizer Pro Updates.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION Task: C:\Windows\Tasks\PC Optimizer Pro64 Scan.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION Task: C:\Windows\Tasks\PC Optimizer Pro64 startups.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION Alterations made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Program Files\PC Optimizer Pro Adds the file data.xml"="7/30/2012 9:57 AM, 3022 bytes, A Adds the file PCOptimizerPro.exe"="5/14/2018 11:56 AM, 15137008 bytes, A Adds the file PCOptProCtxMenu.dll"="5/14/2018 11:54 AM, 686080 bytes, A Adds the file PCOptProTrays.exe"="5/14/2018 11:56 AM, 3023600 bytes, A Adds the file StartApps.exe"="5/14/2018 11:56 AM, 433904 bytes, A Adds the file uninst.exe"="5/30/2018 10:26 AM, 87967 bytes, A Adds the file UpdatesDll.dll"="5/14/2018 11:57 AM, 1033448 bytes, A Adds the folder C:\Program Files\PC Optimizer Pro\Languages Adds the file DE.xml"="4/18/2018 9:53 AM, 48855 bytes, A Adds the file EN.xml"="4/18/2018 9:52 AM, 45684 bytes, A Adds the file ES.xml"="4/18/2018 9:53 AM, 50951 bytes, A Adds the file FR.xml"="4/18/2018 9:53 AM, 51828 bytes, A Adds the file IT.xml"="4/18/2018 9:53 AM, 49902 bytes, A Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Optimizer Pro Adds the file Live Support.url"="5/30/2018 10:26 AM, 87 bytes, A Adds the file PC Optimizer Pro.lnk"="5/30/2018 10:26 AM, 916 bytes, A Adds the file Uninstallation Guide.url"="5/30/2018 10:26 AM, 90 bytes, A Adds the file Visit Website.url"="5/30/2018 10:26 AM, 56 bytes, A Adds the folder C:\ProgramData\PC Optimizer Pro\LOGS Adds the file REG_LOGS_05_30_2018_10_26_41_AM.log"="5/30/2018 10:27 AM, 85118 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch Adds the file PC Optimizer Pro.lnk"="5/30/2018 10:26 AM, 942 bytes, A In the existing folder C:\Users\Public\Desktop Adds the file PC Optimizer Pro.lnk"="5/30/2018 10:26 AM, 918 bytes, A In the existing folder C:\Windows\System32\Tasks Adds the file PC Optimizer Pro Idle"="5/30/2018 10:26 AM, 2876 bytes, A Adds the file PC Optimizer Pro Updates"="5/30/2018 10:26 AM, 3460 bytes, A Adds the file PC Optimizer Pro64 Scan"="5/30/2018 10:26 AM, 3390 bytes, A Adds the file PC Optimizer Pro64 startups"="5/30/2018 10:26 AM, 2854 bytes, A In the existing folder C:\Windows\Tasks Adds the file PC Optimizer Pro Idle.job"="5/30/2018 10:26 AM, 444 bytes, A Adds the file PC Optimizer Pro Updates.job"="5/30/2018 10:26 AM, 446 bytes, A Adds the file PC Optimizer Pro64 Scan.job"="5/30/2018 10:26 AM, 414 bytes, A Adds the file PC Optimizer Pro64 startups.job"="5/30/2018 10:26 AM, 422 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\PCProCtxMenu] "(Default)"="REG_SZ", "{203ABD21-41F1-4F1B-BAE3-D6A89A90D239}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{203ABD21-41F1-4F1B-BAE3-D6A89A90D239}] "(Default)"="REG_SZ", "PCProCtxMenu Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{203ABD21-41F1-4F1B-BAE3-D6A89A90D239}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\PC Optimizer Pro\PCOptProCtxMenu.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{12AB121E-44C6-488B-8773-B0AE25E662E1}] "(Default)"="REG_SZ", "IPCProCtxMenu" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{12AB121E-44C6-488B-8773-B0AE25E662E1}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{12AB121E-44C6-488B-8773-B0AE25E662E1}\TypeLib] "(Default)"="REG_SZ", "{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\PCProCtxMenu] "(Default)"="REG_SZ", "{203ABD21-41F1-4F1B-BAE3-D6A89A90D239}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}\1.0] "(Default)"="REG_SZ", "PCOptProCtxMenu 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}\1.0\0\win64] "(Default)"="REG_SZ", "C:\Program Files\PC Optimizer Pro\PCOptProCtxMenu.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files\PC Optimizer Pro" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{12AB121E-44C6-488B-8773-B0AE25E662E1}] "(Default)"="REG_SZ", "IPCProCtxMenu" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{12AB121E-44C6-488B-8773-B0AE25E662E1}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{12AB121E-44C6-488B-8773-B0AE25E662E1}\TypeLib] "(Default)"="REG_SZ", "{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\PCOptimizerPro.exe] "(Default)"="REG_SZ", "C:\Program Files\PC Optimizer Pro\PCOptimizerPro.