# -------------------------------
# Malwarebytes AdwCleaner 8.2.0.0
# -------------------------------
# Build:    03-22-2021
# Database: 2021-04-01.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    04-01-2021
# Duration: 00:00:06
# OS:       Windows 8.1 Pro
# Cleaned:  28
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\Program Files (x86)\OneSystemCare
Deleted       C:\ProgramData\5995851831769060104
Deleted       C:\ProgramData\Jetmedia
Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\One System Care
Deleted       C:\Users\User\AppData\Roaming\DRPSu
Deleted       C:\Users\User\AppData\Roaming\Jetmedia
Deleted       C:\Users\User\AppData\Roaming\One System Care

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\drp.su
Deleted       HKCU\Software\OneSystemCare
Deleted       HKCU\Software\drpsu
Deleted       HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E
Deleted       HKLM\Software\Wow6432Node\Jetmedia
Deleted       HKLM\Software\Wow6432Node\\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E
Deleted       HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\OneSystemCare_is1
Deleted       HKLM\Software\Wow6432Node\drpsu
Deleted       HKLM\Software\drpsu
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{07C74B03-4D55-49DE-960B-ABEB2C716086}|NameServer - "82.163.142.9"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{07C74B03-4D55-49DE-960B-ABEB2C716086}|NameServer - "95.211.158.137"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3AD6D167-A7AC-437E-B94B-E602E1D70A32}|DhcpNameServer - "82.163.142.9"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3AD6D167-A7AC-437E-B94B-E602E1D70A32}|NameServer - "82.163.142.9"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3AD6D167-A7AC-437E-B94B-E602E1D70A32}|NameServer - "95.211.158.137"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{49E3FB65-6D14-448C-A7BF-477467F648A8}|DhcpNameServer - "82.163.142.9"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{49E3FB65-6D14-448C-A7BF-477467F648A8}|NameServer - "82.163.142.9"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{49E3FB65-6D14-448C-A7BF-477467F648A8}|NameServer - "95.211.158.137"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A522FC01-87F2-4BFE-9EA6-B2AFC1D05BB8}|NameServer - "82.163.142.9"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A522FC01-87F2-4BFE-9EA6-B2AFC1D05BB8}|NameServer - "95.211.158.137"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters|NameServer - "82.163.142.9"
Deleted       HKLM\System\CurrentControlSet\Services\Tcpip\Parameters|NameServer - "95.211.158.137"

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4604 octets] - [01/04/2021 12:10:06]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########