1. Your decision about upgrading to Windows 10.
-I have looked into upgrading into Windows 10 and unfortunately it isn't something within my budget at the moment, otherwise I would absolutely want to upgrade.
2. The AdwCleaner[
C0*].txt
# -------------------------------
# Malwarebytes AdwCleaner 8.0.8.0
# -------------------------------
# Build: 10-08-2020
# Database: 2020-09-29.1 (Local)
# Support:
https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-26-2021
# Duration: 00:01:19
# OS: Windows 7 Home Premium
# Cleaned: 136
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\BrowserCompanion
Deleted C:\Program Files (x86)\Linkury
Deleted C:\Program Files (x86)\mipony
Deleted C:\Program Files\slimcleaner plus
Deleted C:\ProgramData\Linkury
Deleted C:\ProgramData\Partner
Deleted C:\ProgramData\Tarma Installer
Deleted C:\ProgramData\slimware utilities inc
Deleted C:\Users\Owner\AppData\Local\Smartbar
Deleted C:\Users\Owner\AppData\Local\SwvUpdater
Deleted C:\Users\Owner\AppData\Local\apn
Deleted C:\Users\Owner\AppData\Local\iLivid
Deleted C:\Users\Owner\AppData\Local\ilividbandoomoviestoolbar
Deleted C:\Users\Owner\AppData\Local\jollywallet
Deleted C:\Users\Owner\AppData\Local\slimware utilities inc
Deleted C:\Users\Owner\AppData\Roaming\24x7 Help
Deleted C:\Users\Owner\AppData\Roaming\BrowserCompanion
Deleted C:\Users\Owner\AppData\Roaming\DSite
Deleted C:\Users\Owner\AppData\Roaming\OpenCandy
Deleted C:\Users\Owner\AppData\Roaming\Strongvault
Deleted C:\Users\Owner\AppData\Roaming\mipony
Deleted C:\Users\Public\Documents\Downloaded Installers
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG Secure Search
***** [ Files ] *****
Deleted C:\END
Deleted C:\Users\Owner\AppData\LocalLow\Microsoft\Internet Explorer\Services\Search_ask.com.xml
Deleted C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\bprotector web data
Deleted C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Deleted C:\Windows\System32\roboot64.exe
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\SOFTWARE\928bd8b03bed45
Deleted HKCU\Software\24x7HELP
Deleted HKCU\Software\AppDataLow\Software\Crossrider
Deleted HKCU\Software\AppDataLow\Software\DynConIE
Deleted HKCU\Software\AppDataLow\Software\Scorpion Saver
Deleted HKCU\Software\BABSOLUTION
Deleted HKCU\Software\Blabbers
Deleted HKCU\Software\Conduit
Deleted HKCU\Software\Cr_Installer
Deleted HKCU\Software\DataMngr_Toolbar
Deleted HKCU\Software\InstallCore
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\genieo.com
Deleted HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\genieo.com
Deleted HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow|*.crossrider.com
Deleted HKCU\Software\Microsoft\Internet Explorer\TabbedBrowsing|bProtectShowTabsWelcome
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\genieo.com
Deleted HKCU\Software\SlimWare Utilities Inc
Deleted HKCU\Software\Smartbar
Deleted HKCU\Software\ilivid
Deleted HKLM\SOFTWARE\Classes\.torrent|iLivid.torrent_backup