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Optimizer Pro] "DisplayIcon"="REG_SZ", "C:\Program Files\PC Optimizer Pro\PCOptimizerPro.exe" "DisplayName"="REG_SZ", "PC Optimizer Pro" "DisplayVersion"="REG_SZ", "8.1.1.3" "HelpLink"="REG_SZ", "http://www.pcoptimizerpro.com/help/index.htm" "InstallLocation"="REG_SZ", "C:\Program Files\PC Optimizer Pro" "MajorVersion"="REG_SZ", "8.1.1.3" "MinorVersion"="REG_SZ", "8.1.1.3" "Publisher"="REG_SZ", "Xportsoft Technologies" "UninstallString"="REG_SZ", "C:\Program Files\PC Optimizer Pro\uninst.exe" "URLInfoAbout"="REG_SZ", "http://www.pcoptimizerpro.com/livesupport.aspx?bit=64&tid=STD" "VersionMajor"="REG_SZ", "8.1.1.3" "VersionMinor"="REG_SZ", "8.1.1.3" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures] "PC Optimizer Pro Idle.job"="REG_BINARY, ................................ "PC Optimizer Pro Idle.job.fp"="REG_DWORD", -1207985913 "PC Optimizer Pro Updates.job"="REG_BINARY, ................................ "PC Optimizer Pro Updates.job.fp"="REG_DWORD", -138673695 "PC Optimizer Pro64 Scan.job"="REG_BINARY, ................................ "PC Optimizer Pro64 Scan.job.fp"="REG_DWORD", 259349527 "PC Optimizer Pro64 startups.job"="REG_BINARY, ................................ "PC Optimizer Pro64 startups.job.fp"="REG_DWORD", -1460999399 [HKEY_LOCAL_MACHINE\SOFTWARE\PC Optimizer Pro] "???"="REG_SZ", "1" "Application Paths"="REG_SZ", "1" "bclck"="REG_SZ", "-1" "BrowCnt"="REG_SZ", "230" "C???"="REG_SZ", "0" "CApplication Paths"="REG_SZ", "0" "Cchcache"="REG_SZ", "0" "Cchcookies"="REG_SZ", "0" "CCOM/ActiveX"="REG_SZ", "0" "CCustom Controls"="REG_SZ", "0" "CDeep Scan"="REG_SZ", "0" "Cdochis"="REG_SZ", "0" "Cdskerrlgfls"="REG_SZ", "0" "Cdwntmpfldr"="REG_SZ", "0" "Cffcache"="REG_SZ", "0" "Cffcookies"="REG_SZ", "0" "CFile Associations"="REG_SZ", "0" "CFile Extensions"="REG_SZ", "0" "Cflesrchhis"="REG_SZ", "0" "chcache"="REG_SZ", "1" "chcookies"="REG_SZ", "1" "CHelp && Resources"="REG_SZ", "0" "Cieautocomple"="REG_SZ", "0" "Ciecache"="REG_SZ", "0" "Ciecookies"="REG_SZ", "0" "Clgfls"="REG_SZ", "0" "Cnscache"="REG_SZ", "0" "Cnscookies"="REG_SZ", "0" "COM/ActiveX"="REG_SZ", "1" "Copcache"="REG_SZ", "0" "Copcookies"="REG_SZ", "0" "Cpgfls"="REG_SZ", "0" "Cprgshcts"="REG_SZ", "0" "Creclbn"="REG_SZ", "0" "CRnCmdHis"="REG_SZ", "0" "CShared Dlls"="REG_SZ", "0" "Cstmnckhis"="REG_SZ", "0" "Cstmnorhis"="REG_SZ", "0" "Ctmpfldr"="REG_SZ", "0" "Ctmpwndupfldr"="REG_SZ", "0" "CUninstall Entries"="REG_SZ", "0" "Custom Controls"="REG_SZ", "1" "CWindows Fonts"="REG_SZ", "0" "CwndTmpfls"="REG_SZ", "0" "Deep Scan"="REG_SZ", "1" "dochis"="REG_SZ", "1" "dskerrlgfls"="REG_SZ", "1" "dwntmpfldr"="REG_SZ", "1" "F???"="REG_SZ", "0" "FApplication Paths"="REG_SZ", "0" "Fchcache"="REG_SZ", "0" "Fchcookies"="REG_SZ", "0" "FCOM/ActiveX"="REG_SZ", "0" "FCustom Controls"="REG_SZ", "0" "FDeep Scan"="REG_SZ", "0" "Fdochis"="REG_SZ", "0" "Fdskerrlgfls"="REG_SZ", "0" "Fdwntmpfldr"="REG_SZ", "0" "ffcache"="REG_SZ", "1" "ffcookies"="REG_SZ", "1" "Fffcache"="REG_SZ", "0" "Fffcookies"="REG_SZ", "0" "FFile Associations"="REG_SZ", "0" "FFile Extensions"="REG_SZ", "0" "Fflesrchhis"="REG_SZ", "0" "FHelp && Resources"="REG_SZ", "0" "Fieautocomple"="REG_SZ", "0" "Fiecache"="REG_SZ", "0" "Fiecookies"="REG_SZ", "0" "File Associations"="REG_SZ", "1" "File Extensions"="REG_SZ", "1" "FixBrowCnt"="REG_SZ", "0" "FixInvCnt"="REG_SZ", "0" "FixJnkCnt"="REG_SZ", "0" "flesrchhis"="REG_SZ", "1" "Flgfls"="REG_SZ", "0" "Fnscache"="REG_SZ", "0" "Fnscookies"="REG_SZ", "0" "Fopcache"="REG_SZ", "0" "Fopcookies"="REG_SZ", "0" "Fpgfls"="REG_SZ", "0" "Fprgshcts"="REG_SZ", "0" "Freclbn"="REG_SZ", "0" "FRnCmdHis"="REG_SZ", "0" "FShared Dlls"="REG_SZ", "0" "Fstmnckhis"="REG_SZ", "0" "Fstmnorhis"="REG_SZ", "0" "Ftmpfldr"="REG_SZ", "0" "Ftmpwndupfldr"="REG_SZ", "0" "FUninstall Entries"="REG_SZ", "0" "FWindows Fonts"="REG_SZ", "0" "FwndTmpfls"="REG_SZ", "0" "Help && Resources"="REG_SZ", "1" "ieautocomple"="REG_SZ", "1" "iecache"="REG_SZ", "1" "iecookies"="REG_SZ", "1" "InvCnt"="REG_SZ", "25" "isthere"="REG_SZ", "1" "JnkCnt"="REG_SZ", "493" "lastScan"="REG_SZ", "30-05-2018 10:26:46" "lgfls"="REG_SZ", "1" "mnrptint"="REG_SZ", "230" "mnrptjnk"="REG_SZ", "493" "mnrptreg"="REG_SZ", "25" "nscache"="REG_SZ", "1" "nscookies"="REG_SZ", "1" "opcache"="REG_SZ", "1" "opcookies"="REG_SZ", "1" "pgfls"="REG_SZ", "1" "prgshcts"="REG_SZ", "1" "reclbn"="REG_SZ", "1" "RnCmdHis"="REG_SZ", "1" "Scanned"="REG_SZ", "206124" "Shared Dlls"="REG_SZ", "1" "startonrun"="REG_SZ", "0" "stateBrowCnt"="REG_SZ", "11" "stateInvCnt"="REG_SZ", "11" "stateJnkCnt"="REG_SZ", "14" "status"="REG_SZ", "1" "stmnckhis"="REG_SZ", "0" "stmnorhis"="REG_SZ", "1" "TErrors"="REG_SZ", "748" "TFixed"="REG_SZ", "0" "TFSpace"="REG_SZ", "384.67 MB" "tmpfldr"="REG_SZ", "1" "tmpwndupfldr"="REG_SZ", "1" "TTFixed"="REG_SZ", "0" "Uninstall Entries"="REG_SZ", "1" "Windows Fonts"="REG_SZ", "1" "wndTmpfls"="REG_SZ", "1" [HKEY_CURRENT_USER\Software\PC Optimizer Pro] "isains"="REG_SZ", "1" "isent"="REG_SZ", "1" "Lang"="REG_SZ", "EN" "lcerr"="REG_SZ", "" "LNID"="REG_SZ", "0" Malwarebytes log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 5/30/18 Scan Time: 10:34 AM Log File: 54d13cad-63e4-11e8-bf52-080027235d76.