2019-09-07 18:34:57 : [Application] AdwCleaner 7 . 4 . 1 launched 2019-09-07 18:34:58 : [MBInstaller] Checking Iris 2019-09-07 18:34:58 : [IRIS] Making request 2019-09-07 18:34:59 : [AdwUpgrade] Checking application updates 2019-09-07 18:35:00 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-07 18:35:00 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-07 18:35:00 : [SslCert] Locality Name ("Santa Clara") 2019-09-07 18:35:00 : [SslCert] Organization ("Malwarebytes Inc") 2019-09-07 18:35:00 : [SslCert] Certificate EffectiveDate: "ma okt 2 00:00:00 2017 GMT" 2019-09-07 18:35:00 : [SslCert] Certificate ExpirationDate: "di okt 6 12:00:00 2020 GMT" 2019-09-07 18:35:00 : [SslCert] ALPN: None 2019-09-07 18:35:00 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-07 18:35:00 : [SslCert] KXE: "ECDH" 2019-09-07 18:35:00 : [SslCert] Protocol: "TLSv1.2" 2019-09-07 18:35:00 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-07 18:35:00 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-07 18:35:00 : [SslCert] Locality Name ("Santa Clara") 2019-09-07 18:35:00 : [SslCert] Organization ("Malwarebytes Inc") 2019-09-07 18:35:00 : [SslCert] Certificate EffectiveDate: "ma okt 2 00:00:00 2017 GMT" 2019-09-07 18:35:00 : [SslCert] Certificate ExpirationDate: "di okt 6 12:00:00 2020 GMT" 2019-09-07 18:35:00 : [SslCert] ALPN: None 2019-09-07 18:35:00 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-07 18:35:00 : [SslCert] KXE: "ECDH" 2019-09-07 18:35:00 : [SslCert] Protocol: "TLSv1.2" 2019-09-07 18:35:00 : [Telemetry] Status code: QVariant(int, 200) 2019-09-07 18:35:00 : [File Downloader] Error downloading ( QNetworkReply::NetworkError(ContentNotFoundError) ) 2019-09-07 18:35:00 : [IRIS] Failed 2019-09-07 18:35:09 : [Button clicked] Scan 2019-09-07 18:35:09 : [Scan] Started 2019-09-07 18:35:14 : [Scan] Loading local database 2019-09-07 18:35:14 : [Database] Checking integrity 2019-09-07 18:35:14 : [Database] Found 2595 families 2019-09-07 18:35:14 : [Database] Database v "2019-08-27.1" 2019-09-07 18:35:15 : [Loading paths] Local paths loaded 2019-09-07 18:35:15 : [Loading paths] Chrome paths loaded 2019-09-07 18:35:15 : [Loading paths] User Keys loaded 2019-09-07 18:35:15 : [Module initialized] "File" 2019-09-07 18:35:15 : [Module initialized] "Folder" 2019-09-07 18:35:15 : [Module initialized] "RegistryKey" 2019-09-07 18:35:15 : [Module initialized] "RegistryValue" 2019-09-07 18:35:15 : [Module initialized] "TaskName" 2019-09-07 18:35:15 : [Module initialized] "Service" 2019-09-07 18:35:15 : [Module initialized] "Winlogon" 2019-09-07 18:35:20 : [Module initialized] "URL" 2019-09-07 18:35:20 : [Module initialized] "RegAppInit" 2019-09-07 18:35:20 : [Module initialized] "RegClasses" 2019-09-07 18:35:20 : [Module initialized] "DNS" 2019-09-07 18:35:20 : [Module initialized] "RegFirewallPolicy" 2019-09-07 18:35:20 : [Module initialized] "RegGuid" 2019-09-07 18:35:20 : [Module initialized] "RegIEElevationPolicy" 2019-09-07 18:35:20 : [Module initialized] "RegOther" 2019-09-07 18:35:20 : [Module initialized] "RegProductID" 2019-09-07 18:35:20 : [Module initialized] "RegSoftware" 2019-09-07 18:35:20 : [Module initialized] "RegStartup" 2019-09-07 18:35:20 : [Module initialized] "WMI" 2019-09-07 18:35:20 : [Module initialized] "ChromiumExt" 2019-09-07 18:35:20 : [Module initialized] "FirefoxExt" 2019-09-07 18:35:20 : [Module initialize] Scan Browser 2019-09-07 18:35:22 : [Module initialize] Scan Browser FF 2019-09-07 18:35:22 : [Module initialize] FF start pages loaded 2019-09-07 18:35:22 : [Module initialize] FF search providers loaded 2019-09-07 18:35:22 : [Module initialize] FF plugin list loaded 2019-09-07 18:35:22 : [Scan] Exclusions loaded 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP CUSTOMER FEEDBACK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Sarah Schutters\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Administrator\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Sarah