# AdwCleaner 7.0.4.0 - Logfile created on Tue Nov 14 18:34:04 2017
# Updated on 2017/27/10 by Malwarebytes
# Database: 11-13-2017.3
# Running on Windows 10 Home (X64)
# Mode: scan
# Support:
https://www.malwarebytes.com/support
***** [ Services ] *****
PUP.Optional.Legacy, WCAssistantService
PUP.Optional.Chip, chip1click
***** [ Folders ] *****
PUP.Optional.Legacy, C:\ProgramData\lavasoft\web companion
PUP.Optional.Legacy, C:\ProgramData\Application Data\lavasoft\web companion
PUP.Optional.Legacy, C:\Program Files (x86)\lavasoft\web companion
PUP.Optional.Legacy, C:\Users\All Users\lavasoft\web companion
PUP.Optional.Legacy, C:\Users\lucas\AppData\Roaming\lavasoft\web companion
PUP.Optional.Legacy, C:\Users\Default\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\Default User\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\lucas\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\ProgramData\DriverSetupUtility
PUP.Optional.Legacy, C:\Program Files\DriverSetupUtility
PUP.Optional.Legacy, C:\Users\All Users\DriverSetupUtility
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoodGame
PUP.Optional.Legacy, C:\Program Files (x86)\GoodGame
PUP.Optional.Legacy, C:\Users\lucas\AppData\Local\Temp\BROWSERADDON
PUP.Optional.Chip, C:\Program Files (x86)\Chip Digital GmbH
PUP.Optional.Chip, C:\Users\lucas\AppData\Local\Downloaded Installations\{DAD82379-C684-4D04-83D5-2B9934A9C362}
PUP.Optional.Chip, C:\Windows\Installer\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
PUP.Optional.Booking, C:\Program Files\Booking.com
PUP.Optional.VLCUpdaterDE, C:\Program Files (x86)\VLC UPDATER
PUP.Optional.VLCUpdaterDE, C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC UPDATER
PUP.Optional.WebCompanion, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
PUP.Optional.WebCompanion, C:\Windows\System32\config\systemprofile\AppData\Local\LavasoftTcpService
PUP.Optional.WebCompanion, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\LavasoftTcpService
PUP.Optional.StartFenster.ShrtCln, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startfenster Symbol
PUP.Optional.StartFenster.ShrtCln, C:\Program Files (x86)\Startfenster Symbol
PUP.Optional.StartFenster.ShrtCln, C:\Program Files (x86)\Startfenster-Replace
PUP.Optional.StartFenster.ShrtCln, C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startfenster-Replace
***** [ Files ] *****
PUP.Optional.Legacy, C:\Users\All Users\Desktop\eBay.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\eBay.lnk
PUP.Optional.Legacy, C:\Windows\System32\lavasofttcpservice.dll
PUP.Optional.Legacy, C:\Windows\SysWOW64\lavasofttcpservice.dll
PUP.Optional.Legacy, C:\Windows\System32\LavasoftTcpServiceOff.ini
PUP.Optional.Legacy, C:\Windows\SysNative\LavasoftTcpServiceOff.ini
PUP.Optional.Legacy, C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
PUP.Optional.Legacy, C:\Windows\SysNative\LavasoftTcpService64.dll
PUP.Optional.Legacy, C:\Users\All Users\Desktop\GoodGame BigFarm spielen.lnk
PUP.Optional.Legacy, C:\Users\lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\GoodGame BigFarm spielen.lnk
PUP.Optional.Legacy, C:\Users\lucas\Favorites\GoodGame BigFarm spielen.lnk
PUP.Optional.Legacy, C:\Users\lucas\Favorites\Links\GoodGame BigFarm spielen.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\GoodGame BigFarm spielen.lnk
PUP.Optional.Legacy, C:\Users\All Users\Desktop\GoodGame Empire spielen.lnk
PUP.Optional.Legacy, C:\Users\lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\GoodGame Empire spielen.lnk
PUP.Optional.Legacy, C:\Users\lucas\Favorites\GoodGame Empire spielen.lnk
PUP.Optional.Legacy, C:\Users\lucas\Favorites\Links\GoodGame Empire spielen.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\GoodGame Empire spielen.lnk
PUP.Optional.Legacy, C:\Users\lucas\AppData\Local\Temp\VLC Player\startfenster-symbol.exe
PUP.Optional.Legacy, C:\Users\lucas\AppData\Roaming\Mozilla\Firefox\Profiles\vm2ymb7v.default\searchplugins\bing-lavasoft.xml
PUP.Optional.GoodGame, C:\Users\lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\GOODGAME.LNK
PUP.Optional.StartFenster, C:\Users\lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Startfenster Symbol.lnk
PUP.Optional.StartFenster, C:\Users\lucas\AppData\Roaming\MOZILLA\EXTENSIONS\startfensterde-0.0.1-an+fx-linux.xpi
PUP.Optional.StartFenster.ShrtCln, C:\Users\All Users\Desktop\Startfenster.lnk
PUP.Optional.StartFenster.ShrtCln, C:\Users\lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk
PUP.Optional.StartFenster.ShrtCln, C:\Users\lucas\Favorites\Startfenster.lnk
PUP.Optional.StartFenster.ShrtCln, C:\Users\lucas\Favorites\Links\Startfenster.lnk
PUP.Optional.StartFenster.ShrtCln, C:\Users\Public\Desktop\Startfenster.lnk
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
PUP.Optional.Legacy, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - http:\\www.startfenster.de\tab
PUP.Optional.Legacy, C:\Users\lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - http:\\www.startfenster.de\tab