Deleted HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Deleted HKLM\SOFTWARE\Classes\Applications\iLividSetup-r2154-n-bc.exe
Deleted HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A}
Deleted HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
Deleted HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
Deleted HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95}
Deleted HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Deleted HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OpenCandyHelperRunOnce
Deleted HKLM\Software\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Deleted HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Deleted HKLM\Software\Classes\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}
Deleted HKLM\Software\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Deleted HKLM\Software\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Deleted HKLM\Software\Classes\Prod.cap
Deleted HKLM\Software\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Deleted HKLM\Software\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Deleted HKLM\Software\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Deleted HKLM\Software\Classes\Updater.AmiUpd
Deleted HKLM\Software\LevelQualityWatcher
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Deleted HKLM\Software\Scorpion Saver
Deleted HKLM\Software\SmartPCFixer
Deleted HKLM\Software\Tarma Installer
Deleted HKLM\Software\Wow6432Node\24x7HELP
Deleted HKLM\Software\Wow6432Node\928bd8b03bed45
Deleted HKLM\Software\Wow6432Node\Conduit
Deleted HKLM\Software\Wow6432Node\DataMngr
Deleted HKLM\Software\Wow6432Node\Freeze.com
Deleted HKLM\Software\Wow6432Node\SlimWare Utilities Inc
Deleted HKLM\Software\Wow6432Node\SmartPCFixer
Deleted HKLM\Software\Wow6432Node\Vittalia
Deleted HKLM\Software\Wow6432Node\W3I
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\ScriptHelper.EXE
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{D879A501-50A7-BEFC-A4C5-32DC6E0CB208}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Deleted HKLM\Software\Wow6432Node\\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaafeopjhkcolncjbedbhofpocmdbn
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65BCD620-07DD-012F-819F-073CF1B8F7C6}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\New Windows\Allow|*.crossrider.com
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}
Deleted HKU\.DEFAULT\Software\AppDataLow\Software\Scorpion Saver
Deleted HKU\S-1-5-18\Software\AppDataLow\Software\Scorpion Saver
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
Deleted Web
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
Deleted Preinstalled.AcerProShield Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}
Deleted Preinstalled.AcerProShield Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}
Deleted Preinstalled.AcerProShield Registry HKLM\Software\Classes\CLSID\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}
Deleted Preinstalled.AcerProShield Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}