Schutters\\AppData\\Local\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\ProgramData\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP SUPPORT SOLUTIONS" [ "Folder" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Classes\\CLSID\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}" [ "Registry" ] 2019-09-07 18:35:56 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}" [ "Registry" ] 2019-09-07 18:35:59 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "C:\\Program Files\\HP\\HP TOUCHPOINT ANALYTICS CLIENT" [ "Folder" ] 2019-09-07 18:35:59 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "C:\\ProgramData\\HP\\HP TOUCHPOINT ANALYTICS CLIENT" [ "Folder" ] 2019-09-07 18:35:59 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}" [ "Registry" ] 2019-09-07 18:36:00 : [Telemetry] Sending to Influx 2019-09-07 18:36:01 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-09-07 18:36:01 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-09-07 18:36:01 : [SslCert] Locality Name () 2019-09-07 18:36:01 : [SslCert] Organization () 2019-09-07 18:36:01 : [SslCert] Certificate EffectiveDate: "zo aug 18 10:50:38 2019 GMT" 2019-09-07 18:36:01 : [SslCert] Certificate ExpirationDate: "za nov 16 10:50:38 2019 GMT" 2019-09-07 18:36:01 : [SslCert] ALPN: Yes 2019-09-07 18:36:01 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-07 18:36:01 : [SslCert] KXE: "ECDH" 2019-09-07 18:36:01 : [SslCert] Protocol: "TLSv1.2" 2019-09-07 18:36:01 : [Telemetry] Status code: QVariant(int, 204) 2019-09-07 18:36:01 : [Telemetry] Sending to DSE 2019-09-07 18:36:02 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-07 18:36:02 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-07 18:36:02 : [SslCert] Locality Name ("San Jose") 2019-09-07 18:36:02 : [SslCert] Organization ("Malwarebytes Inc.") 2019-09-07 18:36:02 : [SslCert] Certificate EffectiveDate: "do feb 22 00:00:00 2018 GMT" 2019-09-07 18:36:02 : [SslCert] Certificate ExpirationDate: "wo apr 22 12:00:00 2020 GMT" 2019-09-07 18:36:02 : [SslCert] ALPN: Yes 2019-09-07 18:36:02 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-07 18:36:02 : [SslCert] KXE: "ECDH" 2019-09-07 18:36:02 : [SslCert] Protocol: "TLSv1.2" 2019-09-07 18:36:02 : [Telemetry] Status code: QVariant(int, 201) 2019-09-07 18:36:02 : [Scan] Finished 2019-09-07 18:36:15 : [Button clicked] No threats detected ok button 2019-09-07 18:36:24 : [Application] Closing AdwCleaner 2019-09-15 14:48:13 : [Application] AdwCleaner 7 . 4 . 1 launched 2019-09-15 14:48:22 : [MBInstaller] Checking Iris 2019-09-15 14:48:22 : [IRIS] Making request 2019-09-15 14:48:23 : [Telemetry] Sending hello ication updates 2019-09-15 14:48:24 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-15 14:48:24 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-15 14:48:24 : [SslCert] Locality Name ("Santa Clara") 2019-09-15 14:48:24 : [SslCert] Organization ("Malwarebytes Inc") 2019-09-15 14:48:24 : [SslCert] Certificate EffectiveDate: "ma okt 2 00:00:00 2017 GMT" 2019-09-15 14:48:24 : [SslCert] Certificate ExpirationDate: "di okt 6 12:00:00 2020 GMT" 2019-09-15 14:48:24 : [SslCert] ALPN: None me ("Santa Clara") 2019-09-15 14:48:24 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-15 14:48:24 : [SslCert] KXE: "ECDH" ffectiveDate: "ma okt 2 00:00:00 2017 GMT" 2019-09-15 14:48:24 : [SslCert] Certificate ExpirationDate: "di okt 6 12:00:00 2020 GMT" 2019-09-15 14:48:24 : [SslCert] ALPN: None 2019-09-15 14:48:24 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-15 14:48:24 : [SslCert] KXE: "ECDH" 2019-09-15 14:48:24 : [SslCert] Protocol: "TLSv1.2" 2019-09-15 14:48:24 : [Telemetry] Status code: QVariant(int, 200) 2019-09-15 14:48:24 : [File Downloader] Error downloading ( QNetworkReply::NetworkError(ContentNotFoundError) ) 2019-09-15 14:48:24 : [IRIS] Failed 2019-09-15 14:49:57 : [Button clicked] Scan 