Problem Installing Malwarebytes: Runtime Error (at 110:137) Could not call proc

[Kuletunge]

Hello. I need to get rid of some malware on my computer but get this error message when I try to install Malwarebytes. Any advice would be greatly appreciated. Thanks.

[kevinf80]

Hello Kuletunge and welcome to Malwarebytes, My screen name is kevinf80, i`m here to help clean up your system, continue as follows please: Anyone other than the original starter of this thread please DO NOT follow the instructions and advice posted as replies here, my help and advice is NOT related to your system and will probably cause more harm than good... Download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...   Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach those logs to your reply. Let me see those logs in your reply... Thank you, Kevin...

[Kuletunge]

Here are the files:

FRST.txt

Addition.txt

[kevinf80]

Thanks for those logs,

Run FRST one more time:

Type the following in the edit box after "Search:".

dnsapi.dll

Click Search button and post the log (Search.txt) it makes to your reply.

 

 

[Kuletunge]

Ok.

Search.txt

[kevinf80]

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Run FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Please download Malwarebytes Anti-Malware   Install the progam and select update. Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits. In the same tab, under PUP and PUM detections make sure it is set to Treat detections as malware. Click the Scan tab, choose Threat Scan is checked and click Scan Now. If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes. Upon completion of the scan (or after the reboot), click the History tab. Click Application Logs and double-click the Scan Log. At the bottom click Export and choose Text file. Save the file to your desktop and include its content in your next reply.   Let me see those logs in your reply.... Thank you, Kevin

Fixlist.txt

[Kuletunge]

It worked! That's amazing. Thank you so much!!!

Fixlog.txt

mwbexport.txt

[kevinf80]

You`ve posted a "Protection" log from Malwarebytes, I wanted to see the "Scan" log... Continue as follows:

Download AdwCleaner by Xplode onto your Desktop.   Double click on Adwcleaner.exe to run the tool. Click on the Scan in the Actions box Please wait fot the scan to finish.. When "Waiting for action.Please uncheck elements you want to keep" shows in top line.. Click on the Cleaning box. Next click OK on the "Closing Programs" pop up box. Click OK on the Information box & again OK to allow the necessary reboot After restart the AdwCleaner(C*)-Notepad log will appear, please copy/paste it in your next reply. Where * is the number relative to list of scans completed... Next, Download Sophos Free Virus Removal Tool and save it to your desktop.   Double click the icon and select Run Click Next Select I accept the terms in this license agreement, then click Next twice Click Install Click Finish to launch the program Once the virus database has been updated click Start Scanning If any threats are found click Details, then View log file... (bottom left hand corner) Copy and paste the results in your reply Close the Notepad document, close the Threat Details screen, then click Start cleanup Click Exit to close the program If no threats were found please confirm that result.... Next, Please download Security Analysis by Rocket Grannie from here: http://rocketgrannie.spywareinfoforum.org/RGSA.exe   Save it to your Desktop. Close your security software to avoid potential conflicts. Double click RGSA.exe Click OK on the copyright-disclaimer It will produce a log named SALog.txt on the Desktop or in the same folder from where the tool is run if installed elsewhere. Please copy and paste the contents of that log in this topic. Note: The link to the most current version of the program will always be in the first post of this topic. Note: (Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run to continue.) Note: The current java version on XP will show as "out of date". Note: Flash Player ActiveX is pre-installed with Internet Explorer in Windows 10 and updates Automatically. Please post your feedback in this topic. Let me see those logs in your reply, also let me know if there are any remaining issues or concerns... Thank you, Kevin...