Deleted Preinstalled.AcerProShield Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}
Deleted Preinstalled.AcerProShield Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9}
Deleted Preinstalled.HPCleanFLC File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
Deleted Preinstalled.HPMediaSmart Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34B1B9BE-94D9-4E33-B5A8-6B48D7E054FB}
Deleted Preinstalled.HPMediaSmart Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MirageAgent
Deleted Preinstalled.HPMediaSmart Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
Deleted Preinstalled.HPMediaSmart Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{01FB4998-33C4-4431-85ED-079E3EEFE75D}
Deleted Preinstalled.HPMediaSmart Task C:\Windows\System32\Tasks\MIRAGEAGENT
Deleted Preinstalled.LenovoEnergyManagement Folder C:\Program Files (x86)\LENOVO\ENERGY MANAGEMENT
Deleted Preinstalled.LenovoEnergyManagement Folder C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LENOVO\ENERGY MANAGEMENT
Deleted Preinstalled.LenovoEnergyManagement Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Energy Management
Deleted Preinstalled.LenovoEnergyManagement Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Run|EnergyUtility
Deleted Preinstalled.LenovoEnergyManagement Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}
Deleted Preinstalled.LenovoEnergyManagement Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{D0956C11-0F60-43FE-99AD-524E833471BB}
Deleted Preinstalled.LenovoPower2Go Folder C:\Program Files (x86)\LENOVO\POWER2GO
Deleted Preinstalled.LenovoPower2Go Folder C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LENOVO\POWER2GO
Deleted Preinstalled.LenovoPower2Go Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|UpdateP2GShortCut
Deleted Preinstalled.LenovoPower2Go Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{40BF1E83-20EB-11D8-97C5-0009C5020658}
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [15574 octets] - [22/01/2021 20:18:00]
AdwCleaner[S01].txt - [15636 octets] - [26/01/2021 14:37:01]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
3. The Malwarebytes report
Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 1/26/21
Scan Time: 3:02 PM
Log File: 38ec2b72-6022-11eb-a22e-f0def1850dc8.json
-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1130
Update Package Version: 1.0.36249
License: Trial
-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Owner-PC\Owner
-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 251108
Threats Detected: 59
Threats Quarantined: 59
Time Elapsed: 26 min, 36 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 8
PUP.Optional.Blabbers, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\Blabbers , Quarantined, 1961, 245965, 1.0.36249, , ame, , ,
PUP.Optional.DataMngr.AppFlsh, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${dtUserElevationPolicyID}, Quarantined, 4067, 253616, 1.0.36249, , ame, , ,
