1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive maleware and dds logs (for rundll error)

Discussion in 'Malware and Virus Removal Archive' started by gerdy, 2014/08/26.

Thread Status:
Not open for further replies.
  1. 2014/08/26
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    [Inactive] maleware and dds logs (for rundll error)

    Hi

    I was asked to attach these two logs maleware scanlog and dds but everytime I try to put the two zipped folder in to the post it does not sow there but it opens a window like it wants to open the file in notepad. can anyone tell me how I can do this since I am new to this. Thank you for any help
     
  2. 2014/08/27
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,890
    Likes Received:
    387
    Open each log and copy/paste the content into your thread - you may need to make more than one post.

    See ..... http://www.windowsbbs.com/malware-virus-removal/announcements.html
     

  3. to hide this advert.

  4. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    thanks for the help here is part of the scanlog hopefully someone can help.

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 08/23/2014
    Scan Time: 6:56:57 PM
    Logfile: maleware scanlog.txt
    Administrator: Yes

    Version: 2.00.2.1012
    Malware Database: v2014.08.23.06
    Rootkit Database: v2014.08.21.01
    License: Trial
    Malware Protection: Enabled
    Malicious Website Protection: Enabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: Owner

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 423183
    Time Elapsed: 9 min, 33 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 1
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-11.exe, 3356, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0]

    Modules: 0
    (No malicious items detected)