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.5302 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 240721 Threats Detected: 61 Threats Quarantined: 61 Time Elapsed: 2 min, 42 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 1 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES\PC OPTIMIZER PRO\PCOPTIMIZERPRO.EXE, Quarantined, [1261], [392397],1.0.5302 Module: 2 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES\PC OPTIMIZER PRO\PCOPTPROCTXMENU.DLL, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES\PC OPTIMIZER PRO\PCOPTIMIZERPRO.EXE, Quarantined, [1261], [392397],1.0.5302 Registry Key: 23 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Optimizer Pro64 Scan, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{40C0E937-E245-4E4D-AFA0-ADF8A091AB63}, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{40C0E937-E245-4E4D-AFA0-ADF8A091AB63}, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Optimizer Pro64 startups, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C5B23C4D-31C2-446E-B432-247FDD101532}, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{C5B23C4D-31C2-446E-B432-247FDD101532}, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Optimizer Pro Idle, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B74B0B8F-207E-4606-A368-EB857B144DC9}, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{B74B0B8F-207E-4606-A368-EB857B144DC9}, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PC Optimizer Pro Updates, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{D564F511-6242-41BA-975D-6AD0875B8DF0}, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{D564F511-6242-41BA-975D-6AD0875B8DF0}, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, HKCU\SOFTWARE\PC OPTIMIZER PRO, Quarantined, [1261], [260294],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC OPTIMIZER PRO, Quarantined, [1261], [260298],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\PC Optimizer Pro, Quarantined, [1261], [333185],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\CLASSES\INTERFACE\{12AB121E-44C6-488B-8773-B0AE25E662E1}, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{12AB121E-44C6-488B-8773-B0AE25E662E1}, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{12AB121E-44C6-488B-8773-B0AE25E662E1}, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\CLASSES\TYPELIB\{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\CLASSES\CLSID\{203ABD21-41F1-4F1B-BAE3-D6A89A90D239}, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\CLASSES\CLSID\{203ABD21-41F1-4F1B-BAE3-D6A89A90D239}\InprocServer32, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{003B9C22-6FE0-4BCA-A73F-9AA99B9BBDAA}, Quarantined, [1261], [333184],1.0.5302 Registry Value: 12 PUP.Optional.PCOptimizerPro, HKCU\SOFTWARE\PC OPTIMIZER PRO|ISAINS, Quarantined, [1261], [260294],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO64 STARTUPS.JOB, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO64 STARTUPS.JOB.FP, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO UPDATES.JOB, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO UPDATES.JOB.FP, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO IDLE.JOB, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO IDLE.JOB.FP, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO64 SCAN.JOB, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC OPTIMIZER PRO64 SCAN.JOB.FP, Quarantined, [1261], [411376],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PC OPTIMIZER PRO|PUBLISHER, Quarantined, [1261], [260298],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{40C0E937-E245-4E4D-AFA0-ADF8A091AB63}|PATH, Quarantined, [1261], [325241],1.0.5302 PUP.Optional.PCOptimizerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C5B23C4D-31C2-446E-B432-247FDD101532}|PATH, Quarantined, [1261], [325241],1.0.5302 