Is Avast! Antivirus Known To Effect PC Performance?

[Tamzin]

Hello there. Recently, (A couple of days ago to be exact..), I switched from Malwarebytes to Avast! Due to my Malwarebytes trial expiring. I switched to Avast! because it was the second best antivirus I knew about, at least, from what I remember. :huh: I ran a full system scan shortly after installing Avast! to find there were no threats detected.

Yesterday, I was all set to go to bed and I shut down my computer the right way, by using the "Shut down" button on the start menu in Windows 7. I turned off my screen to find it was still trying to shut down 10 minutes later, this is something that usually, doesn't even take 20 seconds for me, so I figured the PC hung and thought nothing of it, so I used the power button to hard power off.

I turned my computer on about 20-25 minutes ago to find it took 2-3 minutes (After entering password) to log on. Again, this is something that never even used to take 20 seconds. This has lead me to creating an account here and making this post, blaming Avast!.

I'd usually just get rid of the program that I thought was causing it, but since I have no other antivirus, I wanted to keep it until I got your thoughts and opinions on Avast! Could you please recommend a new (free, if possible) antivirus to me that is fast, and can run without tampering with my PC performance or other programs open?

If it helps, here is a screenshot of my Avast! information and some basic information on my PC specs, thank-you.

-Tamzin.

 

[DavidE]

I have Avast free on a couple of systems and I don't see the performance issues you see.
I don't have any of the optional Avast "bloat" installed.
You can see what you have installed in Avast Tools.

You could try other lighter AVs such as MS Security Essentials or Panda free.
Download Microsoft Security Essentials from Official Microsoft Download Center
Best Free Antivirus Download | Panda Free Antivirus 2015

If you do want to try another AV, use the Avast uninstall utility to remove Avast before installing another AV.
https://www.avast.com/uninstall-utility

Also, MalwareBytes is not an Anti-Virus, it is an Anti-Malware.

 

[Jacee]

Let's take a look at what 'adware' you may have installed accidently ...

Download AdwCleaner by Xplode and save to your Desktop.

Step 1.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator.
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
• The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
• Copy and paste the contents of that logfile in your next reply.
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Step 2.
Using AdwCleaner v3: Scan & Clean:
This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder

******Post both .txt logs

 

[Tamzin]

Thanks, Jacee.
This is the report log it popped up with after a reboot.

# AdwCleaner v4.109 - Report created 24/01/2015 at 11:30:46
# Updated 24/01/2015 by Xplode
# Database : 2015-01-24.4 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Tamzin - TAMZIN-PC
# Running from : C:\Users\Tamzin\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\Program Files (x86)\NCH Software
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Tamzin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage
File Deleted : C:\Users\Tamzin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal
File Deleted : C:\Users\Tamzin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage
File Deleted : C:\Users\Tamzin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal
File Deleted : C:\Users\Tamzin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodak\Uninstall KODAK AiO Software.lnk

***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v0.0.0.0


-\\ Mozilla Firefox v


-\\ Google Chrome v40.0.2214.91


*************************

AdwCleaner[R0].txt - [1595 octets] - [24/01/2015 11:29:15]
AdwCleaner[S0].txt - [1648 octets] - [24/01/2015 11:30:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1708 octets] ##########


It's funny because I did some research to find some of these items were PUP's.. When I had MalwareBytes, It never picked any of these up, the only one I recognize MB picking up is AZLyrics. I discovered that some of these can be bundled with software installers, and the only one I have installed since my problem is Avast!. I also, go through installation slowly to avoid downloading crapware.

-Tammy.

 

[Jacee]

Oooo... I didn't get your reply notification, sorry about that!

Tell me if you're okay now, or still having problems.

 

[Berkey]

Also in the future you can try Unchecky - Keeps your checkboxes clear which is a nice tool to help prevent accidentally installing bloatware. I'm very meticulous when I read through the fine print (and do it in a VM) but they are getting trickier and trickier all the time.

 

[RolandJS]

I have paid-for Avast AntiVirus Pro, and there are lots of stuff that I disabled: Sandbox, Safe Zone, Software Updater, Browser Cleanup, Grime Fighter, SecureVPN, Access Anywhere, Remote Assistance just to name the few. Many security programs come with configuration/settings controls -- rather than accepting etal en toto, it's up to us to disable what is not needed or wanted.

 

[RolandJS]

Berkey, could I have a few of those links in your signature via PM? I'm not at home, cannot look em up in the library.

