Sign in to follow this  
Followers 0
Metallica

Removal instructions for WinRepair Pro

1 post in this topic

ID: 1   Posted

What is WinRepair Pro?

The Malwarebytes research team has determined that WinRepair Pro is a "system optimizer". These so-called "system optimizers" use intentional false positives to convince users that their systems have problems. Then they try to sell you their software, claiming it will remove these problems.
More information can be found on our Malwarebytes Labs blog.

How do I know if I am infected with WinRepair Pro?

This is how the main screen of the sytem optimizer looks:

main.png

You will find these icons in your taskbar, your startmenu, and on your desktop:

icons.png

and see these warnings during install:

warning1.png

and this screen when you try to fix the found "problems":

warning5.png

warning6.png

You may see this entry in your list of installed programs:

warning4.png

and this task in your list of Scheduled Tasks:

warning3.png

How did WinRepair Pro get on my computer?

These so-called system optimizers use different methods of getting installed. This particular one was downloaded from their site.

website.png

How do I remove WinRepair Pro?

Our program Malwarebytes can detect and remove this potentially unwanted application.
  • Please download Malwarebytes to your desktop.
  • Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  • Then click Finish.
  • Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  • If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of WinRepair Pro?
  • No, Malwarebytes removes WinRepair Pro completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this system optimizer.

As you can see below the full version of Malwarebytes would have protected you against the WinRepair Pro installer. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

 

protection1.png


and we block access to their domain.

Technical details for experts

You may see these entries in FRST logs:
 
 (WinRepair Pro) C:\Program Files (x86)\WinRepair Pro\WinRepairPro.exe
 C:\Users\{username}\AppData\Roaming\WinRepair Pro
 C:\Windows\System32\Tasks\WinRepair Pro
 C:\Windows\System32\Tasks\WinRepair Pro_UPDATES
 C:\Windows\System32\Tasks\WinRepair Pro_DEFAULT
 C:\Users\Public\Desktop\WinRepair Pro.lnk
 C:\Windows\Tasks\WinRepair Pro_UPDATES.job
 C:\Windows\Tasks\WinRepair Pro_DEFAULT.job
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRepair Pro
 C:\Program Files (x86)\WinRepair Pro
 C:\Users\{username}\AppData\Local\Temp\vVo3847.exe

WinRepair Pro (HKLM-x32\...\WinRepair Pro_is1) (Version: 3.6 - winrepairpro.com)
Task: {38A69C83-2026-46DB-AA16-5931E384BF22} - System32\Tasks\WinRepair Pro_UPDATES => C:\Program Files (x86)\WinRepair Pro\WinRepairPro.exe [2015-10-20] (WinRepair Pro)
Task: {7CB9AB85-ADCC-41C8-839F-B0F0BEE63D16} - System32\Tasks\WinRepair Pro_DEFAULT => C:\Program Files (x86)\WinRepair Pro\WinRepairPro.exe [2015-10-20] (WinRepair Pro)
Task: {9B7C2EA8-231B-4D3C-BADA-371A3A27F5E5} - System32\Tasks\WinRepair Pro => C:\Program Files (x86)\WinRepair Pro\WinRepairPro.exe [2015-10-20] (WinRepair Pro)
Task: C:\Windows\Tasks\WinRepair Pro_DEFAULT.job => C:\Program Files (x86)\WinRepair Pro\WinRepairPro.exe
Task: C:\Windows\Tasks\WinRepair Pro_UPDATES.job => C:\Program Files (x86)\WinRepair Pro\WinRepairPro.exe
Alterations made by the installer:
 
