Malwarebytes

www.malwarebytes.com

-Log Details-
Scan Date: 4/4/18
Scan Time: 8:57 PM
Log File: 3b544bb6-3829-11e8-a198-d0bf9c13a670.json
Administrator: Yes

-Software Information-
Version: 3.4.4.2398
Components Version: 1.0.322
Update Package Version: 1.0.4190
License: Free

-System Information-
OS: Windows 10 (Build 16299.309)
CPU: x64
File System: NTFS
User: IMRAN\imrani

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 481830
Threats Detected: 30
Threats Quarantined: 30
Time Elapsed: 11 min, 39 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 2
PUP.Optional.Emotiplus, HKU\S-1-5-21-3065261814-3359976284-1344497237-
1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Emotiplus, Delete-on-
Reboot, [636], [318185],1.0.4190
Adware.Norassie, HKU\S-1-5-21-3065261814-3359976284-1344497237-
1001\SOFTWARE\Norassie, Delete-on-Reboot, [2742], [361347],1.0.4190

Registry Value: 1
PUP.Optional.Emotiplus, HKU\S-1-5-21-3065261814-3359976284-1344497237-
1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|EmotiplusHelper, Delete-on-
Reboot, [636], [323226],1.0.4190

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
PUP.Optional.Emotiplus, C:\USERS\IMRANI\APPDATA\LOCAL\EMOTIPLUS, Delete-on-Reboot,
[636], [318185],1.0.4190
PUP.Optional.Emotiplus, C:\USERS\IMRANI\APPDATA\LOCAL\EMOTIPLUSHELPER, Delete-on-
Reboot, [636], [323226],1.0.4190
PUP.Optional.Linkury.Generic, C:\PROGRAMDATA\ZONSUNLABS, Delete-on-Reboot, [1900],
[380104],1.0.4190

File: 24
PUP.Optional.Emotiplus, C:\USERS\IMRANI\APPDATA\ROAMING\MICROSOFT\WINDOWS\START
MENU\PROGRAMS\STARTUP\EMOTIPLUS.LNK, Delete-on-Reboot, [636], [318191],1.0.4190
PUP.Optional.Emotiplus, C:\Users\imrani\AppData\Local\Emotiplus\Emotiplus.exe,
Delete-on-Reboot, [636], [318185],1.0.4190
PUP.Optional.Emotiplus, C:\Users\imrani\AppData\Local\Emotiplus\Flash32.dll,
Delete-on-Reboot, [636], [318185],1.0.4190
PUP.Optional.Emotiplus, C:\Users\imrani\AppData\Local\Emotiplus\Resources.dll,
Delete-on-Reboot, [636], [318185],1.0.4190
PUP.Optional.Emotiplus, C:\Users\imrani\AppData\Local\Emotiplus\Uninstaller.exe,
Delete-on-Reboot, [636], [318185],1.0.4190
PUP.Optional.Emotiplus,
C:\Users\imrani\AppData\Local\EmotiplusHelper\EmotiplusHelper.exe, Delete-on-
Reboot, [636], [323226],1.0.4190
PUP.Optional.InstallCore.Generic, C:\USERS\IMRANI\DESKTOP\Continue EaseUS Partition
Master Installation.lnk, Delete-on-Reboot, [5113], [466466],1.0.4190
PUP.Optional.InstallCore.Generic,
C:\USERS\IMRANI\APPDATA\LOCAL\TEMP\ICReinstall_epm.exe, Delete-on-Reboot, [5113],
[466466],1.0.4190
PUP.Optional.Linkury.Generic, C:\PROGRAMDATA\ZONSUNLABS\FF.HP, Delete-on-Reboot,
[1900], [380104],1.0.4190
PUP.Optional.Linkury.Generic, C:\ProgramData\Zonsunlabs\ff.NT, Delete-on-Reboot,
[1900], [380104],1.0.4190
PUP.Optional.Linkury.Generic, C:\ProgramData\Zonsunlabs\snp.sc, Delete-on-Reboot,
[1900], [380104],1.0.4190
Adware.DNSUnlocker, C:\PROGRAMDATA\BDB069B\7C85172B.DLL, Delete-on-Reboot, [371],
[358322],1.0.4190
RiskWare.Tool.HCK, C:\USERS\IMRANI\APPDATA\ROAMING\SKYPE - COPY (2)\MY SKYPE
RECEIVED FILES\INTERNET DOWNLOAD MANAGER (IDM) 6.23 BUILD 17 REGISTERED (32BIT +
64BIT PATCH) [CRACKINGPATCHING].RAR, Delete-on-Reboot, [2019], [67651],1.0.4190
PUP.Optional.SweetPage, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\Sync Data\SyncData.sqlite3, Replaced, [2667], [455284],1.0.4190
PUP.Optional.SweetPage, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\Secure Preferences, Replaced, [2667], [455284],1.0.4190
Adware.Yontoo, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync
Data\SyncData.sqlite3, Replaced, [137], [454818],1.0.4190
Adware.Yontoo, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web
Data, Replaced, [137], [454818],1.0.4190
Adware.Yontoo, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync
Data\SyncData.sqlite3, Replaced, [137], [454818],1.0.4190
Adware.Yontoo, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web
Data, Replaced, [137], [454818],1.0.4190
Adware.Yontoo, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync
Data\SyncData.sqlite3, Replaced, [137], [454818],1.0.4190
Adware.Yontoo, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure
Preferences, Replaced, [137], [454818],1.0.4190
Adware.Yontoo, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web
Data, Replaced, [137], [454818],1.0.4190
PUP.Optional.SweetPage, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\Sync Data\SyncData.sqlite3, Replaced, [2667], [455284],1.0.4190
PUP.Optional.SweetPage, C:\USERS\IMRANI\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\Web Data, Replaced, [2667], [455284],1.0.4190

Physical Sector: 0
(No malicious items detected)

(end)