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 3 PUP.Optional.PCOptimizerPro, C:\ProgramData\PC Optimizer Pro\LOGS, Quarantined, [1261], [182300],1.0.5302 PUP.Optional.PCOptimizerPro, C:\PROGRAMDATA\PC OPTIMIZER PRO, Quarantined, [1261], [182300],1.0.5302 PUP.Optional.PCOptimizerPro, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\PC OPTIMIZER PRO, Quarantined, [1261], [182301],1.0.5302 File: 20 PUP.Optional.PCOptimizerPro, C:\USERS\PUBLIC\DESKTOP\PC OPTIMIZER PRO.LNK, Quarantined, [1261], [260289],1.0.5302 PUP.Optional.PCOptimizerPro, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\PC OPTIMIZER PRO.LNK, Quarantined, [1261], [260312],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\SYSTEM32\TASKS\PC Optimizer Pro64 Scan, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\SYSTEM32\TASKS\PC Optimizer Pro64 startups, Quarantined, [1261], [325246],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\SYSTEM32\TASKS\PC Optimizer Pro Idle, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\SYSTEM32\TASKS\PC Optimizer Pro Updates, Quarantined, [1261], [260291],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\TASKS\PC Optimizer Pro64 Scan.job, Quarantined, [1261], [325247],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\TASKS\PC Optimizer Pro64 startups.job, Quarantined, [1261], [325247],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\TASKS\PC Optimizer Pro Idle.job, Quarantined, [1261], [260292],1.0.5302 PUP.Optional.PCOptimizerPro, C:\WINDOWS\TASKS\PC Optimizer Pro Updates.job, Quarantined, [1261], [260292],1.0.5302 PUP.Optional.PCOptimizerPro, C:\ProgramData\PC Optimizer Pro\LOGS\REG_LOGS_05_30_2018_10_26_41_AM.log, Quarantined, [1261], [182300],1.0.5302 PUP.Optional.PCOptimizerPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Optimizer Pro\Live Support.url, Quarantined, [1261], [182301],1.0.5302 PUP.Optional.PCOptimizerPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Optimizer Pro\PC Optimizer Pro.lnk, Quarantined, [1261], [182301],1.0.5302 PUP.Optional.PCOptimizerPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Optimizer Pro\Uninstallation Guide.url, Quarantined, [1261], [182301],1.0.5302 PUP.Optional.PCOptimizerPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Optimizer Pro\Visit Website.url, Quarantined, [1261], [182301],1.0.5302 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES\PC OPTIMIZER PRO\PCOPTPROCTXMENU.DLL, Quarantined, [1261], [333184],1.0.5302 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES\PC OPTIMIZER PRO\PCOPTIMIZERPRO.EXE, Quarantined, [1261], [392397],1.0.5302 PUP.Optional.PCOptimizerPro, C:\USERS\{username}\DESKTOP\PCOPTIMIZERPROINSTALLER.EXE, Quarantined, [1261], [392397],1.0.5302 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES\PC OPTIMIZER PRO\PCOPTPROTRAYS.EXE, Quarantined, [1261], [115333],1.0.5302 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES\PC OPTIMIZER PRO\UNINST.EXE, Quarantined, [1261], [392397],1.0.5302 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat.We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  2. What is SpeedItupFree? The Malwarebytes research team has determined that SpeedItupFree is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems. More information can be found on our Malwarebytes Labs blog. How do I know if I am infected with SpeedItupFree? This is how the main screen of the sytem optimizer looks: You will find these icons in your taskbar, your startmenu, and on your desktop: and see this warning during install: and these screens during "operations": You may see this entry in your list of installed programs: and advertisements like these: How did SpeedItupFree get on my computer? These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their site. How do I remove SpeedItupFree? Our program Malwarebytes can detect and remove this potentially unwanted application. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of SpeedItupFree? No, Malwarebytes removes SpeedItupFree completely. The shortcut called $1 PC Tech Support on the desktop can be deleted. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this system optimizer. As you can see below the full version of Malwarebytes would have protected you against the SpeedItupFree installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late. Technical details for experts You may see these entries in FRST logs: () C:\Program Files (x86)\SpeedItup Free\spdfrmon.exe (RJL Software, Inc.) C:\Program Files (x86)\Display Offer\delayexec.exe (MicroSmarts LLC.) C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe HKCU\...