mb-check log version: 3.1.0.

1002
User Account type: Administrator
Date Log Created: 05/18/17
Time Log Created: 18:05:56

Product Name: Windows 10 Pro

System Type: 64 bit
Current Build: 15063
ReleaseID: 1703
DomainComputer: No

Malwarebytes Version information

==================================
"controllers_version" : "1.0.103",
"db_version" : "2017.05.02.05",
"dbcls_pkg_version" : "1.0.1851",
"installer_version" : "3.0.6",

"installationToken" : "uD5VidTrh-k9r1T-8uh51491862072",
"licenseState" : "trialExpired",
"machineId" : "a493dbec8227893e9205f5a2d48a5b1bfc2b5516",

Installation Directory: <--- COULD NOT FIND MALWAREBYTES INSTALL PATH INFO INSIDE:
HKEY_LOCAL_MACHINE, SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

User Information for Local System:

===========================================
User Account: Administrator
Account Level: Admin
User Account: DefaultAccount
Account Level: Guest
User Account: defaultuser0
Account Level: Admin
User Account: Guest
Account Level: Guest
User Account: HomeGroupUser$
Account Level: Guest
User Account: Mohamed Oun
Account Level: Admin
Total # of user entries: 6

UAC Settings:
===================
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
DWORD 1 Status: ON
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmi
n
DWORD 5 Status: ON

AntiVirus Information:
===================
NO AntiVirus Installed

FireWall Information:
===================
NO 3rd Party Firewall Installed
AntiSpyware Information:
===================
NO AntiSpyware Software Installed

Machine Information
===============================================
System has been up for: 0.0775 Hours

Scheduler Information
===========================
"scheduleParams" : {
"frequency" : "days", "lastTriggeredTime" :
{ "day" : 30, "hour" : 2, "minute" : 41,
"month" : 4, "second" : 44, "year" : 2017
"originalScheduleTime" : { "day" : 12, "hour" : 2,
"minute" : 41, "month" : 4, "second" : 44,
"year" : 2017 "recoveryPeriod" : 0, "recurrence" : 1
"scheduledScanParams" : { "autoClean" : false,
"autoRestart" : false, "checkForUpdates" : true,
"filesToScan" : [ "pumHandling" : "detect", "pupHandling" :
"detect", "scanArchives" : true, "scanExtra" : true,
"scanFileSystem" : true, "scanMemory" : true,
"scanRegistry" : true, "scanRootkit" : false, "scanStartup" :
true, "type" : "normal" "swissArmyEarlyBootStartSet" : false,
"totalScannedItems" : "1575659", "totalThreatsDetected" : "22"

AUTO QUARANTINE: ON

Update Information
===================================
(enable_auto_update_dbcls = Automatically Check for Updates)
(enable_auto_update_sdkctlr = Automatically download and install application
component updates) (auto_update_interval = Check for updates every...)
(NotifyWhenFullUpdatesAvailable = Notify me when full version updates are
available) (warnWhenDefsAreOutOfDate = Notify me if time since last update
exceeds 24 hours)

"auto_update_interval" : 60,
"enable_auto_update_dbcls" : true,
"enable_auto_update_sdkctlr" : true,

"NotifyWhenFullUpdatesAvailable" : true,
"WarnWhenDefsAreOutOfDate" : true

Scan Config (additional Handling is scheduled parameters)

===========================================
"globalScanParams" : {
"pumHandling" : "detect",
"pupHandling" : "detect",
"scanArchives" : true,
"scanRootkit" : false,
"scheduledScans" : [
"id" : "24d3f509-1e3a-11e7-8e8b-000000000000",
"scheduledScanParams" : {
"pumHandling" : "detect",
"pupHandling" : "detect",
"scanArchives" : true,
"scanRootkit" : false,
"type" : "normal"
RTP Config
==============================
"protectionState" : "notavailable",
"pumHandling" : "detect",
"pupHandling" : "detect",

Mwac Controller Config

==============================
"protectionState" : "notavailable",

Arw Controller Config

==============================
"protectionState" : "notavailable",

Malwarebytes Anti-Malware Service and Driver Status:

