System Event Notification System fail to start after use Adware Cleaner

user_avatar amakusa

After some cleaning provided by Adware Cleaner, my internet connection failed while the WiFI and LAN driver still there. I tried cmd netsh winsock reset but still fail. I tried re-install WiFI and LAN and sens.dll (from windows installation) but no effect at all. How do I fix my internet connection error?

Here i provide my Adware log. 

# AdwCleaner v5.107 - Logfile created 26/04/2016 at 14:48:56
# Updated 28/03/2016 by Xplode
# Database : 2016-05-23.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x86)
# Username : Yunika Wijayanti - TOSHIBAC40-A
# Running from : F:\adwcleaner_5.107.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : winzipersvc

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\Maxiget
[-] Folder Deleted : C:\Program Files\SupTab
[-] Folder Deleted : C:\Program Files\WinZipper
[-] Folder Deleted : C:\Program Files\XTab
[-] Folder Deleted : C:\ProgramData\IePluginServices
[-] Folder Deleted : C:\ProgramData\IHProtectUpDate
[-] Folder Deleted : C:\ProgramData\WindowsMangerProtect
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaxiGet Download Manager
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Local\Maxiget
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Local\MaxiGet Download Manager
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Extensions\blgkblimeaijgefaoiedchmmemmikpdg
[J] Folder Not Deleted : C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Extensions\blgkblimeaijgefaoiedchmmemmikpdg
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckchkohkbpoijhiebdafjlnlhjpijgoh
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Extensions\hafhfiojhopgadpicnniadilbbpnokmk
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Roaming\eCyber
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Roaming\Maxiget
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Roaming\mystartsearch
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Roaming\SupTab
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Roaming\WinZipper
[-] Folder Deleted : C:\Users\Yunika Wijayanti\AppData\Roaming\WinZiper
[-] Folder Deleted : C:\Windows\system32\config\systemprofile\AppData\Local\Maxiget

***** [ Files ] *****

[-] File Deleted : C:\Users\Public\Desktop\MaxiGet Download Manager.lnk
[-] File Deleted : C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage

***** [ DLLs ] *****


***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
[-] Shortcut Disinfected : C:\Users\Yunika Wijayanti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[-] Shortcut Disinfected : C:\Users\Yunika Wijayanti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
[-] Shortcut Disinfected : C:\Users\Yunika Wijayanti\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Scheduled tasks ] *****

[-] Task Deleted : MaxigetMasterUpdate

***** [ Registry ] *****

[#] Key Deleted : HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinZipper
[#] Key Deleted : HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinZipper
[#] Key Deleted : HKLM\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\WinZipper
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.001
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.7z
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.arj
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.bz2
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.bzip2
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.cab
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.cpio
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.deb
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.dmg
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.fat
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.gz
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.gzip
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.hfs
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.iso
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.lha
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.lzh
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.lzma
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.ntfs
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.rar
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.rpm
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.squashfs
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.swm
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.tar
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.taz
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.tbz
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.tbz2
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.tgz
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.tpz
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.txz
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.vhd
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.wim
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.xar
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.xz
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.z
[#] Key Deleted : HKLM\SOFTWARE\Classes\WinZippers.zip
[#] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
[#] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[#] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
[#] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[#] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[#] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[#] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[#] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[#] Key Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [{4F622628-7632-4B28-B184-D7BA0CA3273B}]
[#] Key Deleted : HKCU\Software\MaxiGet
[#] Key Deleted : HKCU\Software\SupHpUISoft
[#] Key Deleted : HKCU\Software\V9
[#] Key Deleted : HKLM\SOFTWARE\IHProtect
[#] Key Deleted : HKLM\SOFTWARE\MaxiGet
[#] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[#] Key Deleted : HKLM\SOFTWARE\SupDp
[#] Key Deleted : HKLM\SOFTWARE\SupTab
[#] Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
[#] Key Deleted : HKLM\SOFTWARE\V9
[#] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Software Management Module
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MaxiGet Download Manager_is1
[#] Key Deleted : HKU\.DEFAULT\Software\MaxiGet
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\MaxiGet
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\SupHpUISoft
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\V9
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\Software Management Module
[#] Key Deleted : HKU\S-1-5-18\Software\MaxiGet
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[#] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[#] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[#] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[#] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Data Restored : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[#] Key Deleted : HKU\S-1-5-21-4196259255-1857684326-191386799-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[#] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mystartsearch.com