 

[Kuletunge]

Quote

# AdwCleaner v5.200 - Logfile created 25/06/2016 at 18:46:49
# Updated 14/06/2016 by ToolsLib
# Database : 2016-06-25.2 [Server]
# Operating system : Windows 10 Pro  (X64)
# Username : toshiba - TOSHIBA-PC
# Running from : C:\Users\toshiba\Downloads\AdwCleaner.exe
# Option : Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : MPCProtectService
[-] Service Deleted : MPCKpt

***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
[#] Folder Deleted : C:\Program Files (x86)\MPC Cleaner
[-] Folder Deleted : C:\Users\toshiba\AppData\Roaming\MCorp
[#] Folder Deleted : C:\Users\toshiba\AppData\Roaming\MCorp

***** [ Files ] *****

[!] File Not Deleted : C:\WINDOWS\SysNative\drivers\MPCKpt.sys

***** [ DLLs ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
[-] Key Deleted : HKLM\SOFTWARE\MPC

***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [4506 bytes] - [23/06/2016 16:47:59]
C:\AdwCleaner\AdwCleaner[C2].txt - [1423 bytes] - [25/06/2016 18:46:49]
C:\AdwCleaner\AdwCleaner[S1].txt - [4467 bytes] - [23/06/2016 16:44:43]
C:\AdwCleaner\AdwCleaner[S2].txt - [1495 bytes] - [25/06/2016 18:39:59]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1642 bytes] ##########

Quote

No threats

Quote

Result of Security Analysis by Rocket Grannie (x86) Updated: 18th June 2016
Running from:C:\Users\toshiba\Downloads (20:49:04 - 06/25/2016)
***---------------------------------------------------------***
Microsoft Windows 10 Pro X64
UAC is Enabled!
Internet Explorer 11
Default Browser: Microsoft Edge
***-----------------Anti-Virus - Firewall-------------------***
Windows Defender (Disabled - Up to Date)
avast! Antivirus (Enabled - Up to Date)
Windows Firewall is Enabled!
Searching for any other Firewall
*No other Firewall Installed*
***----------------AntiSpyware - Miscellaneous---------------***
Adobe Flash Player Plugin is not installed
Java is not installed
Google Chrome (version 51)
Malwarebytes Anti-Malware (version 2.2.1.1043)
Microsoft Silverlight (version 5)

***----------------Analysis Complete-------------------------***

 

[kevinf80]

What is the current status of your system, do you have any remaining issues or concerns.... Logs look ok..

Thank you,

Kevin

[Kuletunge]

Everything is good apart from a remaining program called MPC cleaner which I am pretty sure is malware. Any advice? Is it also possible to stop the malwarebytes pop up on the bottom right screen or is it safe to uninstall it now?

[kevinf80]

What popup do you get from Malwarebytes, can you post a screen shot...

To remove MPC try the following Uninstaller: (you can also use it to uninstall Sophos..

Download GeekUninstaller from here: http://www.geekuninstaller.com/download (Choose free version) Save Geek.zip to your Desktop. (Visit the Home page at that link for necessary information) Extract Geek Uninstaller and save to your Desktop. There is no need to install, the executable is portable and can also be run from a USB if required. Run the tool, the main GUI will populate with installed programs list, Left click on Program name to highlight that entry. Select Action from the Menu bar, then Uninstall from there follow the prompts. If Uninstall fails open the "Action" menu one more time and use "Force Removal" option   Let me know if that removes MPC for you, also post screen shot of Malwarebytes popup if possible

[Kuletunge]

Here is the pop up. I am just going to restart to see if the MPC shortcut reappears.

[kevinf80]

Ah now I see what you mean, did you uninstall MPC with GeekUninstaller, if that did not work we can manually remove it with FRST fix...

[Kuletunge]

MPC shortcut is still present and as a chrome homepage. How do I go about removing it with FRST fix? Solved the popups.

Edited June 25, 2016 by Kuletunge

[kevinf80]

Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt  under "Optional scan" Select scan, when done post the new logs....

 

[Kuletunge]

Quote

 

 

FRST.txt

Addition.txt

[kevinf80]

I do not see MPC listed as the Homepage for Chrome, have you fixed that yourself....