=======================================================

--------------Driver File Info:--------------

C:\WINDOWS\system32\drivers\mwac.sys File Size: 92096 BYTES FileVersion:
3.0.0.144 MD5: [67d4521c3411e24a98b5ba0058eec96a]
C:\WINDOWS\system32\drivers\mbae64.sys File Size: 77440 BYTES MD5:
[f1cea9d2626d5933162c72f0c47b496c]
C:\WINDOWS\system32\drivers\Farflt.sys File Size: 111544 BYTES FileVersion:
3.0.0.266 MD5: [f9808f9763fbc7aa830b1f54c0ca1c25]

--------------MBAMService:--------------
Type: N/A
State: 0 <--CAN NOT OPEN SC_HANDLE, SERVICE IS NOT RUNNING FOR:
MBAMService
WIN32_EXIT_CODE: N/A
SERVICE_EXIT_CODE: N/A
CHECKPOINT: N/A
WAIT_HINT: N/A

--------------MBAMChameleon:--------------
Type: N/A
State: 0 <--CAN NOT OPEN SC_HANDLE, SERVICE IS NOT RUNNING FOR:
MBAMChameleon
WIN32_EXIT_CODE: N/A
SERVICE_EXIT_CODE: N/A
CHECKPOINT: N/A
WAIT_HINT: N/A

--------------MBAMWebProtection:--------------
Type: N/A
State: 0 <--CAN NOT OPEN SC_HANDLE, SERVICE IS NOT RUNNING FOR:
MbamWebProtection
WIN32_EXIT_CODE: N/A
SERVICE_EXIT_CODE: N/A
CHECKPOINT: N/A
WAIT_HINT: N/A

--------------MBAMSwissArmy:--------------
Type: N/A
State: 0 <--CAN NOT OPEN SC_HANDLE, SERVICE IS NOT RUNNING FOR:
MbamSwissArmy
WIN32_EXIT_CODE: N/A
SERVICE_EXIT_CODE: N/A
CHECKPOINT: N/A
WAIT_HINT: N/A

--------------MBAMFarflt:--------------
Type: N/A
State: 0 <--CAN NOT OPEN SC_HANDLE, SERVICE IS NOT RUNNING FOR:
MbamFarflt
WIN32_EXIT_CODE: N/A
SERVICE_EXIT_CODE: N/A
CHECKPOINT: N/A
WAIT_HINT: N/A

--------------MBAMProtection:--------------
Type: N/A
State: 0 <--CAN NOT OPEN SC_HANDLE, SERVICE IS NOT RUNNING FOR:
MbamProtection
WIN32_EXIT_CODE: N/A
SERVICE_EXIT_CODE: N/A
CHECKPOINT: N/A
WAIT_HINT: N/A

--------------ES Protection Driver:--------------

Type: N/A
State: 0 <--CAN NOT OPEN SC_HANDLE, SERVICE IS NOT RUNNING FOR:
ESProtectionDriver
WIN32_EXIT_CODE: N/A
SERVICE_EXIT_CODE: N/A
CHECKPOINT: N/A
WAIT_HINT: N/A

Required Dependencies:
======================

------------------BFE:------------------
Type: 32
State: 4 (The service is running.)
WIN32_EXIT_CODE: 0
SERVICE_EXIT_CODE: 0
CHECKPOINT: 0
WAIT_HINT: 0

Startup Folders for Error_Expanding_Variables Check:

====================================================

All Users Startup Folder Exists.

Current User's startup Folder Exists.