\Run: [SpeedItupFree] => C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe [7948448 2017-07-21] (MicroSmarts LLC.) R2 spdfrmon; C:\Program Files (x86)\SpeedItup Free\spdfrmon.exe [921680 2013-11-01] () C:\Program Files (x86)\Display Offer C:\Program Files (x86)\SpeedItup Free C:\Windows\SpeedItup Free Setup Log.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedItup Free.lnk C:\ProgramData\Microsoft\Windows\Start Menu\SpeedItup Free.lnk C:\Users\Public\Desktop\SpeedItup Free.lnk C:\Windows\SpeedItup Free C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedItup Free C:\ProgramData\spds90.txt C:\Users\{username}\AppData\Local\Temp\spuad0.exe C:\Users\{username}\AppData\Local\Temp\spuad1.exe SpeeditupFree (HKLM-x32\...\SpeeditupFree) (Version: 11.20 - MicroSmarts LLC) <==== ATTENTION Alterations made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Program Files (x86)\Display Offer Adds the file delayexec.exe"="7/20/2013 6:23 PM, 174640 bytes, A Adds the file ThankYou"="7/21/2017 1:01 PM, 11168 bytes, A Adds the file wait.exe"="8/14/2014 2:33 AM, 1847272 bytes, A Adds the folder C:\Program Files (x86)\SpeedItup Free Adds the file Checkup.dat"="9/1/2011 3:13 AM, 1366016 bytes, A Adds the file delayexec.exe"="3/22/2016 6:32 PM, 174752 bytes, A Adds the file Ext.dll"="7/20/2011 6:55 AM, 66048 bytes, A Adds the file IRIMG1.JPG"="7/21/2017 12:32 PM, 2362 bytes, A Adds the file IRIMG2.JPG"="7/21/2017 12:32 PM, 41278 bytes, A Adds the file IRIMG3.JPG"="7/21/2017 12:32 PM, 29054 bytes, A Adds the file irunin.dat"="7/21/2017 12:32 PM, 93816 bytes, A Adds the file irunin.xml"="7/21/2017 12:32 PM, 16049 bytes, A Adds the file order.ini"="7/17/2016 6:34 PM, 33 bytes, A Adds the file spdfrmon.exe"="11/1/2013 9:26 PM, 921680 bytes, A Adds the file speeditupfree.exe"="7/21/2017 1:00 PM, 7948448 bytes, A Adds the file speeditupfree.exe_"="7/21/2017 1:00 PM, 7948448 bytes, A Adds the file ThankYou"="7/21/2017 12:32 PM, 52975 bytes, A Adds the file upgradepath.ini"="9/12/2015 12:03 AM, 26 bytes, A Adds the folder C:\Program Files (x86)\SpeedItup Free\Help Adds the file index.html"="9/1/2011 4:06 AM, 6217 bytes, A Adds the folder C:\Program Files (x86)\SpeedItup Free\Help\Images Adds the file copyright.gif"="3/23/2007 7:58 AM, 517 bytes, A Adds the file forhelpfile.jpg"="9/1/2011 4:05 AM, 76941 bytes, A Adds the file index_01.gif"="6/8/2011 4:46 AM, 15342 bytes, A Adds the file index_02.gif"="6/29/2005 5:00 PM, 5066 bytes, A Adds the file index_03.gif"="6/29/2005 5:00 PM, 1611 bytes, A Adds the file index_04.gif"="6/29/2005 5:00 PM, 1215 bytes, A Adds the file index_05.gif"="6/29/2005 5:00 PM, 393 bytes, A Adds the file index_06.gif"="6/29/2005 5:00 PM, 2293 bytes, A Adds the file index_07.gif"="6/29/2005 5:00 PM, 936 bytes, A Adds the file index_08.gif"="7/2/2005 3:41 PM, 2714 bytes, A Adds the file index_09.gif"="6/29/2005 5:00 PM, 1252 bytes, A Adds the file index_10.gif"="6/29/2005 5:00 PM, 1457 bytes, A Adds the file index_11.gif"="6/29/2005 5:00 PM, 104 bytes, A Adds the file index_12.gif"="6/29/2005 5:00 PM, 162 bytes, A Adds the file index_13.gif"="6/29/2005 5:00 PM, 3529 bytes, A Adds the file index_14.gif"="6/29/2005 5:00 PM, 499 bytes, A Adds the file index_15.gif"="6/29/2005 5:00 PM, 471 bytes, A Adds the file index_16.gif"="6/29/2005 5:00 PM, 538 bytes, A Adds the file index_17.gif"="6/29/2005 5:00 PM, 236 bytes, A Adds the file index_18.gif"="6/29/2005 5:00 PM, 543 bytes, A Adds the file index_19.gif"="6/29/2005 5:00 PM, 1492 bytes, A Adds the file index_20.gif"="6/29/2005 5:00 PM, 506 bytes, A Adds the file index_21.gif"="6/29/2005 5:00 PM, 1449 bytes, A Adds the file index_22.gif"="6/29/2005 5:00 PM, 436 bytes, A Adds the file index_23.gif"="6/29/2005 5:00 PM, 4084 bytes, A Adds the file index_24.gif"="6/29/2005 5:00 PM, 476 bytes, A Adds the file index_25.gif"="6/29/2005 5:00 PM, 119 bytes, A Adds the file spacer.gif"="6/29/2005 5:00 PM, 43 bytes, A In the existing folder C:\ProgramData Adds the file spds90.txt"="7/21/2017 12:32 PM, 0 bytes, A In the existing folder C:\ProgramData\Microsoft\Windows\Start Menu Adds the file SpeedItup Free.lnk"="7/21/2017 12:32 PM, 1980 bytes, A In the existing folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs Adds the file SpeedItup Free.lnk"="7/21/2017 12:32 PM, 1986 