2019-09-15 14:49:57 : [Scan] Started 2019-09-15 14:49:58 : [Database] Downloading database 2019-09-15 14:49:59 : [Database] Checking integrity 2019-09-15 14:49:59 : [Database] Found 2599 families 2019-09-15 14:49:59 : [Database] Database v "2019-09-13.1" 2019-09-15 14:50:00 : [Loading paths] Local paths loaded 2019-09-15 14:50:00 : [Loading paths] Chrome paths loaded 2019-09-15 14:50:00 : [Loading paths] User Keys loaded 2019-09-15 14:50:00 : [Module initialized] "File" 2019-09-15 14:50:00 : [Module initialized] "Folder" 2019-09-15 14:50:00 : [Module initialized] "RegistryKey" 2019-09-15 14:50:00 : [Module initialized] "RegistryValue" 2019-09-15 14:50:00 : [Module initialized] "TaskName" 2019-09-15 14:50:00 : [Module initialized] "Service" 2019-09-15 14:50:00 : [Module initialized] "Winlogon" 2019-09-15 14:50:04 : [Module initialized] "URL" 2019-09-15 14:50:04 : [Module initialized] "RegAppInit" 2019-09-15 14:50:04 : [Module initialized] "RegClasses" 2019-09-15 14:50:04 : [Module initialized] "DNS" 2019-09-15 14:50:04 : [Module initialized] "RegFirewallPolicy" 2019-09-15 14:50:04 : [Module initialized] "RegGuid" 2019-09-15 14:50:04 : [Module initialized] "RegIEElevationPolicy" 2019-09-15 14:50:04 : [Module initialized] "RegOther" 2019-09-15 14:50:04 : [Module initialized] "RegProductID" 2019-09-15 14:50:04 : [Module initialized] "RegSoftware" 2019-09-15 14:50:04 : [Module initialized] "RegStartup" 2019-09-15 14:50:05 : [Module initialized] "WMI" 2019-09-15 14:50:05 : [Module initialized] "ChromiumExt" 2019-09-15 14:50:05 : [Module initialized] "FirefoxExt" 2019-09-15 14:50:05 : [Module initialize] Scan Browser 2019-09-15 14:50:15 : [Module initialize] Scan Browser FF 2019-09-15 14:50:15 : [Module initialize] FF start pages loaded 2019-09-15 14:50:15 : [Module initialize] FF search providers loaded 2019-09-15 14:50:15 : [Module initialize] FF plugin list loaded 2019-09-15 14:50:15 : [Scan] Exclusions loaded 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP CUSTOMER FEEDBACK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Sarah Schutters\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Administrator\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Sarah Schutters\\AppData\\Local\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\ProgramData\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP SUPPORT SOLUTIONS" [ "Folder" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Classes\\CLSID\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}" [ "Registry" ] 2019-09-15 14:50:52 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}" [ "Registry" ] 2019-09-15 14:50:57 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "C:\\Program Files\\HP\\HP TOUCHPOINT ANALYTICS CLIENT" [ "Folder" ] 2019-09-15 14:50:57 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "C:\\ProgramData\\HP\\HP TOUCHPOINT ANALYTICS CLIENT" [ "Folder" ] 2019-09-15 14:50:57 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}" [ "Registry" ] 2019-09-15 14:51:01 : [Telemetry] Sending to Influx 2019-09-15 14:51:01 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-09-15 14:51:02 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-09-15 14:51:02 : [SslCert] Locality Name () 2019-09-15 14:51:02 : [SslCert] Organization () 2019-09-15 14:51:02 : [SslCert] Certificate EffectiveDate: "zo aug 18 10:50:38 2019 GMT" 2019-09-15 14:51:02 : [SslCert] Certificate ExpirationDate: "za nov 16 10:50:38 2019 GMT" 2019-09-15 14:51:02 : [SslCert] ALPN: Yes 2019-09-15 14:51:02 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-15 14:51:02 : [SslCert] KXE: "ECDH" 2019-09-15 14:51:02 : [SslCert] Protocol: "TLSv1.2" 2019-09-15 14:51:02 : [Telemetry] Status code: QVariant(int, 204) 2019-09-15 14:51:02 : [Telemetry] Sending to DSE 2019-09-15 14:51:03 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-15 14:51:03 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-15 