Compatibility Flag Settings:

=================================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\appCompatFlags\Layers
\\Mohamedpc\pc\Programs\netspeedmonitor_2_5_4_0_x64_setup.msi REG_SZ
^ MSIAUTO RUNASADMIN
C:\Program Files (x86)\Clover\Clover.exe REG_SZ ^ HIGHDPIAWARE

MBAM Startup Entries:

=====================
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Quarantine Information:
============================
"threatName" : "HackTool.FilePatch",
"cleanTime" : "2017-04-25T10:16:55Z",
"objectPath" : "C:\\IDM.6.X.X.UPDATE.11-PATCH-REIS.EXE",
"objectType" : "file",

"threatName" : "CrackTool.FilePatch",
"cleanTime" : "2017-05-02T18:37:53Z",
"objectPath" : "C:\\Users\\MOHAMED
OUN\\AppData\\Local\\Temp\\DUP2PATCHER.DLL",
"objectType" : "file",

"threatName" : "PUP.Optional.BuzzDock",
"cleanTime" : "2017-04-10T22:23:15Z",
"objectPath" : "C:\\PROGRAMDATA\\BuzzDock\\169.tmp",
"objectType" : "file",

"threatName" : "PUP.Optional.BuzzDock",
"cleanTime" : "2017-04-10T22:23:15Z",
"objectPath" : "C:\\ProgramData\\BuzzDock",
"objectType" : "folder",

"threatName" : "PUP.Optional.BuzzDock",
"cleanTime" : "2017-04-10T22:23:15Z",
"objectPath" : "C:\\ProgramData\\BuzzDock\\BuzzDock.dll",
"objectType" : "file",

"threatName" : "CrackTool.FilePatch",
"cleanTime" : "2017-04-10T22:23:16Z",
"objectPath" : "C:\\Users\\MOHAMED
OUN\\AppData\\Local\\Temp\\DUP2PATCHER.DLL",
"objectType" : "file",

"threatName" : "PUP.Optional.StartPage.ShrtCln",
"cleanTime" : "2017-05-02T18:37:53Z",
"objectPath" : "HKU\\S-1-5-21-3365004738-1267999796-106913574-
1001\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN|START PAGE",
"objectType" : "regValue",

"threatName" : "PUP.Optional.FindMeSavings",
"cleanTime" : "2017-05-02T18:37:53Z",
"objectPath" : "C:\\Windows\\Tasks\\rundll.job",
"objectType" : "file",
 "threatName" : "PUP.Optional.FindMeSavings",
"cleanTime" : "2017-04-10T22:23:16Z",
"objectPath" : "C:\\Windows\\System32\\Tasks\\rundll",
"objectType" : "file",

"threatName" : "PUP.Optional.FindMeSavings",
"cleanTime" : "2017-05-02T18:37:53Z",
"objectPath" : "C:\\Windows\\System32\\Tasks\\rundll",
"objectType" : "file",

"threatName" : "PUP.Optional.FindMeSavings",
"cleanTime" : "2017-04-10T22:23:17Z",
"objectPath" : "C:\\Windows\\Tasks\\rundll.job",
"objectType" : "file",

"threatName" : "HackTool.FilePatch",
"cleanTime" : "2017-04-12T13:41:05Z",
"objectPath" : "C:\\Users\\MOHAMED
OUN\\AppData\\Local\\Temp\\7ZO4D306493\\IDM.6.X.X.UPDATE.11-PATCH-REIS.EXE",
"objectType" : "file",

"threatName" : "HackTool.FilePatch",
"cleanTime" : "2017-04-12T13:28:43Z",
"objectPath" : "C:\\Users\\Mohamed
Oun\\AppData\\Local\\Temp\\7zO4D3F3034\\idm.6.x.x.update.11-patch-REiS.exe",
"objectType" : "file",

"threatName" : "PUP.Optional.BuzzDock",
"cleanTime" : "2017-05-02T18:37:52Z",
"objectPath" : "C:\\PROGRAMDATA\\BuzzDock\\169.tmp",
"objectType" : "file",

"threatName" : "PUP.Optional.BuzzDock",
"cleanTime" : "2017-05-02T18:37:52Z",
"objectPath" : "C:\\ProgramData\\BuzzDock",
"objectType" : "folder",

"threatName" : "PUP.Optional.BuzzDock",
"cleanTime" : "2017-05-02T18:37:52Z",
"objectPath" : "C:\\ProgramData\\BuzzDock\\BuzzDock.dll",
"objectType" : "file",

-----END OF FILE-----