PUP.Optional.Legacy, C:\Users\lucas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - http:\\www.startfenster.de\tab
PUP.Optional.Legacy, C:\Users\Public\Desktop\Google Chrome.lnk - http:\\www.startfenster.de\tab
PUP.Optional.Legacy, C:\Users\Public\Desktop\Mozilla Firefox.lnk - http:\\www.startfenster.de\tab
***** [ Tasks ] *****
PUP.Optional.Legacy, App Explorer
***** [ Registry ] *****
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\amazonbrowserapp.co.uk
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\titan.service.amazonbrowserapp.co.uk
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3903702937-2136226458-1345785428-1001\Software\Host App Service
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3903702937-2136226458-1345785428-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
PUP.Optional.Legacy, [Key] - HKCU\Software\Host App Service
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Host App Service
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Lavasoft\Web Companion
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-3903702937-2136226458-1345785428-1001\Software\Lavasoft\Web Companion
PUP.Optional.Legacy, [Key] - HKCU\Software\Lavasoft\Web Companion
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{BAC72C85-CEC6-4B86-AF06-FA20C259FAB8}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{BD6ECB00-7C4A-4F97-B425-44117F2A7AAE}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{6557DB6C-EFE1-45AC-92A6-FBB1554B7502}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{E4ADC61E-D06A-4E0E-8582-78C809CC8450}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{EB2BEAEF-150C-4DE4-9D09-F16403C22769}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\Features\A38C15B2D5649AE4C9CDE19DE50DA96C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
PUP.Optional.Legacy, [Value] - HKU\S-1-5-21-3903702937-2136226458-1345785428-1001\Software\Microsoft\Windows\CurrentVersion\Run | Web Companion
PUP.Optional.Legacy, [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run | Web Companion
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
PUP.Optional.Legacy, [Key] - HKCU\SOFTWARE\Classes\Software\AppDataLow\Software\Amazon\Amazon1ButtonApp
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\Amazon1ButtonBrowserHelper.dll
PUP.Optional.Amazon1Button, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F5415905096AA504A9FB967C7A138943
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Features\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SOFTWARE\Classes\Installer\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip, [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\chip 1-click download service
PUP.Optional.Chip, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders | C:\Program Files (x86)\Chip Digital GmbH\chip1click\
PUP.Optional.Chip, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders | C:\Program Files (x86)\Chip Digital GmbH\
PUP.Optional.Chip, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders | C:\Windows\Installer\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}\
PUP.Optional.GoodGame.ShrtCln, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GoodGame.de
PUP.Optional.VLCUpdaterDE, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VLC Updater
PUP.Optional.VLCUpdaterDE, [Value] - HKU\S-1-5-21-3903702937-2136226458-1345785428-1001\Software\Microsoft\Windows\CurrentVersion\Run | VLC Updater
PUP.Optional.VLCUpdaterDE, [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run | VLC Updater
PUP.Optional.VLCUpdaterDE, [Value] - HKCU\Software\AM | VLC Updater
PUP.Optional.StartFenster, [Value] - HKCU\Software\AM | Startfenster Symbol
PUP.Optional.StartFenster, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Startfenster-Replace.exe
PUP.Optional.StartFenster, [Value] - HKCU\SOFTWARE\AM | Startfenster-Replace
PUP.Optional.StartFenster, [Value] - HKCU\SOFTWARE\AM | GoodGame
PUP.Optional.WebCompanion, [Key] - HKLM\SOFTWARE\Classes\AppID\{2CE0F1DC-C504-4B7B-A385-D94A2531DFFB}
PUP.Optional.WebCompanion, [Key] - HKLM\SOFTWARE\Classes\AppID\LavasoftTcpService.exe
PUP.Optional.StartFenster.ShrtCln, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster-Replace.de
PUP.Optional.StartFenster.ShrtCln, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster.de
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries.
***** [ Chromium (and derivatives) ] *****
PUP.Optional.Legacy, SearchProvider found: Conduit - search.conduit.com
PUP.Optional.SofTonicAssistant, SearchProvider found: Search the web (Softonic) - softonic
PUP.Optional.StartFenster, Plugin found: Startfenster.de Suche -
PUP.Optional.AmazonBrowserBar, Plugin found: Amazon Assistant for Chrome -
/!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences:
https://support.google.com/chrome/answer/3097271
*************************
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########