14:51:03 : [SslCert] Locality Name ("San Jose") 2019-09-15 14:51:03 : [SslCert] Organization ("Malwarebytes Inc.") 2019-09-15 14:51:03 : [SslCert] Certificate EffectiveDate: "do feb 22 00:00:00 2018 GMT" 2019-09-15 14:51:03 : [SslCert] Certificate ExpirationDate: "wo apr 22 12:00:00 2020 GMT" 2019-09-15 14:51:03 : [SslCert] ALPN: Yes 2019-09-15 14:51:03 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-15 14:51:03 : [SslCert] KXE: "ECDH" 2019-09-15 14:51:03 : [SslCert] Protocol: "TLSv1.2" 2019-09-15 14:51:03 : [Telemetry] Status code: QVariant(int, 201) 2019-09-15 14:51:03 : [Scan] Finished 2019-09-15 14:51:28 : [Application] Closing AdwCleaner 2019-09-18 10:05:53 : [Application] AdwCleaner 7 . 4 . 1 launched 2019-09-18 10:05:54 : [MBInstaller] Checking Iris 2019-09-18 10:05:54 : [IRIS] Making request 2019-09-18 10:05:55 : [Telemetry] Sending hello ication updates 2019-09-18 10:05:55 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-18 10:05:55 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-18 10:05:55 : [SslCert] Locality Name ("Santa Clara") 2019-09-18 10:05:55 : [SslCert] Organization ("Malwarebytes Inc") 2019-09-18 10:05:55 : [SslCert] Certificate EffectiveDate: "ma okt 2 00:00:00 2017 GMT" 2019-09-18 10:05:55 : [SslCert] Certificate ExpirationDate: "di okt 6 12:00:00 2020 GMT" 2019-09-18 10:05:55 : [SslCert] ALPN: None 2019-09-18 10:05:55 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-18 10:05:55 : [SslCert] KXE: "ECDH" 2019-09-18 10:05:55 : [SslCert] Protocol: "TLSv1.2" 2019-09-18 10:05:55 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-18 10:05:55 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-18 10:05:55 : [SslCert] Locality Name ("Santa Clara") 2019-09-18 10:05:55 : [SslCert] Organization ("Malwarebytes Inc") 2019-09-18 10:05:55 : [SslCert] Certificate EffectiveDate: "ma okt 2 00:00:00 2017 GMT" 2019-09-18 10:05:55 : [SslCert] Certificate ExpirationDate: "di okt 6 12:00:00 2020 GMT" 2019-09-18 10:05:55 : [SslCert] ALPN: None 2019-09-18 10:05:55 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-18 10:05:55 : [SslCert] KXE: "ECDH" 2019-09-18 10:05:55 : [SslCert] Protocol: "TLSv1.2" 2019-09-18 10:05:55 : [Telemetry] Status code: QVariant(int, 200) 2019-09-18 10:05:56 : [File Downloader] Error downloading ( QNetworkReply::NetworkError(ContentNotFoundError) ) 2019-09-18 10:05:56 : [IRIS] Failed 2019-09-18 10:05:56 : [Button clicked] Scan 2019-09-18 10:05:56 : [Scan] Started 2019-09-18 10:05:57 : [Database] Downloading database 2019-09-18 10:05:57 : [Database] Checking integrity 2019-09-18 10:05:57 : [Database] Found 2600 families 2019-09-18 10:05:57 : [Database] Database v "2019-09-18.1" 2019-09-18 10:05:58 : [Loading paths] Local paths loaded 2019-09-18 10:05:58 : [Loading paths] Chrome paths loaded 2019-09-18 10:05:58 : [Loading paths] User Keys loaded 2019-09-18 10:05:58 : [Module initialized] "File" 2019-09-18 10:05:58 : [Module initialized] "Folder" 2019-09-18 10:05:58 : [Module initialized] "RegistryKey" 2019-09-18 10:05:58 : [Module initialized] "RegistryValue" 2019-09-18 10:05:58 : [Module initialized] "TaskName" 2019-09-18 10:05:58 : [Module initialized] "Service" 2019-09-18 10:05:58 : [Module initialized] "Winlogon" 2019-09-18 10:06:00 : [Module initialized] "URL" 2019-09-18 10:06:00 : [Module initialized] "RegAppInit" 2019-09-18 10:06:00 : [Module initialized] "RegClasses" 2019-09-18 10:06:00 : [Module initialized] "DNS" 2019-09-18 10:06:01 : [Module initialized] "RegFirewallPolicy" 2019-09-18 10:06:01 : [Module initialized] "RegGuid" 2019-09-18 10:06:01 : [Module initialized] "RegIEElevationPolicy" 2019-09-18 10:06:01 : [Module initialized] "RegOther" 2019-09-18 10:06:01 : [Module initialized] "RegProductID" 2019-09-18 10:06:01 : [Module initialized] "RegSoftware" 2019-09-18 10:06:01 : [Module initialized] "RegStartup" 2019-09-18 10:06:01 : [Module initialized] "WMI" 2019-09-18 10:06:01 : [Module initialized] "ChromiumExt" 2019-09-18 10:06:01 : [Module initialized] "FirefoxExt" 2019-09-18 10:06:01 : [Module initialize] Scan Browser 2019-09-18 10:06:02 : [Module initialize] Scan Browser FF 2019-09-18 10:06:02 : [Module initialize] FF start pages loaded 2019-09-18 10:06:02 : [Module initialize] FF search providers loaded 2019-09-18 10:06:02 : [Module initialize] FF plugin list loaded 2019-09-18 10:06:02 : [Scan] Exclusions loaded 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP CUSTOMER FEEDBACK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Sarah Schutters\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Administrator\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Users\\Sarah Schutters\\AppData\\Local\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Windows\\SysWOW64\\config\\systemprofile\\AppData\\Roaming\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Windows\\System32\\config\\systemprofile\\AppData\\Local\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\ProgramData\\HEWLETT-PACKARD\\HP SUPPORT FRAMEWORK" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "C:\\Program Files (x86)\\HEWLETT-PACKARD\\HP SUPPORT SOLUTIONS" [ "Folder" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Classes\\CLSID\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Browser Helper Objects\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Stats\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Ext\\Settings\\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}" [ "Registry" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}" [ "Registry" ] 2019-09-18 10:06:22 : [Scan] Item detected: "Preinstalled.HPSupportAssistant" , "HKLM\\Software\\Wow6432Node\\\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}" [ "Registry" ] 2019-09-18 10:06:25 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "C:\\Program Files\\HP\\HP TOUCHPOINT ANALYTICS CLIENT" [ "Folder" ] 2019-09-18 10:06:25 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "C:\\ProgramData\\HP\\HP TOUCHPOINT ANALYTICS CLIENT" [ "Folder" ] 2019-09-18 10:06:25 : [Scan] Item detected: "Preinstalled.HPTouchpointAnalyticsClient" , "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}" [ "Registry" ] 2019-09-18 10:06:26 : [Telemetry] Sending to Influx 2019-09-18 10:06:26 : [SslCert] Issued by ("Let's Encrypt Authority X3") 2019-09-18 10:06:26 : [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org") 2019-09-18 10:06:26 : [SslCert] Locality Name () 2019-09-18 10:06:26 : [SslCert] Organization () 2019-09-18 10:06:26 : [SslCert] Certificate EffectiveDate: "zo aug 18 10:50:38 2019 GMT" 2019-09-18 10:06:26 : [SslCert] Certificate ExpirationDate: "za nov 16 10:50:38 2019 GMT" 2019-09-18 10:06:26 : [SslCert] ALPN: Yes 2019-09-18 10:06:26 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-18 10:06:26 : [SslCert] KXE: "ECDH" 2019-09-18 10:06:26 : [SslCert] Protocol: "TLSv1.2" 2019-09-18 10:06:26 : [Telemetry] Status code: QVariant(int, 204) 2019-09-18 10:06:26 : [Telemetry] Sending to DSE 2019-09-18 10:06:27 : [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA") 2019-09-18 10:06:27 : [SslCert] Issued to ("*.malwarebytes.com") 2019-09-18 10:06:27 : [SslCert] Locality Name ("San Jose") 2019-09-18 10:06:27 : [SslCert] Organization ("Malwarebytes Inc.") 2019-09-18 10:06:27 : [SslCert] Certificate EffectiveDate: "do feb 22 00:00:00 2018 GMT" 2019-09-18 10:06:27 : [SslCert] Certificate ExpirationDate: "wo apr 22 12:00:00 2020 GMT" 2019-09-18 10:06:27 : [SslCert] ALPN: Yes 2019-09-18 10:06:27 : [SslCert] Cipher: "ECDHE-RSA-AES256-GCM-SHA384" 2019-09-18 10:06:27 : [SslCert] KXE: "ECDH" 2019-09-18 10:06:27 : [SslCert] Protocol: "TLSv1.2" 2019-09-18 10:06:27 : [Telemetry] Status code: QVariant(int, 201) 2019-09-18 10:06:27 : [Scan] Finished 2019-09-18 10:07:58 : [Button clicked] Log files menu item 2019-09-18 10:09:23 : [Application] Closing AdwCleaner