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\WinRepair Pro
       Adds the file Chinese_uninst.ini"="8/3/2015 1:24 PM, 2688 bytes, A
       Adds the file Chinese_wrp.ini"="10/9/2015 12:47 PM, 50452 bytes, A
       Adds the file CleanSchedule.exe"="10/20/2015 9:55 AM, 116168 bytes, A
       Adds the file eng_uninst.ini"="8/3/2015 1:24 PM, 2896 bytes, A
       Adds the file eng_wrp.ini"="10/9/2015 12:46 PM, 88148 bytes, A
       Adds the file FileList.wrp"="10/19/2015 12:10 PM, 13612 bytes, A
       Adds the file install_left_image.bmp"="9/16/2015 1:44 PM, 156296 bytes, A
       Adds the file isxdl.dll"="10/20/2015 1:30 PM, 156616 bytes, A
       Adds the file RegList.wrp"="10/19/2015 12:10 PM, 92920 bytes, A
       Adds the file unins000.dat"="6/15/2017 9:41 AM, 38199 bytes, A
       Adds the file unins000.exe"="6/15/2017 9:41 AM, 1212785 bytes, A
       Adds the file WinRepairPro.exe"="10/20/2015 9:55 AM, 7674312 bytes, A
       Adds the file WRPUns.exe"="10/20/2015 9:56 AM, 552904 bytes, A
       Adds the file xmllite.dll"="8/3/2015 1:24 PM, 126976 bytes, A
    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRepair Pro
       Adds the file Register WinRepair Pro.lnk"="6/15/2017 9:41 AM, 1106 bytes, A
       Adds the file Uninstall WinRepair Pro.lnk"="6/15/2017 9:41 AM, 1060 bytes, A
       Adds the file WinRepair Pro.lnk"="6/15/2017 9:41 AM, 1080 bytes, A
    Adds the folder C:\Users\{username}\AppData\LocalLow\Mozilla\Temp-{3037838a-a14a-46f9-821d-9895a7c7705d}
    Adds the folder C:\Users\{username}\AppData\Roaming\WinRepair Pro
       Adds the file backup6.bin"="6/15/2017 9:41 AM, 578 bytes, A
       Adds the file eng_wrp.dat"="6/15/2017 9:41 AM, 32560 bytes, A
       Adds the file log_06-15-2017.log"="6/15/2017 9:41 AM, 0 bytes, A
       Adds the file results.wrp"="6/15/2017 9:42 AM, 8530 bytes, A
    In the existing folder C:\Users\Public\Desktop
       Adds the file WinRepair Pro.lnk"="6/15/2017 9:41 AM, 1062 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file WinRepair Pro"="6/15/2017 9:41 AM, 3124 bytes, A
       Adds the file WinRepair Pro_DEFAULT"="6/15/2017 9:41 AM, 2898 bytes, A
       Adds the file WinRepair Pro_UPDATES"="6/15/2017 9:41 AM, 3054 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file WinRepair Pro_DEFAULT.job"="6/15/2017 9:41 AM, 288 bytes, A
       Adds the file WinRepair Pro_UPDATES.job"="6/15/2017 9:41 AM, 296 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "WinRepair Pro_DEFAULT.job"="REG_BINARY, ................................
       "WinRepair Pro_DEFAULT.job.fp"="REG_DWORD"", 2050188266
       "WinRepair Pro_UPDATES.job"="REG_BINARY, ................................
       "WinRepair Pro_UPDATES.job.fp"="REG_DWORD"", -469476235
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinRepair Pro_is1]
       "DisplayIcon"="REG_SZ"", "C:\Program Files (x86)\WinRepair Pro\WinRepairPro.exe"
       "DisplayName"="REG_SZ"", "WinRepair Pro"
       "DisplayVersion"="REG_SZ"", "3.6"
       "EstimatedSize"="REG_DWORD"", 11649
       "HelpLink"="REG_SZ"", "http://www.winrepairpro.com/"
       "Inno Setup: App Path"="REG_SZ"", "C:\Program Files (x86)\WinRepair Pro"
       "Inno Setup: Icon Group"="REG_SZ"", "WinRepair Pro"
       "Inno Setup: Language"="REG_SZ"", "en"
       "Inno Setup: Setup Version"="REG_SZ"", "5.5.1 (u)"
       "Inno Setup: User"="REG_SZ"", "{username}"
       "InstallDate"="REG_SZ"", "20170615"
       "InstallLocation"="REG_SZ"", "C:\Program Files (x86)\WinRepair Pro\"
       "MajorVersion"="REG_DWORD"", 3
       "MinorVersion"="REG_DWORD"", 6
       "NoModify"="REG_DWORD"", 1
       "NoRepair"="REG_DWORD"", 1