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Fixlist.txt

[Kuletunge]

Quote

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-06-2016 01
Ran by toshiba (2016-06-26 02:38:09) Run:2
Running from C:\Users\toshiba\Downloads
Loaded Profiles: toshiba &  (Available Profiles: toshiba)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-06-01] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [302680 2016-06-01] (Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Avira
R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [350688 2016-06-02] (DotC United Inc)
2016-06-25 21:16 - 2016-06-25 21:16 - 00001798 _____ C:\Users\Public\Desktop\MPC Cleaner.lnk
2016-06-25 21:16 - 2016-06-25 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
2016-06-02 17:19 - 2016-06-02 17:53 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner
2016-06-02 17:19 - 2016-06-02 17:42 - 00060136 ____N (DotC United Inc) C:\WINDOWS\system32\Drivers\MPCKpt.sys
2016-05-28 23:02 - 2016-06-23 03:59 - 00000000 ____D C:\ProgramData\Avg
2016-05-28 23:02 - 2016-06-02 18:24 - 00000000 ____D C:\Users\toshiba\AppData\Local\Avg
2016-06-22 21:53 - 2016-06-25 18:47 - 00000000 ____D C:\ProgramData\Avira
2016-06-22 21:53 - 2016-06-25 18:47 - 00000000 ____D C:\Program Files (x86)\Avira
2016-06-22 21:53 - 2016-06-25 18:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-06-22 21:52 - 2016-06-22 21:52 - 04657056 _____ (Avira Operations GmbH & Co. KG) C:\Users\toshiba\Downloads\avira_en_av_576afa8f7ef22__ws.exe
C:\Users\toshiba\AppData\Local\Temp\avgnt.exe
C:\Users\toshiba\AppData\Local\Temp\libeay32.dll
C:\Users\toshiba\AppData\Local\Temp\msvcr120.dll
C:\Users\toshiba\AppData\Local\Temp\sqlite3.dll
CMD: ipconfig /flushdns
EmptyTemp:
end

*****************

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Avira SystrayStartTrigger => value removed successfully
Avira.ServiceHost => service removed successfully
C:\Program Files (x86)\Avira => moved successfully
MPCProtectService => Unable to stop service.
MPCProtectService => service could not remove
C:\Users\Public\Desktop\MPC Cleaner.lnk => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC => moved successfully

"C:\Program Files (x86)\MPC Cleaner" folder move:

Could not move "C:\Program Files (x86)\MPC Cleaner" => Scheduled to move on reboot.

Could not move "C:\WINDOWS\system32\Drivers\MPCKpt.sys" => Scheduled to move on reboot.
C:\ProgramData\Avg => moved successfully
C:\Users\toshiba\AppData\Local\Avg => moved successfully
C:\ProgramData\Avira => moved successfully
"C:\Program Files (x86)\Avira" => not found.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira => moved successfully
C:\Users\toshiba\Downloads\avira_en_av_576afa8f7ef22__ws.exe => moved successfully
C:\Users\toshiba\AppData\Local\Temp\avgnt.exe => moved successfully
C:\Users\toshiba\AppData\Local\Temp\libeay32.dll => moved successfully
C:\Users\toshiba\AppData\Local\Temp\msvcr120.dll => moved successfully
C:\Users\toshiba\AppData\Local\Temp\sqlite3.dll => moved successfully

=========  ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 5167808 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 190747323 B
Edge => 0 B
Chrome => 78750603 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 5714 B
NetworkService => 0 B
toshiba => 1588956 B

RecycleBin => 0 B
EmptyTemp: => 263.5 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-06-26 02:43:09)

"C:\Program Files (x86)\MPC Cleaner" => Could not move
"C:\WINDOWS\system32\Drivers\MPCKpt.sys" => Could not move

==== End of Fixlog 02:43:13 ====

The MPC is more of a automatic tab that opens rather than a homepage.