bytes, A Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedItup Free Adds the file SpeedItup Free.lnk"="7/21/2017 12:32 PM, 1992 bytes, A Adds the file Uninstall SpeedItup Free.lnk"="7/21/2017 12:32 PM, 1956 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch Adds the file SpeedItup Free.lnk"="7/21/2017 12:32 PM, 1998 bytes, A In the existing folder C:\Users\Public\Desktop Adds the file SpeedItup Free.lnk"="7/21/2017 12:32 PM, 1974 bytes, A In the existing folder C:\Windows Adds the file SpeedItup Free Setup Log.txt"="7/21/2017 12:32 PM, 15146 bytes, A Adds the folder C:\Windows\SpeedItup Free Adds the file lua5.1.dll"="7/21/2017 12:32 PM, 325960 bytes, A Adds the file uninstall.exe"="7/21/2017 12:32 PM, 1353056 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}] "(Default)"="REG_SZ", "spdfrmon.Gate" "AuthenticationLevel"="REG_DWORD", 1 "LocalService"="REG_SZ", "spdfrmon" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{A245B088-41FA-478E-8DEA-86177F1394BB}] "(Default)"="REG_SZ", "spdfrmon" "LocalService"="REG_SZ", "spdfrmon" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\spdfrmon.exe] "(Default)"="REG_SZ", "" "AppID"="REG_SZ", "{A245B088-41FA-478E-8DEA-86177F1394BB}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}] "(Default)"="REG_SZ", "ISyncEvents" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}\TypeLib] "(Default)"="REG_SZ", "{A1011E88-B997-11CF-2222-0080C7B2D6BB}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}] "(Default)"="REG_SZ", "ISyncAPI" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}\TypeLib] "(Default)"="REG_SZ", "{A1011E88-B997-11CF-2222-0080C7B2D6BB}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}] "(Default)"="REG_SZ", "_IMySyncEvents" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020420-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}\TypeLib] "(Default)"="REG_SZ", "{A1011E88-B997-11CF-2222-0080C7B2D6BB}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spdfrmon.Gate] "(Default)"="REG_SZ", "spdfrmon.Gate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spdfrmon.Gate\CLSID] "(Default)"="REG_SZ", "{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spdfrmon.Gate\CurVer] "(Default)"="REG_SZ", "spdfrmon.Gate.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spdfrmon.Gate.1] "(Default)"="REG_SZ", "spdfrmon.Gate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\spdfrmon.Gate.1\CLSID] "(Default)"="REG_SZ", "{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A1011E88-B997-11CF-2222-0080C7B2D6BB}\1.0] "(Default)"="REG_SZ", "SpeedItup Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A1011E88-B997-11CF-2222-0080C7B2D6BB}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files (x86)\SpeedItup Free\spdfrmon.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A1011E88-B997-11CF-2222-0080C7B2D6BB}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A1011E88-B997-11CF-2222-0080C7B2D6BB}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files (x86)\SpeedItup Free" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}] "(Default)"="REG_SZ", "spdfrmon.Gate" "AppID"="REG_SZ", "{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}\LocalServer32] "(Default)"="REG_SZ", "C:\Program Files (x86)\SpeedItup Free\spdfrmon.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}\ProgID] "(Default)"="REG_SZ", "spdfrmon.Gate.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}\TypeLib] "(Default)"="REG_SZ", "{A1011E88-B997-11CF-2222-0080C7B2D6BB}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}\VersionIndependentProgID] "(Default)"="REG_SZ", "spdfrmon.Gate" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}] "(Default)"="REG_SZ", "ISyncEvents" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}\TypeLib] "(Default)"="REG_SZ", "{A1011E88-B997-11CF-2222-0080C7B2D6BB}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}] "(Default)"="REG_SZ", "ISyncAPI" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}\TypeLib] "(Default)"="REG_SZ", "{A1011E88-B997-11CF-2222-0080C7B2D6BB}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}] "(Default)"="REG_SZ", "_IMySyncEvents" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020420-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}\TypeLib] "(Default)"="REG_SZ", "{A1011E88-B997-11CF-2222-0080C7B2D6BB}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SpeeditupFree] "Contact"="REG_SZ", "MicroSmarts LLC Support Department" "DisplayIcon"="REG_SZ", ""C:\Windows\SpeedItup