       "Publisher"="REG_SZ"", "winrepairpro.com"
       "QuietUninstallString"="REG_SZ"", ""C:\Program Files (x86)\WinRepair Pro\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ"", ""C:\Program Files (x86)\WinRepair Pro\unins000.exe" /silent"
       "URLInfoAbout"="REG_SZ"", "http://www.winrepairpro.com/"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\win\repair\pro\key\6]
       "(Default)"="REG_BINARY, .......................................................................................................................o............................................................................................................................H...........
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\WinRepair Pro]
       "affiliateid"="REG_SZ"", "40050"
       "Expired"="REG_DWORD"", 0
       "FirstTimeASPFired"="REG_DWORD"", 1
       "MaxFixLimit"="REG_DWORD"", 15
       "RENEWALURL"="REG_SZ"", "https://www.cleverbridge.com/1277/purl-k9toolsre?cart=164541&utm_term=&x-term=&x-uid=&x-sspdata=&x-campaignid=&x-pubid=&x-placementid=&x-ymid=&x-subid=&x-cecid=&x-cpnid=&utm_source=40050&utm_campaign=40050&utm_medium=newbuild&x-source=40050&x-campaign=40050&x-medium=newbuild&affiliate=40050&x-at=pub"
       "ShowExitPage"="REG_DWORD"", 1
       "TELNO"="REG_SZ"", "(844) 944-0914"
       "utm_campaign"="REG_SZ"", "40050"
       "utm_medium"="REG_SZ"", "newbuild"
       "utm_source"="REG_SZ"", "40050"
       "WRPURL"="REG_SZ"", "https://www.cleverbridge.com/1277/purl-k9toolsre?cart=164541&utm_term=&x-term=&x-uid=&x-sspdata=&x-campaignid=&x-pubid=&x-placementid=&x-ymid=&x-subid=&x-cecid=&x-cpnid=&utm_source=40050&utm_campaign=40050&utm_medium=newbuild&x-source=40050&x-campaign=40050&x-medium=newbuild&affiliate=40050&x-at=pub"
       "x-at"="REG_SZ"", "pub"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\WinRepair Pro\LANG]
       "LangID"="REG_DWORD"", 0
    [HKEY_CURRENT_USER\Software\win\repair\pro\key\6]
       "(Default)"="REG_BINARY, .......................................................................................................................o............................................................................................................................H...........
    [HKEY_CURRENT_USER\Software\WinRepair Pro]
       "AutoRepair"="REG_DWORD"", 0
       "ConfirmBkUps"="REG_DWORD"", 1
       "CurrentScanTime"="REG_BINARY, .....*2.
       "ErrorCount"="REG_DWORD"", 23
       "FirstRun"="REG_DWORD"", 1
       "GoToSystemTrayOnClose"="REG_DWORD"", 0
       "ImprovementProgram"="REG_DWORD"", 1
       "NumTimesWRPRunned"="REG_DWORD"", 1
       "RegErrFoundTillDate"="REG_DWORD"", 0
       "RegErrsFixedLast"="REG_DWORD"", 0
       "RegErrsFixedTillDate"="REG_DWORD"", 0
       "ScheduledTime"="REG_SZ"", ""
       "SetChkDontShowRedTrayPopup"="REG_DWORD"", 0
       "SetChkREmovableMedia"="REG_DWORD"", 1
       "SetChkSkipEmptyKeys"="REG_DWORD"", 1
       "SetEnableSound"="REG_DWORD"", 1
       "StartAutoScanOnLaunch"="REG_DWORD"", 0
       "StartAutoScanPMUI"="REG_DWORD"", 0
       "StartAutoTutorial"="REG_DWORD"", 1
       "StartMinimized"="REG_DWORD"", 0
       "StartScan"="REG_DWORD"", 0
       "StartWhenWinBoots"="REG_DWORD"", 1
       "StrLastOptimizeTime"="REG_SZ"", ""
       "StrLastScan"="REG_SZ"", "Thu. June 15, 2017. 09:42 AM"
       "StrLastScanResults"="REG_SZ"", "23"
       "StrLastStartupOpt"="REG_SZ"", ""
       "StrLatestRegDefrag"="REG_SZ"", ""
       "StrLatestRestorePoint"="REG_SZ"", ""
       "TrialType"="REG_DWORD"", 0
    [HKEY_CURRENT_USER\Software\WinRepair Pro\LANG]
       "LangCode"="REG_SZ"", "en"
       "LangID"="REG_DWORD"", 0
Malwarebytes log:
 
Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 6/15/17
Scan Time: 11:20 AM
Log File: mbamWinRepairPro.txt
Administrator: Yes

-Software Information-
Version: 3.1.2.1733
Components Version: 1.0.141
Update Package Version: 1.0.2155
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 334884
Threats Detected: 84
Threats Quarantined: 84
Time Elapsed: 1 min, 31 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 1
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WINREPAIR PRO\WINREPAIRPRO.EXE, Quarantined, [9380], [407705],1.0.2155

Module: 3
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WINREPAIR PRO\ISXDL.DLL, Quarantined, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WINREPAIR PRO\XMLLITE.DLL, Quarantined, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WINREPAIR PRO\WINREPAIRPRO.EXE, Quarantined, [9380], [407705],1.0.2155

Registry Key: 10
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WinRepair Pro_is1, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, HKCU\SOFTWARE\WinRepair Pro, Delete-on-Reboot, [9380], [407719],1.0.2155
PUP.Optional.WinRepairPro, HKCU\SOFTWARE\WIN\REPAIR\pro, Delete-on-Reboot, [9380], [407720],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{38A69C83-2026-46DB-AA16-5931E384BF22}, Delete-on-Reboot, [9380], [407732],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{7CB9AB85-ADCC-41C8-839F-B0F0BEE63D16}, Delete-on-Reboot, [9380], [407732],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9B7C2EA8-231B-4D3C-BADA-371A3A27F5E5}, Delete-on-Reboot, [9380], [407732],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\WOW6432NODE\WIN\REPAIR\pro, Delete-on-Reboot, [9380], [407717],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WinRepair Pro, Delete-on-Reboot, [9380], [407731],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WinRepair Pro_DEFAULT, Delete-on-Reboot, [9380], [407731],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WinRepair Pro_UPDATES, Delete-on-Reboot, [9380], [407731],1.0.2155

Registry Value: 3
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{38A69C83-2026-46DB-AA16-5931E384BF22}|PATH, Delete-on-Reboot, [9380], [407732],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{7CB9AB85-ADCC-41C8-839F-B0F0BEE63D16}|PATH, Delete-on-Reboot, [9380], [407732],1.0.2155
PUP.Optional.WinRepairPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9B7C2EA8-231B-4D3C-BADA-371A3A27F5E5}|PATH, Delete-on-Reboot, [9380], [407732],1.0.2155

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
PUP.Optional.WinRepairPro, C:\USERS\{username}\APPDATA\ROAMING\WinRepair Pro, Delete-on-Reboot, [9380], [407712],1.0.2155
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WinRepair Pro, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\WINREPAIR PRO, Delete-on-Reboot, [9380], [407707],1.0.2155