[kevinf80]

Download GeekUninstaller from here: http://www.geekuninstaller.com/download (Choose free version) Save Geek.zip to your Desktop. (Visit the Home page at that link for necessary information) Extract Geek Uninstaller and save to your Desktop. There is no need to install, the executable is portable and can also be run from a USB if required. Run the tool, the main GUI will populate with installed programs list, Left click on MPC Cleaner to highlight that entry. Select Action from the Menu bar, then Uninstall from there follow the prompts. If Uninstall fails open the "Action" menu one more time and use "Force Removal" option Next, Please download Junkware Removal Tool to your desktop.   Shut down your protection software now to avoid potential conflicts. (re-enable when done) Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator". The tool will open and start scanning your system. Please be patient as this can take a while to complete depending on your system's specifications. On completion, a log (JRT.txt) is saved to your desktop and will automatically open. Post the contents of JRT.txt into your next message. Next, Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs....

[Kuletunge]

Quote

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 10 Pro x64 
Ran by toshiba (Administrator) on Sun 06/26/2016 at  9:29:36.53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 7 

Failed to delete: C:\Program Files (x86)\mpc cleaner (Folder) 
Successfully deleted: C:\ProgramData\Start Menu\Programs\mpc (Folder) 
Successfully deleted: C:\Users\Public\Desktop\mpc cleaner.lnk (Shortcut) 
Successfully deleted: C:\WINDOWS\prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-69884B2D.pf (File) 
Successfully deleted: C:\WINDOWS\prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-AB23AA51.pf (File) 
Successfully deleted: C:\WINDOWS\prefetch\AVAST_FREE_ANTIVIRUS_SETUP_ON-B333011E.pf (File) 
Successfully deleted: C:\WINDOWS\prefetch\AVIRA_FREE_ANTIVIRUS_15017DE.-E10F6AE3.pf (File) 

Registry: 3 

Failed to delete: HKLM\SYSTEM\CurrentControlSet\services\MPCKpt (Registry Key) 
Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\PCSUUCDRV (Registry Key) 
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Main\\SearchAssistant (Registry Value) 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 06/26/2016 at  9:36:21.02
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

Quote

 

 

FRST.txt

Addition.txt

[kevinf80]

Thanks for those logs, go to the following link: https://windowsinstructed.com/clean-boot-windows-windows/ follow those instructions to run your system in "Clean Boot" mode... In clean boot mode all none MS services are disabled, maybe this mode will help FRST to remove nuisance files... Next, Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Run FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Let me see that log in your reply.... Thank you, Kevin....

Fixlist.txt

[Kuletunge]

Quote

Fix result of Farbar Recovery Scan Tool (x64) Version: 26-06-2016 02
Ran by toshiba (2016-06-27 19:28:17) Run:3
Running from C:\Users\toshiba\Downloads
Loaded Profiles: toshiba (Available Profiles: toshiba)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe
BootExecute: autocheck autochk * sdnclean64.exe
R2 SCM_Service; C:\Windows\SysWOW64\WinService.exe [186848 2010-05-10] ()
C:\Windows\SysWOW64\WinService.exe
R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-06-02] (DotC United Inc)
C:\Windows\System32\DRIVERS\MPCKpt.sys
2016-06-02 17:19 - 2016-06-26 09:31 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner
2016-06-02 17:19 - 2016-06-02 17:42 - 00060136 ____N (DotC United Inc) C:\WINDOWS\system32\Drivers\MPCKpt.sys
2016-06-02 17:19 - 2016-06-02 17:19 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-06-02 17:18 - 2016-06-10 08:46 - 00000000 ____D C:\Users\toshiba\AppData\Local\UltimateSpeedTester
2016-06-02 17:13 - 2016-06-25 18:54 - 00000000 ____D C:\Program Files\Nosgengigtiwc
2016-06-02 17:12 - 2016-06-02 17:30 - 00000000 ____D C:\Users\toshiba\AppData\Roaming\qc64Q
2016-06-02 17:12 - 2016-06-02 17:12 - 00000000 ____D C:\ProgramData\Utatitys
CMD: ipconfig /flushdns
EmptyTemp:
end

*****************

Restore point was successfully created.
Processes closed successfully.
C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe => Could not close process
hklm\System\CurrentControlSet\Control\Session Manager\\BootExecute => value restored successfully
SCM_Service => service removed successfully
C:\Windows\SysWOW64\WinService.exe => moved successfully
MPCKpt => Unable to stop service.
MPCKpt => service could not remove
Could not move "C:\Windows\System32\DRIVERS\MPCKpt.sys" => Scheduled to move on reboot.