Free\uninstall.exe"" "DisplayName"="REG_SZ", "SpeeditupFree" "DisplayVersion"="REG_SZ", "11.20" "HelpLink"="REG_SZ", "http://www.speeditupfree.com" "InstallLocation"="REG_SZ", "C:\Program Files (x86)\SpeedItup Free" "NoModify"="REG_DWORD", 1 "NoRepair"="REG_DWORD", 1 "Publisher"="REG_SZ", "MicroSmarts LLC" "UninstallString"="REG_SZ", ""C:\Windows\SpeedItup Free\uninstall.exe" "/U:C:\Program Files (x86)\SpeedItup Free\irunin.xml"" "URLInfoAbout"="REG_SZ", "http://www.speeditupfree.com" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\spdfrmon] "DisplayName"="REG_SZ", "spdfrmon" "ErrorControl"="REG_DWORD", 1 "Group"="REG_SZ", "UIGroup" "ImagePath"="REG_EXPAND_SZ, "C:\Program Files (x86)\SpeedItup Free\spdfrmon.exe" "ObjectName"="REG_SZ", "LocalSystem" "Start"="REG_DWORD", 2 "Type"="REG_DWORD", 16 "WOW64"="REG_DWORD", 1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "SpeedItupFree"="REG_SZ", ""C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"" Malwarebytes log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/21/17 Scan Time: 1:21 PM Log File: mbamSpeedItUpFree.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2409 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 338965 Threats Detected: 96 Threats Quarantined: 96 Time Elapsed: 2 min, 12 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 3 PUP.Optional.SpeedItUp, C:\PROGRAM FILES (X86)\SPEEDITUP FREE\SPDFRMON.EXE, Quarantined, [1201], [329424],1.0.2409 PUP.Optional.PCOptimizerPro, C:\Program Files (x86)\Display Offer\delayexec.exe, Quarantined, [202], [329412],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe, Quarantined, [1201], [329448],1.0.2409 Module: 3 PUP.Optional.SpeedItUp, C:\PROGRAM FILES (X86)\SPEEDITUP FREE\SPDFRMON.EXE, Quarantined, [1201], [329424],1.0.2409 PUP.Optional.PCOptimizerPro, C:\Program Files (x86)\Display Offer\delayexec.exe, Quarantined, [202], [329412],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe, Quarantined, [1201], [329448],1.0.2409 Registry Key: 24 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\TYPELIB\{A1011E88-B997-11CF-2222-0080C7B2D6BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\INTERFACE\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\INTERFACE\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\INTERFACE\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0142D788-C4FC-4ED8-2222-D654E27AF7F8}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A1843388-EFC2-49C9-2222-FC0C403B0EBB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A1D87888-DEAA-4971-2222-5D5046F2B3BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A1011E88-B997-11CF-2222-0080C7B2D6BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{A1011E88-B997-11CF-2222-0080C7B2D6BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\spdfrmon, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\spdfrmon.Gate, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\spdfrmon.Gate.1, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\APPID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A19F8F88-F91E-4E49-2222-BD21AB39D1BB}, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\APPID\SPDFRMON.EXE, Delete-on-Reboot, [1201], [329818],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SpeeditupFree, Delete-on-Reboot, [1201], [329420],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\SPDFRMON.EXE, Delete-on-Reboot, [1201], [329818],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\SPDFRMON.EXE, Delete-on-Reboot, [1201], [329818],1.0.2409 Registry Value: 4 PUP.Optional.SpeedItUp, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SpeedItupFree, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\APPID\SPDFRMON.EXE|APPID, Delete-on-Reboot, [1201], [329818],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\SPDFRMON.EXE|APPID, Delete-on-Reboot, [1201], [329818],1.0.2409 PUP.Optional.SpeedItUp, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\SPDFRMON.EXE|APPID, Delete-on-Reboot, [1201], [329818],1.0.2409 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 6 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES (X86)\DISPLAY OFFER, Delete-on-Reboot, [202], [329412],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\PROGRAM FILES (X86)\SPEEDITUP FREE, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\SPEEDITUP FREE, Delete-on-Reboot, [1201], [329450],1.0.2409 PUP.Optional.SpeedItUp, C:\WINDOWS\SPEEDITUP FREE, Delete-on-Reboot, [1201], [329420],1.0.2409 