PUP.Optional.JollyWallet, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\APPDATALOW\SOFTWARE\JollyWallet, Quarantined, 2065, 239675, 1.0.36249, , ame, , ,
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C19E0792-44A9-490A-B4EF-F8115957AAF0}, Quarantined, 4066, 253595, 1.0.36249, , ame, , ,
PUP.Optional.PlayBryte, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}, Quarantined, 2536, 161928, 1.0.36249, , ame, , ,
PUP.Optional.PlayBryte, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}, Quarantined, 2536, 161928, 1.0.36249, , ame, , ,
Adware.GamePlayLabs, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110011221158}, Quarantined, 899, 170083, , , , , ,
Adware.GamePlayLabs, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110011221158}, Quarantined, 899, 170083, 1.0.36249, , ame, , ,
Registry Value: 2
PUP.Optional.DllFilesFixer, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{9C7BD61A-006D-4C05-B3EC-11A8C84FF022}, Quarantined, 16098, 847105, 1.0.36249, , ame, , ,
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C19E0792-44A9-490A-B4EF-F8115957AAF0}|APPPATH, Quarantined, 4066, 253595, 1.0.36249, , ame, , ,
Registry Data: 2
PUM.Optional.DisableShowSearch, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED|START_SHOWSEARCH, Replaced, 7423, 293317, 1.0.36249, , ame, , ,
PUP.Optional.SnapDo, HKU\S-1-5-21-3689223716-311834632-1594112351-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|DEFAULT, Replaced, 2179, 293197, 1.0.36249, , ame, , ,
Data Stream: 0
(No malicious items detected)
Folder: 2
PUP.Optional.MediaBuzz, C:\PROGRAM FILES (X86)\MediaBuzzV1, Quarantined, 4761, 178122, 1.0.36249, , ame, , ,
PUP.Optional.MediaWatch, C:\PROGRAM FILES (X86)\MediaWatchV1, Quarantined, 4774, 178187, 1.0.36249, , ame, , ,
File: 45
PUP.Optional.AdPeak, C:\TEMP\SCORPIONSAVER.MSI, Quarantined, 2257, 234915, 1.0.36249, , ame, , C0D3EACC48A41057DE0838C09B97A3A7, BE0738D8909F48B65B555610BF095BED241C731BAED628AC58D71151FB1CF88A
PUP.Optional.SmartBar, C:\USERS\OWNER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\chrome-extension_amfclgbdpgndipgoegfpkkgobahigbcl_0.localstorage, Quarantined, 137, 243118, 1.0.36249, , ame, , 1FCC6B3E156BCC8AC50CB2829ECD49FD, CABA8FE219BC3B564F29EB18A850EEB126C9A00C836EDA2087DE81F467776E10
PUP.Optional.Babylon, C:\USERS\OWNER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\http_search.babylon.com_0.localstorage, Quarantined, 52, 443495, 1.0.36249, , ame, , 999210588A3D8FC9C1017705310B41B0, 3FF9EACB494A72420E9ED0831695691A6081455B15806BEC0EFE519ED723209D
Adware.AdLyrics, C:\USERS\OWNER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\https_static.livelyrics00.live-lyrics.com_0.localstorage, Quarantined, 1046, 443463, 1.0.36249, , ame, , E30D2AD76918C8F4B24A6A130ABFC4DF, 2DB332169282DEAA1DDFE7BD66E91396CD30F4D76D9D0E67D6E3D757C9EF24E5
Adware.AdLyrics, C:\USERS\OWNER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\http_static.livelyrics00.live-lyrics.com_0.localstorage, Quarantined, 1046, 443463, 1.0.36249, , ame, , B413B387FE96560CE3651B097DAE471E, 821144A147F68AE3FB17FC1C743BBABAF83F6DC9D4B496860B579241DAAAF024