"C:\Program Files (x86)\MPC Cleaner" folder move:

Could not move "C:\Program Files (x86)\MPC Cleaner" => Scheduled to move on reboot.

Could not move "C:\WINDOWS\system32\Drivers\MPCKpt.sys" => Scheduled to move on reboot.
C:\Program Files (x86)\Microsoft Silverlight => moved successfully
C:\Users\toshiba\AppData\Local\UltimateSpeedTester => moved successfully
C:\Program Files\Nosgengigtiwc => moved successfully
C:\Users\toshiba\AppData\Roaming\qc64Q => moved successfully
C:\ProgramData\Utatitys => moved successfully

=========  ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

=========== EmptyTemp: ==========

BITS transfer queue => 1671707 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 5427217 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 23383660 B
Edge => 13925952 B
Chrome => 670649552 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 1634 B
NetworkService => 2566 B
toshiba => 306684395 B

RecycleBin => 141386564 B
EmptyTemp: => 1.1 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2016-06-27 19:30:37)

"C:\Windows\System32\DRIVERS\MPCKpt.sys" => Could not move
"C:\Program Files (x86)\MPC Cleaner" => Could not move
"C:\WINDOWS\system32\Drivers\MPCKpt.sys" => Could not move

==== End of Fixlog 19:30:40 ====

 

[kevinf80]

Download AdwCleaner by Xplode onto your Desktop.   Double click on Adwcleaner.exe to run the tool. Click on the Scan in the Actions box Please wait fot the scan to finish.. When "Waiting for action.Please uncheck elements you want to keep" shows in top line.. Click on the Cleaning box. Next click OK on the "Closing Programs" pop up box. Click OK on the Information box & again OK to allow the necessary reboot After restart the AdwCleaner(C*)-Notepad log will appear, please copy/paste it in your next reply. Where * is the number relative to list of scans completed...

[Kuletunge]

Quote

# AdwCleaner v5.200 - Logfile created 27/06/2016 at 22:55:26
# Updated 14/06/2016 by ToolsLib
# Database : 2016-06-26.1 [Server]
# Operating system : Windows 10 Pro  (X64)
# Username : toshiba - TOSHIBA-PC
# Running from : C:\Users\toshiba\Downloads\AdwCleaner.exe
# Option : Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : MPCProtectService
[-] Service Deleted : MPCKpt

***** [ Folders ] *****

[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC
[#] Folder Deleted : C:\Program Files (x86)\MPC Cleaner
[-] Folder Deleted : C:\Users\toshiba\AppData\Roaming\MCorp
[#] Folder Deleted : C:\Users\toshiba\AppData\Roaming\MCorp

***** [ Files ] *****

[#] File Deleted : C:\WINDOWS\SysNative\drivers\MPCKpt.sys

***** [ DLLs ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
[-] Key Deleted : HKLM\SOFTWARE\MPC
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\MPCProtectService

***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [4506 bytes] - [23/06/2016 16:47:59]
C:\AdwCleaner\AdwCleaner[C2].txt - [1721 bytes] - [25/06/2016 18:46:49]
C:\AdwCleaner\AdwCleaner[C3].txt - [1586 bytes] - [27/06/2016 22:55:26]
C:\AdwCleaner\AdwCleaner[S1].txt - [4467 bytes] - [23/06/2016 16:44:43]
C:\AdwCleaner\AdwCleaner[S2].txt - [1495 bytes] - [25/06/2016 18:39:59]
C:\AdwCleaner\AdwCleaner[S3].txt - [1733 bytes] - [27/06/2016 22:45:06]

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [1878 bytes] ##########