 

[Jacee]

We seem to have gone off track and lost the original poster.

 

[BlackHawk1]

I have paid-for Avast AntiVirus Pro, and there are lots of stuff that I disabled: Sandbox, Safe Zone, Software Updater, Browser Cleanup, Grime Fighter, SecureVPN, Access Anywhere, Remote Assistance just to name the few. Many security programs come with configuration/settings controls -- rather than accepting etal en toto, it's up to us to disable what is not needed or wanted.

My question would be then why use the paid for Avast version? It appears to me you have essentially demoted Avast to the options of the free version.

 

[BlackHawk1]

IME each of us has a different "stew" so to speak and Avast may run just fine on other users computers, but perhaps not yours for some reason. I have seen this situation with my favorite antivirus Kaspersky. On some computers it's just fine and on others it clearly caused performance issues. For those people I have had them try Avira (paid version) and it didn't have as much of a negative effect on performance as Kaspersky did on their computers. You could give Avira a try. I suggest doing a good clean uninstall of whatever antivirus you want to remove via one of their clean up (uninstall) tools after a uninstall via Control Panel. Revo uninstaller is also a good uninstaller for these situations IMO.

 

[RolandJS]

I have paid-for Avast AntiVirus Pro, and there are lots of stuff that I disabled: Sandbox, Safe Zone, Software Updater, Browser Cleanup, Grime Fighter, SecureVPN, Access Anywhere, Remote Assistance just to name the few. Many security programs come with configuration/settings controls -- rather than accepting etal en toto, it's up to us to disable what is not needed or wanted.

My question would be then why use the paid for Avast version? It appears to me you have essentially demoted Avast to the options of the free version.

I also was in a hurry posting the above. I use some of the stuff above from time to time - on demand basis.

 

[RolandJS]

Tamzin, did you get your Avast question answered? I left a laundry list of things you can live without. Did you disable one or more of such things, and did the overall performance get better?

 

[Skittler1987]

I noticed he said Avast was lagging boot-up time and not his overall browsing experience. All antiviruses tend to cause a delay on startup. After it loads up and you have no problems then I wouldn't worry. Avast does the same for me during a reboot. It's fast after that.

 

[MonkeyFox]

Newbie Thanks Jacee

THANK YOU SO MUCH for this info Jacee. My computer had almost ground to a halt it was going so slowly! (Crikey! I had to go through some hoops to say thank you! heehee) Just in case anyone's interested here's the MASSIVE report post following your advice, {No wonder it was slow! }:-

# AdwCleaner v5.010 - Logfile created 06/10/2015 at 06:39:16
# Updated 04/10/2015 by Xplode
# Database : 2015-10-05.3 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Monkey - MONKEYBOX
# Running from : C:\Users\Monkey\Downloads\AdwCleaner.exe
# Option : Cleaning
# Support : Forum - ToolsLib

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\BonanzaDeals
[-] Folder Deleted : C:\Program Files (x86)\BonanzaDealsLive
[-] Folder Deleted : C:\Program Files (x86)\MyPC Backup
[-] Folder Deleted : C:\Program Files (x86)\wse_astromenda
[-] Folder Deleted : C:\Program Files (x86)\WInterEnhance
[-] Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Folder Deleted : C:\ProgramData\AVG Secure Search
[-] Folder Deleted : C:\ProgramData\AVG Security Toolbar
[-] Folder Deleted : C:\ProgramData\BonanzaDealsLive
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WInterEnhance
[-] Folder Deleted : C:\Users\Monkey\AppData\Roaming\Astromenda
[-] Folder Deleted : C:\Users\Monkey\AppData\Roaming\wse_astromenda

***** [ Files ] *****

[-] File Deleted : C:\END
[-] File Deleted : C:\Users\Monkey\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pfkfdlcdbajamklbneflfbcmfgddmpae_0.localstorage
[-] File Deleted : C:\Windows\SysNative\roboot64.exe

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : BonanzaDealsLiveUpdateTaskMachineCore
[-] Task Deleted : BonanzaDealsLiveUpdateTaskMachineUA
[-] Task Deleted : BonanzaDealsUpdate
[-] Task Deleted : WSE_Astromenda