PUP.Optional.SnapDo, C:\USERS\OWNER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\http_search.snapdo.com_0.localstorage, Quarantined, 2179, 443492, 1.0.36249, , ame, , D4E7C8544B5636685ECDAD84E4364E18, 5BB25F6D4CF8A02EE5B24784B6C83EAFABF2376C3B127CE1CDD5525ADF6460F8
PUP.Optional.Downloader, C:\PROGRAM FILES\UNINSTALLER\UNINSTALL.EXE, Quarantined, 204, 301037, 1.0.36249, , ame, , 718EB2D20ECEEC974A975C641D0D36A7, BC184C9D9F133D934138E2B5739BC6E52164B7323A04870DC1C3DB461098DA05
PUP.Optional.ScorpionSaver, C:\TEMP\SCORPIONSAVER.EXE, Quarantined, 4236, 270186, 1.0.36249, , ame, , 210184CBA5317C1EEEDCE09649E221AF, 41BE9A889B0112B78FE88F83FA2A5BCB3E8D12564A027904795FF1324353ABDC
PUP.Optional.AdPeak, C:\TEMP\000.EXE, Quarantined, 2257, 277825, 1.0.36249, , ame, , 76372C6FBD71C9EE8CC6765D54E22FE7, EDBDEB50F21DBC2E02438D126EEDD016069BDF1573929D8746F3ECC1C2C8314D
Adware.SquareNet, C:\USERS\OWNER\DOWNLOADS\JAVA_INSTALLER.EXE, Quarantined, 8899, 397396, 1.0.36249, , ame, , CB239ADBAEFD47F435C840C2F970DB94, 54BEAC5A24D6E041B1FD13E5E6D0AC15FEE8AD19E025B18D5ED2856B4B365A45
PUP.Optional.BundleInstaller, C:\USERS\OWNER\DOWNLOADS\JFILEMANAGER.EXE, Quarantined, 150, 76341, 1.0.36249, , ame, , 5E7DBED6DE2A4CFBFFEAA47069CD8A78, 2EC4A4E39F8BAE54326707653EC9F6FC5155D054712229FC47CA88DC5BD3314B
PUP.Optional.InstallCore, C:\USERS\OWNER\DOWNLOADS\SETUP (2).EXE, Quarantined, 112, 76797, 1.0.36249, , ame, , 45E6128645FB90FE4B1CA751AD046B52, 0349270915B9889FED34743DA6EC1E56E25E61ED5DCA69D98E6E31471D4CAC71
PUP.Optional.Bandoo, C:\USERS\OWNER\DOWNLOADS\ILIVIDSETUP-R2154-N-BC.EXE, Quarantined, 613, 301304, 1.0.36249, , ame, , B6A829DFA9751D34764648926270F5EF, 0AB3AD1CB3FE56663D9CCACA82B1BFC2A0F710021E643BC0B85E7402088D2477
PUP.Optional.OptimumInstaller, C:\USERS\OWNER\DOWNLOADS\SETUP (5).EXE, Quarantined, 2109, 77025, 1.0.36249, , ame, , B73D43793C6BC4FDB4181CBFC87B22AB, 8113115DC0ABB8FCD191279D422362FF45737811A2653A4FDAE1AF1B18B30EA1
PUP.Optional.SoftPulse, C:\USERS\OWNER\DOWNLOADS\SETUP (8).EXE, Quarantined, 57, 301245, 1.0.36249, , ame, , 24345EFE7B59B4E8CD39CEF2DFDBB268, 2BBFB1CD3C015382418435A1A3DA67BFE54EE441EB46F59C093F163DBDA4AF02
PUP.Optional.BundleInstaller, C:\USERS\OWNER\DOWNLOADS\INSTALLER_SKYPE_ENGLISH (1).EXE, Quarantined, 150, 301006, 1.0.36249, , ame, , 0D8FEB23C3038BB08067F1F8BC41D03F, 2CC535712FF43AE477F5574365B56AC311BDA64127A884E394DADA10F0CEAFBD
PUP.Optional.AdBundle, C:\USERS\OWNER\DOWNLOADS\FL STUDIO SETUP (1).EXE, Quarantined, 1147, 43582, 1.0.36249, , ame, , 66D6A6DEEE8BB766A1668CFCE552FA98, 8239D8B24DA22326388E7616290D8AA3E4A023FCF5DDBBFD0C37D1B3BE9A498D
PUP.Optional.BundleInstaller, C:\USERS\OWNER\DOWNLOADS\INSTALLER_SKYPE_ENGLISH.EXE, Quarantined, 150, 301006, 1.0.36249, , ame, , 0D8FEB23C3038BB08067F1F8BC41D03F, 2CC535712FF43AE477F5574365B56AC311BDA64127A884E394DADA10F0CEAFBD
