Many registry keys infected.

[Buru]

I scanned my computer using Malwarebytes Anti-Malware Free and it came up with 40+ infected files, most of which were registry keys. I'm not sure if I should quarantine these objects or just leave them alone, I'm worried I may be infected. Most of them are HKCR, HKLM, and HKCU, I'm not sure if these are important but some help would be appreciated.

[MrCharlie]

Welcome to the forum, can you post the log from Malwarebytes?

Thanks....MrC

[Buru]

Registry Keys Detected: 33

HKCR\CLSID\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> No action taken.

HKCR\TypeLib\{44444444-4444-4444-4444-440044224458} (Adware.GamePlayLabs) -> No action taken.

HKCR\Interface\{55555555-5555-5555-5555-550055225558} (Adware.GamePlayLabs) -> No action taken.

HKCR\CrossriderApp0002258.BHO.1 (Adware.GamePlayLabs) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> No action taken.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> No action taken.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLabs) -> No action taken.

HKCR\CLSID\{22222222-2222-2222-2222-220022222258} (Adware.GamePlayLab) -> No action taken.

HKCR\CrossriderApp0002258.Sandbox.1 (Adware.GamePlayLab) -> No action taken.

HKCR\CrossriderApp0002258.Sandbox (Adware.GamePlayLab) -> No action taken.

HKCR\CLSID\{33333333-3333-3333-3333-330033223358} (Adware.GamePlayLab) -> No action taken.

HKCR\CrossriderApp0002258.FBApi.1 (Adware.GamePlayLab) -> No action taken.

HKCR\CrossriderApp0002258.FBApi (Adware.GamePlayLab) -> No action taken.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65bcd620-07dd-012f-819f-073cf1b8f7c6} (Adware.GamePlayLab) -> No action taken.

HKCR\CrossriderApp0002258.BHO (Adware.GamePlayLab) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I Want This (Adware.GamePlayLab) -> No action taken.

HKCR\CrossriderApp0002258.BHO (PUP.CrossFire.Gen) -> No action taken.

HKCR\CrossriderApp0002258.BHO.1 (PUP.CrossFire.Gen) -> No action taken.

HKCR\CrossriderApp0002258.FBApi (PUP.CrossFire.Gen) -> No action taken.

HKCR\CrossriderApp0002258.FBApi.1 (PUP.CrossFire.Gen) -> No action taken.

HKCR\CrossriderApp0002258.Sandbox (PUP.CrossFire.Gen) -> No action taken.

HKCR\CrossriderApp0002258.Sandbox.1 (PUP.CrossFire.Gen) -> No action taken.

HKCU\Software\Cr_Installer\2258 (Adware.GamePlayLab) -> No action taken.

HKLM\SOFTWARE\Google\Chrome\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk (PUP.GamesPlayLab) -> No action taken.

HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk (PUP.GamesPlayLab) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> No action taken.

HKCR\CLSID\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> No action taken.

HKCR\TypeLib\{44444444-4444-4444-4444-440044224458} (PUP.GamePlayLab) -> No action taken.

HKCR\Interface\{55555555-5555-5555-5555-550055225558} (PUP.GamePlayLab) -> No action taken.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> No action taken.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> No action taken.

Registry Values Detected: 1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I Want This|Publisher (Adware.GamePlayLab) -> Data: 215 Apps -> No action taken.

Those were the registry keys it found, thank you for replying.

[MrCharlie]

You can delete them all.

These (PUP.GamePlayLab) are from:

http://www.systemloo...11-110011221158

I'm not sure about these:

PUP.CrossFire.Gen

MrC

[Buru]

Oh alright, thank you very much sir.

[MrCharlie]

OK, if you need more help on this please let me know, MrC

[Buru]

I'll make sure to notify you, thanks again.

[MrCharlie]

OK

Take a look at My Preventive Maintenance to avoid being infected again.

Good Luck and Thanks for using the forum, MrC

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!