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\BonanzaDealsLive.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLive.OneClickCtrl.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLive.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLive.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLive.Update3WebControl.3
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\BonanzaDealsLiveUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\S
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=3
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@tools.bdupdater.com/BonanzaDealsLive Update;version=9
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9EA8702C-EEDB-4731-BE68-E9A167DD3597}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D34F391D-4CB7-467F-A543-F583857C63B0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{118E1BF6-6279-432F-A285-373A77B90C7A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14CEEA2F-3D21-46ED-A7D2-89056C520E5E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1CC8D970-F626-4F19-815F-890032BB6606}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{29494049-211F-4F5C-8545-7DA8BF7A6CF8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{33BAF587-9647-4281-A34F-F4830CDC1B9F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5B5E5D0E-7C83-4A32-ADD2-E5F488DD6783}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6802463D-636F-41FE-9924-4CAD56906590}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{806785D0-375F-4C2C-92E3-B8EE65D28E83}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{944661E7-67B9-4DF7-BFF2-05388C166D34}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9EA8702C-EEDB-4731-BE68-E9A167DD3597}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A7CF66EF-4F0D-46B1-AF71-A500378D6C34}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B71934E5-6B93-448D-9D32-CBAA5150C5D8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C4BEF720-313C-420A-ACF6-77DD95D8F553}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D34F391D-4CB7-467F-A543-F583857C63B0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E970727E-0508-4BEB-8B72-BBA9D0D047C7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EBF1F869-D2F0-4D31-A877-386C853A9C3D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F3CF4912-CF0A-451B-AF3B-C4F216C715E4}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F904AC50-215C-42AB-A532-77E9FDBA9B19}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063412-BEA4-4D76-8ED3-183BE6220D17}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{29494049-211F-4F5C-8545-7DA8BF7A6CF8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C4BEF720-313C-420A-ACF6-77DD95D8F553}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{29494049-211F-4F5C-8545-7DA8BF7A6CF8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33BAF587-9647-4281-A34F-F4830CDC1B9F}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4BEF720-313C-420A-ACF6-77DD95D8F553}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Key Deleted : HKU\.DEFAULT\Software\Avg Secure Update
[-] Key Deleted : HKCU\Software\BonanzaDealsLive
[-] Key Deleted : HKCU\Software\BRS
[-] Key Deleted : HKCU\Software\InstallCore
[-] Key Deleted : HKCU\Software\WSE_Astromenda
[-] Key Deleted : HKCU\Software\WInterEnhance
[-] Key Deleted : HKCU\Software\WajIEnhance
[-] Key Deleted : HKCU\Software\Avg Secure Update
[-] Key Deleted : HKLM\SOFTWARE\BonanzaDeals
[-] Key Deleted : HKLM\SOFTWARE\BonanzaDealsLive
[-] Key Deleted : HKLM\SOFTWARE\InstallCore
[-] Key Deleted : HKLM\SOFTWARE\systweak
[-] Key Deleted : HKLM\SOFTWARE\WInterEnhance
[-] Key Deleted : HKLM\SOFTWARE\Avg Secure Update
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bonanza Deals
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WSE_Astromenda
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WInterEnhance
[!] Key Not Deleted : [x64] HKCU\Software\BonanzaDealsLive
[!] Key Not Deleted : [x64] HKCU\Software\BRS
[!] Key Not Deleted : [x64] HKCU\Software\InstallCore
[!] Key Not Deleted : [x64] HKCU\Software\WSE_Astromenda
[!] Key Not Deleted : [x64] HKCU\Software\WInterEnhance
[!] Key Not Deleted : [x64] HKCU\Software\WajIEnhance
[!] Key Not Deleted : [x64] HKCU\Software\Avg Secure Update
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : HKU\S-1-5-21-610751648-1757039549-2554087534-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : HKU\S-1-5-21-610751648-1757039549-2554087534-1002\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

***** [ Web browsers ] *****

[-] [C:\Users\Monkey\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://astromenda.com/?f=7&a=ast_wnzp01_14_43_ie&cd=2XzuyEtN2Y1L1QzuzzyE0AyC0Czz0Dzz0CyEyB0AtB0BtAtDtN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StAyB0CtAtC0Ezy0EtGtAyBtC0AtGzytB0CyCtGzz0DyDyEtGtDzy0C0BtAyDyEyE0EyD0AyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyCtA0EtByB0DyDtG0B0A0DtCtGyEyEyByBtGzy0F0ByCtGzy0CzytDyDtD0C0A0EyD0AyE2Q&cr=1506592282&ir=
[-] [C:\Users\Monkey\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pfkfdlcdbajamklbneflfbcmfgddmpae

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [12530 bytes] ##########