PUP.Optional.AdBundle, C:\USERS\OWNER\DOWNLOADS\MIXCRAFT SETUP.EXE, Quarantined, 1147, 43582, 1.0.36249, , ame, , EDDA479027FFE2841A404C6ABF789D57, 88F73532C09FE66CCD08C5392255157316EEDBAA908FF940868B540403078CC3
PUP.Optional.ClickRunSoftware, C:\USERS\OWNER\DOWNLOADS\VIDEOCONVERTERSETUP (1).EXE, Quarantined, 7605, 301017, 1.0.36249, , ame, , F9FCA2A9167BAD7845FCA6081E318FB2, 61BD944EE5C12CC13CA5D9DA42927A95B9541BF42FBBF95558EA5F4791BB716E
Adware.InstallIQ, C:\USERS\OWNER\DOWNLOADS\MOVIE_PLAYER_1280.EXE, Quarantined, 11561, 796930, 1.0.36249, , ame, , 781CEA388C1599CCD61A38500913ECCD, EFE98285EE4D63FDDB8FD5A052B2BFA82E82208C25815D320E2171FCEC57001F
PUP.Optional.InstallCore, C:\USERS\OWNER\DOWNLOADS\SETUP (3).EXE, Quarantined, 112, 76797, 1.0.36249, , ame, , 21EAC5D8DB0DA97D6E8FF9CAC5EE6EE1, D881E48D35AF8AF7361BAC015CD4D46963194D122A0568B56A69853D1A4B720B
PUP.Optional.SoftPulse, C:\USERS\OWNER\DOWNLOADS\SETUP (6).EXE, Quarantined, 57, 301245, 1.0.36249, , ame, , C7E53BED22294D33E2BA3AE0C6EA30C4, 9CB010FFC3087A3DC691E4B48B629CC941F1C4D47ADBE3869C37A5685E550A3E
PUP.Optional.SmartPCFixer, C:\USERS\OWNER\DOWNLOADS\SETUP (9).EXE, Quarantined, 8227, 348270, 1.0.36249, , ame, , EA5887B952607BD0A916084CA3956316, 030FC090C6F4EE1E9513741E3D0BADCDDFE0FAF7F005FE187DFE3B18326D893A
PUP.Optional.DllFilesFixer, C:\USERS\OWNER\DOWNLOADS\DFFSETUP-X3DAUDIO1_6 (1).EXE, Quarantined, 16098, 846538, 1.0.36249, , ame, , 6D8F844BCA315C75D2686D101CCC7B39, 9E969C076BCEAFD3618C9143A85B6F365C88A1D2BA414DEC9904B9E6FE7E6AE4
PUP.Optional.ClickRunSoftware, C:\USERS\OWNER\DOWNLOADS\VIDEOCONVERTERSETUP.EXE, Quarantined, 7605, 301017, 1.0.36249, , ame, , F9FCA2A9167BAD7845FCA6081E318FB2, 61BD944EE5C12CC13CA5D9DA42927A95B9541BF42FBBF95558EA5F4791BB716E
PUP.Optional.DllFilesFixer, C:\USERS\OWNER\DOWNLOADS\DFFSETUP-X3DAUDIO1_6 (4).EXE, Quarantined, 16098, 846538, 1.0.36249, , ame, , 6D8F844BCA315C75D2686D101CCC7B39, 9E969C076BCEAFD3618C9143A85B6F365C88A1D2BA414DEC9904B9E6FE7E6AE4
PUP.Optional.AdBundle, C:\USERS\OWNER\DOWNLOADS\FL STUDIO SETUP.EXE, Quarantined, 1147, 43582, 1.0.36249, , ame, , 66D6A6DEEE8BB766A1668CFCE552FA98, 8239D8B24DA22326388E7616290D8AA3E4A023FCF5DDBBFD0C37D1B3BE9A498D
PUP.Optional.BundleInstaller, C:\USERS\OWNER\DOWNLOADS\SETUP (1).EXE, Quarantined, 150, 301005, 1.0.36249, , ame, , 5D79C08693AFE02997C7B0DBA48A031F, B1EAF3E9315FED16D8233FE01A2F2E2A8134A34FF19A715190B4B2E2375A9B36
PUP.Optional.DllFilesFixer, C:\USERS\OWNER\DOWNLOADS\DFFSETUP-X3DAUDIO1_7.EXE, Quarantined, 16098, 846538, 1.0.36249, , ame, , 6D8F844BCA315C75D2686D101CCC7B39, 9E969C076BCEAFD3618C9143A85B6F365C88A1D2BA414DEC9904B9E6FE7E6AE4
PUP.Optional.InstallCore, C:\USERS\OWNER\DOWNLOADS\SETUP (4).EXE, Quarantined, 112, 76797, 1.0.36249, , ame, , 574E37F278256E44186A5B0CF5D2D9F4, C9954A2864E9B0BF59B0A5DCF7C29B7A664AAC5B05936272C2CD345E9CBA2A17
Adware.InstallIQ, C:\USERS\OWNER\DOWNLOADS\OPENFREELY_1296 (1).EXE, Quarantined, 11561, 796930, 1.0.36249, , ame, , CFD5F03C4DB76FCFB93AEF5B14030816, E5C56B5FA6E8C65A0A41CAB1DA0F54A56D881B420257C75965CF5E402B9FDD8F