    Registry Keys: 130
    PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\CLASSES\CLSID\{7D1B27B2-3DE0-4F26-94A0-E14FDB06D292}, Quarantined, [7a88fcce582380b676ee72008b77817f],
    PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7D1B27B2-3DE0-4F26-94A0-E14FDB06D292}, Quarantined, [7a88fcce582380b676ee72008b77817f],
    PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7D1B27B2-3DE0-4F26-94A0-E14FDB06D292}, Quarantined, [7a88fcce582380b676ee72008b77817f],
    PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7D1B27B2-3DE0-4F26-94A0-E14FDB06D292}, Quarantined, [7a88fcce582380b676ee72008b77817f],
    PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{7D1B27B2-3DE0-4F26-94A0-E14FDB06D292}, Quarantined, [7a88fcce582380b676ee72008b77817f],
    PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{7D1B27B2-3DE0-4F26-94A0-E14FDB06D292}, Quarantined, [7a88fcce582380b676ee72008b77817f],
    PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, Quarantined, [788ad7f372091e18531a9fd729d94fb1],
    PUP.Optional.DynConIE.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, Quarantined, [788ad7f372091e18531a9fd729d94fb1],
    PUP.Optional.Tuvaro, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}, Quarantined, [46bcd4f64338d85e452784ecbb4756aa],
    PUP.Optional.Tuvaro, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}, Quarantined, [46bcd4f64338d85e452784ecbb4756aa],
    PUP.Optional.ShopAtHome.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{311B58DC-A4DC-4B04-B1B5-60299AD3D803}, Quarantined, [36cc5674f68575c10050621379893fc1],
    PUP.Optional.FunWebProducts.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, Quarantined, [798948826912b77f2aef47651ae86d93],
    PUP.Optional.FunWebProducts.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, Quarantined, [798948826912b77f2aef47651ae86d93],
    PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, Quarantined, [cd35e1e9215ae056ed93d8997989ac54],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, Quarantined, [7b87e0ea413aae88cab74e23649e9c64],
    PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [56acb416fa811323a137b3c2f01214ec],
    PUP.Optional.RebateInformer.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{CCB69577-088B-4004-9ED8-FF5BCC83A039}, Quarantined, [c33f8d3d89f22d096c9a713b1ae8c13f],
    PUP.Optional.InboxToolBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, Quarantined, [d42ed8f26d0ecb6b3cb579f82ad8857b],
    PUP.Optional.InboxToolBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, Quarantined, [f1118b3f9be0280e09fb9c10ed15936d],
    PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}w64, Quarantined, [8979d0fae695e452f287173556ae9d63],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0060548.BHO, Quarantined, [27db91391269b581a3776b82748eb44c],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0060548.BHO.1, Quarantined, [7b8771592952122456c4df0e90727b85],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0060548.Sandbox, Quarantined, [03ffc20833487db90e0c41acd52d4db3],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0060548.Sandbox.1, Quarantined, [ed153e8c9ae1bf7729f142aba55ddf21],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0061872.BHO, Quarantined, [6c96d8f25c1fb680bb5fffee03ff37c9],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0061872.BHO.1, Quarantined, [9c66b31718630f278d8dcb22976b5ba5],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0061872.Sandbox, Quarantined, [e91951798fecf54172a805e8e91952ae],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0061872.Sandbox.1, Quarantined, [808254767704fb3b61b95f8ed82a669a],
    PUP.Optional.Groovorio.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\blmchfpimpbbdmgpcieclabeafkljbhm, Quarantined, [b84af3d799e23bfb5b214aa3857d867a],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, Quarantined, [847e42881d5eb77ffbd6a6721be83ec2],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, Quarantined, [c042d7f335468da984772adf83804fb1],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [6c964684bebd2b0b19e2e0296f94837d],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\5526, Quarantined, [9d6545852853171faa5142c7f50e52ae],
    PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [4fb39d2da5d69d99c9787dbb9371659b],
    PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CelebSauce, Quarantined, [6d95ae1ca2d9ab8ba2de8cbb2ada8779],
    PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\Cinema-Plus-1.2, Quarantined, [df23af1be596b87ec081f8f1e022e020],
    PUP.Optional.ClipHD.A, HKLM\SOFTWARE\WOW6432NODE\Clip-High_D_06, Quarantined, [43bf0dbdf78483b38e0aa154cd35fb05],
    PUP.Optional.IStart123.A, HKLM\SOFTWARE\WOW6432NODE\istart123Software, Quarantined, [7c86ca000477e551b80a33b408fab050],
    PUP.Optional.MyWordTool.A, HKLM\SOFTWARE\WOW6432NODE\MyWordTool, Quarantined, [e31f02c880fb60d6f97a330726debc44],
    PUP.Optional.ObjectBrowser.A, HKLM\SOFTWARE\WOW6432NODE\Object Browser, Quarantined, [cd3524a69ae11125a9bf39fb4db747b9],
    PUP.Optional.SearchSnacks.A, HKLM\SOFTWARE\WOW6432NODE\SearchSnacks, Quarantined, [8f7374568af11e18b81c906b39c93dc3],
    PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, Quarantined, [20e2d3f7bbc04de97447c488ac5846ba],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0060548.BHO, Quarantined, [23dfba10ee8dda5c4ad0aa43ab579070],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0060548.BHO.1, Quarantined, [719144869fdca096d347ce1f5ca6659b],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0060548.Sandbox, Quarantined, [be44fecc542747efe733de0fe022ca36],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0060548.Sandbox.1, Quarantined, [a85a0fbb4b30ea4c65b5509dea181ae6],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0061872.BHO, Quarantined, [758d14b6ef8c64d2f723d914719132ce],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0061872.BHO.1, Quarantined, [7c862b9f5e1df44240da23ca2dd533cd],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0061872.Sandbox, Quarantined, [d230e0ead2a948eed74310dda161bd43],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0061872.Sandbox.1, Quarantined, [e41ed1f9f18af640ec2e3faeaf5329d7],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, Quarantined, [9b6708c29ae1c86e9c3345a9ee14d729],
    PUP.Optional.Groovorio.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\blmchfpimpbbdmgpcieclabeafkljbhm, Quarantined, [f60c8149d3a848eef78596579a6844bc],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, Quarantined, [936f45856d0e3ff75c7598800300d729],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21836, Quarantined, [3ec48d3d19627fb705f627e244bfdb25],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [60a2eae02a51f93db8431feacf342fd1],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\5526, Quarantined, [e02224a6f982c96d32c923e628dbc23e],
    PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Cinema-Plus-1.2, Quarantined, [c9399c2e2d4e8da99ea41ccdaa58e61a],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, Quarantined, [60a284464d2e79bd6d78d87732d228d8],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, Quarantined, [f9094f7b6219999d697d97b8c2423fc1],
    PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, Quarantined, [010152788eed6acce212559b12f0718f],
    PUP.Optional.SearchSnacks, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ssnfd, Quarantined, [c939ab1fe794979fef390be17b87669a],
    PUP.Optional.CinemaPlus, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Cinema-Plus-1.2, Quarantined, [709255758af1f44298ab92575da53ac6],
    PUP.Optional.ClipHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Clip-High_D_06, Quarantined, [17eb4d7d7a0187af6d2d10e51be7de22],
    PUP.Optional.iWebar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, Quarantined, [46bcc406d0ab89ad8e2b57baae5508f8],
    PUP.Optional.PalMall.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PalMall, Quarantined, [b84acffba3d8181ecda7925cc83aed13],
    PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PlusSTotal-9.4, Quarantined, [649e22a8a9d26ec8a8f77888c83b44bc],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CelebSauce, Quarantined, [36cc10ba3447d75fef927acd0cf8fe02],
    PUP.Optional.FreeSoftToday.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\freesofttoday, Quarantined, [c33f22a8e89381b5239c4e0070947888],
    PUP.Optional.MyWordTool.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MyWordTool, Quarantined, [5da5d6f4007b40f698dc0c2eaa5a14ec],
    PUP.Optional.WebSearches.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SupHpUISoft, Quarantined, [27dbf6d45c1f2c0a31f8826692705fa1],
    PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, Quarantined, [6d9568623c3f1a1ca9718ec256aec040],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CelebSauce, Quarantined, [40c2dcee9be0c472ef829764b44ef40c],
    PUP.Optional.CinemaPlus, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Cinema-Plus-1.2, Quarantined, [37cb8e3c3f3c86b08bb810d9738fd32d],
    PUP.Optional.ClipHD.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Clip-High_D_06, Quarantined, [2cd6b119c2b91b1b1684d42154aec937],
    PUP.Optional.FunWebProducts.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fun Web Products, Quarantined, [17eb8149cbb048eefbc1a15add25659b],
    PUP.Optional.FunWebProducts.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FunWebProducts, Quarantined, [fb07a921b7c404329627d72404feb050],
    PUP.Optional.PriceGong.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Quarantined, [0df56b5fa5d6092d0ebd70a09073ab55],
    PUP.Optional.TidyNetwork.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TidyNetwork, Quarantined, [ff0323a7394203339005c747bd46d729],
    PUP.Optional.Groovorio.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\blmchfpimpbbdmgpcieclabeafkljbhm, Quarantined, [fa080cbebac1ef47ec91df0ee91956aa],
    PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, Quarantined, [a55d5971017acb6bc010a4743dc6a45c],
    PUP.Optional.InstallCore.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [c33f99318af1eb4b193c50c6e0239769],
    PUP.Optional.InstallCore.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [44be8c3e6714a88e108ae64646bef10f],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, Quarantined, [2bd73b8fdc9f4aec7e76539556acb24e],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [a75bba10106bf3439f552cbc966ca759],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\5526, Quarantined, [a161ae1caecd5fd7589c17d120e2f907],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\BNT_D, Quarantined, [5ea4ad1d02794de9aaf16392639f0ef2],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema Plus, Quarantined, [c43e6e5cafcc56e0b52634b2d82a9c64],
    PUP.Optional.iWebar.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\iWebar, Quarantined, [7c866d5dd6a561d52ffd32e121e2ca36],
    PUP.Optional.SystemSpeedup, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, Quarantined, [9c664f7bea91a5918172a947e51d827e],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CelebSauce, Quarantined, [748ecdfdbfbccd69f37e6e8da260dd23],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CitySearch_9h, Quarantined, [689a3a90d2a940f62d477784f80a59a7],
    PUP.Optional.FunWebProducts.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Fun Web Products, Quarantined, [37cbcffb027935015666e01bb052b14f],
    PUP.Optional.FunWebProducts.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FunWebProducts, Quarantined, [53af18b27209d75fa617f30819e915eb],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\GamingWonderland, Quarantined, [7290e3e772098bab059dc03bbb477b85],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HowToSimplified_8e, Quarantined, [9072ae1ccab153e33f0b2ecd34ce5da3],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MapsGalaxy_39, Quarantined, [010120aae398a78fba91e318bb4708f8],
    PUP.Optional.PriceGong.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Quarantined, [fc06606a03783ef8deeddb355ba8ec14],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TelevisionFanatic, Quarantined, [d42e01c9e794dd59b6a8c53609f9eb15],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\WeatherBlink, Quarantined, [28da10ba89f21c1ac9a3a05b26dcfd03],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CelebSauce, Quarantined, [9e64d2f8ccaf1125d79aeb108979d828],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CitySearch_9h, Quarantined, [8c7644865526ba7c462e15e617ebf808],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HowToSimplified_8e, Quarantined, [18ea804a4338dc5acb7fc5369b6727d9],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MapsGalaxy_39, Quarantined, [010125a55229dc5ae665e11ad0328779],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TelevisionFanatic, Quarantined, [ee14b614fb80ea4ca8b645b6e51d916f],
    PUP.Optional.MindSpark.A, HKU\S-1-5-21-1428296519-808540364-3115338296-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CitySearch_9h, Quarantined, [29d99733304bd561413308f33ec4f30d],
    PUP.Optional.ClipHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Clip-High_D_06, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110611051148}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644054448}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655055548}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666056648}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655055548}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666056648}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644054448}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110611051148}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110611051148}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220622052248}, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],