File: 64
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WINREPAIR PRO\ISXDL.DLL, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WINREPAIR PRO\XMLLITE.DLL, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\PROGRAM FILES (X86)\WINREPAIR PRO\WINREPAIRPRO.EXE, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Users\{username}\AppData\Roaming\WinRepair Pro\backup6.bin, Delete-on-Reboot, [9380], [407712],1.0.2155
PUP.Optional.WinRepairPro, C:\Users\{username}\AppData\Roaming\WinRepair Pro\eng_wrp.dat, Delete-on-Reboot, [9380], [407712],1.0.2155
PUP.Optional.WinRepairPro, C:\Users\{username}\AppData\Roaming\WinRepair Pro\log_06-15-2017.log, Delete-on-Reboot, [9380], [407712],1.0.2155
PUP.Optional.WinRepairPro, C:\Users\{username}\AppData\Roaming\WinRepair Pro\results.wrp, Delete-on-Reboot, [9380], [407712],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\FileList.wrp, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Chinese_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Chinese_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\CleanSchedule.exe, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Danish_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Danish_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Dutch_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Dutch_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\eng_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\eng_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Italian_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Italian_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Japanese_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Japanese_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\korean_uninst_ko.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\korean_wrp_ko.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Norwegian_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Norwegian_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\polish_uninst_pl.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\polish_wrp_pl.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\portugese_uninst_pt.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\portugese_wrp_pt.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Portuguese_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Portuguese_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Finnish_uninst_fi.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Finnish_wrp_fi.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\French_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\French_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\German_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\German_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\greek_uninst_el.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\greek_wrp_el.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\install_left_image.bmp, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\RegList.wrp, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\russian_uninst_ru.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\russian_wrp_ru.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\spanish_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Spanish_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\swedish_uninst.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Swedish_wrp.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\traditionalcn_uninst_zh-tw.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\TraditionalCn_wrp_zh-tw.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\Turkish_uninst_tr.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\turkish_wrp_tr.ini, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\unins000.dat, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\unins000.exe, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\Program Files (x86)\WinRepair Pro\WRPUns.exe, Delete-on-Reboot, [9380], [407705],1.0.2155
PUP.Optional.WinRepairPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRepair Pro\Register WinRepair Pro.lnk, Delete-on-Reboot, [9380], [407707],1.0.2155
PUP.Optional.WinRepairPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRepair Pro\Uninstall WinRepair Pro.lnk, Delete-on-Reboot, [9380], [407707],1.0.2155
PUP.Optional.WinRepairPro, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRepair Pro\WinRepair Pro.lnk, Delete-on-Reboot, [9380], [407707],1.0.2155
Adware.Imali, C:\USERS\{username}\DESKTOP\SETUP.EXE, Delete-on-Reboot, [628], [1597],1.0.2155
PUP.Optional.WinRepairPro, C:\USERS\PUBLIC\DESKTOP\WINREPAIR PRO.LNK, Delete-on-Reboot, [9380], [407709],1.0.2155
PUP.Optional.WinRepairPro, C:\WINDOWS\TASKS\WINREPAIR PRO_UPDATES.JOB, Delete-on-Reboot, [9380], [407714],1.0.2155
PUP.Optional.WinRepairPro, C:\WINDOWS\TASKS\WINREPAIR PRO_DEFAULT.JOB, Delete-on-Reboot, [9380], [407714],1.0.2155
PUP.Optional.WinRepairPro, C:\WINDOWS\SYSTEM32\TASKS\WinRepair Pro, Delete-on-Reboot, [9380], [407713],1.0.2155
PUP.Optional.WinRepairPro, C:\WINDOWS\SYSTEM32\TASKS\WinRepair Pro_DEFAULT, Delete-on-Reboot, [9380], [407713],1.0.2155
PUP.Optional.WinRepairPro, C:\WINDOWS\SYSTEM32\TASKS\WinRepair Pro_UPDATES, Delete-on-Reboot, [9380], [407713],1.0.2155

Physical Sector: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.