File: 56 PUP.Optional.SpeedItUp, C:\PROGRAM FILES (X86)\SPEEDITUP FREE\SPDFRMON.EXE, Delete-on-Reboot, [1201], [329424],1.0.2409 PUP.Optional.SpeedItUp, C:\PROGRAMDATA\SPDS90.TXT, Delete-on-Reboot, [1201], [329815],1.0.2409 PUP.Optional.SpeedItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\SPEEDITUP FREE.LNK, Delete-on-Reboot, [1201], [329814],1.0.2409 PUP.Optional.SpeedItUp, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\SPEEDITUP FREE.LNK, Delete-on-Reboot, [1201], [329817],1.0.2409 PUP.Optional.SpeedItUp, C:\USERS\PUBLIC\DESKTOP\SPEEDITUP FREE.LNK, Delete-on-Reboot, [1201], [329418],1.0.2409 PUP.Optional.PCOptimizerPro, C:\PROGRAM FILES (X86)\DISPLAY OFFER\THANKYOU, Delete-on-Reboot, [202], [329412],1.0.2409 PUP.Optional.PCOptimizerPro, C:\Program Files (x86)\Display Offer\delayexec.exe, Delete-on-Reboot, [202], [329412],1.0.2409 PUP.Optional.PCOptimizerPro, C:\Program Files (x86)\Display Offer\wait.exe, Delete-on-Reboot, [202], [329412],1.0.2409 PUP.Optional.SpeedItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\SPEEDITUP FREE.LNK, Delete-on-Reboot, [1201], [329449],1.0.2409 PUP.Optional.SpeedItUp, C:\PROGRAM FILES (X86)\SPEEDITUP FREE\CHECKUP.DAT, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\copyright.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\forhelpfile.jpg, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_01.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_02.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_03.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_04.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_05.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_06.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_07.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_08.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_09.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_10.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_11.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_12.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_13.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_14.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_15.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_16.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_17.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_18.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_19.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_20.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_21.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_22.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_23.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_24.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\index_25.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\Images\spacer.gif, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Help\index.html, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\delayexec.exe, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\Ext.dll, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\IRIMG1.JPG, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\IRIMG2.JPG, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\IRIMG3.JPG, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\irunin.dat, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\irunin.xml, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\order.ini, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe_, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\ThankYou, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\Program Files (x86)\SpeedItup Free\upgradepath.ini, Delete-on-Reboot, [1201], [329448],1.0.2409 PUP.Optional.SpeedItUp, C:\WINDOWS\SPEEDITUP FREE SETUP LOG.TXT, Delete-on-Reboot, [1201], [329422],1.0.2409 PUP.Optional.SpeedItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\SPEEDITUP FREE\SPEEDITUP FREE.LNK, Delete-on-Reboot, [1201], [329450],1.0.2409 PUP.Optional.SpeedItUp, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedItup Free\Uninstall SpeedItup Free.lnk, Delete-on-Reboot, [1201], [329450],1.0.2409 PUP.Optional.SpeedItUp, C:\WINDOWS\SPEEDITUP FREE\UNINSTALL.EXE, Delete-on-Reboot, [1201], [329420],1.0.2409 PUP.Optional.SpeedItUp, C:\Windows\SpeedItup Free\lua5.1.dll, Delete-on-Reboot, [1201], [329420],1.0.2409 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
×

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.