PUP.Optional.InboxTB, C:\USERS\OWNER\DOWNLOADS\EMAILNOTIFIERSETUP.EXE, Quarantined, 3026, 603680, 1.0.36249, , ame, , 969FBEE37B56A4A3C384C0142586EA06, 6A9DB8AE3932D411B8443968FED589FCE3CD46031469B460B15216422889CA8B
PUP.Optional.SmartPCFixer, C:\USERS\OWNER\DOWNLOADS\SETUP (7).EXE, Quarantined, 8227, 348270, 1.0.36249, , ame, , EA5887B952607BD0A916084CA3956316, 030FC090C6F4EE1E9513741E3D0BADCDDFE0FAF7F005FE187DFE3B18326D893A
PUP.Optional.BestFreeDownloads, C:\USERS\OWNER\DOWNLOADS\ULTIMATEUNBLOCKERSETUP.EXE, Quarantined, 7052, 273325, 1.0.36249, , ame, , A8AB63291B317D43B3728B9888A5F546, 3C5620E6E91E0FF53606DE2B8D3202AD6A6CB4C3DB0FAC0EBE47EA43A5347380
PUP.Optional.InstallCore, C:\USERS\OWNER\DOWNLOADS\SETUP.EXE, Quarantined, 112, 76797, 1.0.36249, , ame, , 43517231BEF1FBB7F0548A147AC8C25E, 866D88A171EAF458A2F0285D6D64406AB846774B413EDB7CA0382CA955AC9D07
PUP.Optional.DllFilesFixer, C:\USERS\OWNER\DOWNLOADS\DFFSETUP-X3DAUDIO1_6 (2).EXE, Quarantined, 16098, 846538, 1.0.36249, , ame, , 6D8F844BCA315C75D2686D101CCC7B39, 9E969C076BCEAFD3618C9143A85B6F365C88A1D2BA414DEC9904B9E6FE7E6AE4
Adware.InstallIQ, C:\USERS\OWNER\DOWNLOADS\OPENFREELY_1296.EXE, Quarantined, 11561, 796930, 1.0.36249, , ame, , CFD5F03C4DB76FCFB93AEF5B14030816, E5C56B5FA6E8C65A0A41CAB1DA0F54A56D881B420257C75965CF5E402B9FDD8F
PUP.Optional.DllFilesFixer, C:\USERS\OWNER\DOWNLOADS\DFFSETUP-X3DAUDIO1_6 (5).EXE, Quarantined, 16098, 846538, 1.0.36249, , ame, , 6D8F844BCA315C75D2686D101CCC7B39, 9E969C076BCEAFD3618C9143A85B6F365C88A1D2BA414DEC9904B9E6FE7E6AE4
PUP.Optional.BundleInstaller.OI, C:\USERS\OWNER\DOWNLOADS\WRAR410.EXE, Quarantined, 2505, 85974, 1.0.36249, , ame, , 5EAA2E1D46F1B937D242B8138FC3BD4E, 2A7AB75CEFA3FC9CA2B76444E77FF4B539BF4FED8A70ECE34358753ED22EC29C
Adware.InstallIQ, C:\USERS\OWNER\DOWNLOADS\MOVIE_PLAYER_1280 (1).EXE, Quarantined, 11561, 796930, 1.0.36249, , ame, , 781CEA388C1599CCD61A38500913ECCD, EFE98285EE4D63FDDB8FD5A052B2BFA82E82208C25815D320E2171FCEC57001F
PUP.Optional.DllFilesFixer, C:\USERS\OWNER\DOWNLOADS\DFFSETUP-X3DAUDIO1_6 (3).EXE, Quarantined, 16098, 846538, 1.0.36249, , ame, , 6D8F844BCA315C75D2686D101CCC7B39, 9E969C076BCEAFD3618C9143A85B6F365C88A1D2BA414DEC9904B9E6FE7E6AE4
PUP.Optional.DllFilesFixer, C:\USERS\OWNER\DOWNLOADS\DFFSETUP-X3DAUDIO1_6.EXE, Quarantined, 16098, 846538, 1.0.36249, , ame, , 6D8F844BCA315C75D2686D101CCC7B39, 9E969C076BCEAFD3618C9143A85B6F365C88A1D2BA414DEC9904B9E6FE7E6AE4
PUP.Optional.ASK, C:\USERS\OWNER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 2966, 454822, 1.0.36249, , ame, , BE13AD36BDE06CBCE1223B0D7A88EBDF, 9FF3B527CC31637A893E8F137F3645ED8848251A527D27340DE703BD53E0AC4A
PUP.Optional.Linkury, C:\USERS\OWNER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 366, 455237, 1.0.36249, , ame, , BE13AD36BDE06CBCE1223B0D7A88EBDF, 9FF3B527CC31637A893E8F137F3645ED8848251A527D27340DE703BD53E0AC4A
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
4. The fresh FRST logs, FRST.txt and Addition.txt
Attached