***** [ Web browsers ] *****

[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch.com
[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch_
[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch
[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : delta-homes
[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.mystartsearch.com/?type=hp&ts=1414151315&from=epom1&uid=TOSHIBAXMQ01ABF050_34CKCOS5TXX34CKCOS5T
[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://search.delta-homes.com/webfavicon.ico
[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pelmeidfhdlhlbjimpabfcbnnojbboma
[-] [C:\Users\Yunika Wijayanti\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxp://www.mystartsearch.com/?type=hp&ts=1414151315&from=epom1&uid=TOSHIBAXMQ01ABF050_34CKCOS5TXX34CKCOS5T

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [13061 bytes] - [26/04/2016 14:48:56]
C:\AdwCleaner\AdwCleaner[S1].txt - [14730 bytes] - [26/04/2016 14:47:48]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [13209 bytes] ##########

 

Re: System Event Notification System fail to start after use Adware Cleaner

Hello,

Can you provide me the result of the following command :

ipconfig /all

Regards,

Re: System Event Notification System fail to start after use Adware Cleaner

Hello,

Can you provide me the result of the following command :

ipconfig /all

Regards,

fr33tux, 2016-05-25 10:35:25 (UTC)

I try two way, normal and administrator mode (run as administrator)

here the result : 1. normal

'ipconfig' is not recognized as an internal or external command, operable program or batch file.

2. run as administrator it works normally, show MAC address (WiFI and LAN) and all

Re: System Event Notification System fail to start after use Adware Cleaner

I need the content of the result, at least showing the Wifi part.

Re: System Event Notification System fail to start after use Adware Cleaner

here it is 

C:\Windows\system32>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : ToshibaC40-A
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Wireless LAN adapter Wireless Network Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Atheros AR956x Wireless Network Adapter
   Physical Address. . . . . . . . . : B8-EE-65-02-E5-DE
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Qualcomm Atheros AR8162/8166/8168 PCI-E F
ast Ethernet Controller (NDIS 6.20)
   Physical Address. . . . . . . . . : C4-54-44-8B-35-C4
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{5AB4F366-6DB7-4ED2-A9E1-4140728773B8}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{8279B07A-A088-4960-9C49-D24960E44CC2}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Reusable ISATAP Interface {7195BA45-4B8F-47EB-BBFA-E6B5AA362821}:


   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

C:\Windows\system32>

 

Re: System Event Notification System fail to start after use Adware Cleaner

Ok. If you try to reconnect to your wifi network, what happens ?

Re: System Event Notification System fail to start after use Adware Cleaner

even after i disable-enable it, it still shows x-marks (X) on the icon bar (left side of windows)

Re: System Event Notification System fail to start after use Adware Cleaner

you need to reinstall the software for your "killer" network card..

the "adwcleaner" program stupidly automatically resets your "winsock" settings, screwing up the installation of the software for your "killer" network-card..

in the future, you will have to always remember to untick adwcleaner's option for automatically resetting your computer's settings for "winsock"..

Re: System Event Notification System fail to start after use Adware Cleaner

you need to reinstall the software for your "killer" network card..

the "adwcleaner" program stupidly automatically resets your "winsock" settings, screwing up the installation of the software for your "killer" network-card..

in the future, you will have to always remember to untick adwcleaner's option for automatically resetting your computer's settings for "winsock"..

redwolfe_98, 2016-05-26 00:39:24 (UTC)

Hello,

AdwCleaner doesn't "stupidly" reset winsock settings. If it does, it's because many adwares puts infected winsock entries. As you said, you have the possibility to untick this option if you have specific settings.

Always remember that AdwCleaner is a disinfection tool and might be used carefully.

@amakusa,

Can you download WinsockAnalyzer? Run it, then you will have a file called "WinsockAnalyzer.....txt" under C:\. Please post its content in your next reply.

Regards,

  1. Home
  2. Forum
  3. AdwCleaner
  4. System Event Notification System fail to start after use Adware Cleaner