    Registry Values: 5
    PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{99079a25-328f-4bd4-be04-00955acaa0a7}, Quarantined, [c1412aa0a6d5320469bd6612ab576898],
    PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Searchqu Toolbar, Quarantined, [c1412aa0a6d5320469bd6612ab576898]
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, Quarantined, [9b6708c29ae1c86e9c3345a9ee14d729]
    PUP.Optional.InstallCore.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0X2O1C0R2R1R, Quarantined, [44be8c3e6714a88e108ae64646bef10f]
    PUP.Optional.UnFriendApp.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|support@unfriendapp.com, C:\Program Files (x86)\UnfriendApp\Firefox\, Quarantined, [31d1408a6c0f02342dd2f10d53af2ed2]

    Registry Data: 3
    PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[b151ffcbf487bc7a5298f4e9de26ba46]
    PUP.Optional.IStart123.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istart123.com/?type=hp&ts=1406314128&from=tugs&uid=ST31000524AS_6VPFNENM, Good: (www.google.com), Bad: (http://www.istart123.com/?type=hp&ts=1406314128&from=tugs&uid=ST31000524AS_6VPFNENM),Replaced,[8c76f1d97902a294929f0cd345bfc739]
    PUP.Optional.IStart123.A, HKU\S-1-5-21-1428296519-808540364-3115338296-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istart123.com/web/?type=ds&ts=1406314128&from=tugs&uid=ST31000524AS_6VPFNENM&q={searchTerms}, Good: (www.google.com), Bad: (http://www.istart123.com/web/?type=ds&ts=1406314128&from=tugs&uid=ST31000524AS_6VPFNENM&q={searchTerms}),Replaced,[79897c4e7b0096a0c2712cb3877da060]

    Folders: 74
    PUP.Optional.Goobzo, C:\ProgramData\SearchModule, Quarantined, [6f9320aa205b76c0347142a408faac54],
    PUP.Optional.SoftwareUpdater.A, C:\Users\Owner\AppData\Local\SwvUpdater, Quarantined, [e51d1ab0de9df93d403abe30c83a32ce],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome, Quarantined, [d62c8b3fa1da60d6328fa26c49bafd03],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome\ShopAtHomeHelper, Quarantined, [d62c8b3fa1da60d6328fa26c49bafd03],
    PUP.Optional.TidyNetwork.A, C:\Users\Owner\AppData\Local\TidyNetwork, Quarantined, [719113b7512af046253d34060cf8d32d],
    Rogue.Multiple, C:\ProgramData\374311380, Quarantined, [38ca2f9bd0ab87af7c001698c240a759],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\tmp, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\tmp, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.Datamngr.A, C:\Users\Guest\AppData\LocalLow\DataMngr, Quarantined, [11f10ebc176478be5035b2124eb404fc],
    PUP.Optional.FunWebProducts.A, C:\Users\Guest\AppData\LocalLow\FunWebProducts, Quarantined, [33cf67631c5f01358fbde2eace349e62],
    PUP.Optional.FunWebProducts.A, C:\Users\Guest\AppData\LocalLow\FunWebProducts\Shared, Quarantined, [33cf67631c5f01358fbde2eace349e62],
    PUP.Optional.FunWebProducts.A, C:\Users\Guest\AppData\LocalLow\FunWebProducts\Shared\Cache, Quarantined, [33cf67631c5f01358fbde2eace349e62],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\AppData\LocalLow\FunWebProducts, Quarantined, [ba4826a41c5f1d191339527af80a1ce4],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\AppData\LocalLow\FunWebProducts\Installr, Quarantined, [ba4826a41c5f1d191339527af80a1ce4],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\AppData\LocalLow\FunWebProducts\Installr\Cache, Quarantined, [ba4826a41c5f1d191339527af80a1ce4],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\AppData\LocalLow\FunWebProducts\Shared, Quarantined, [ba4826a41c5f1d191339527af80a1ce4],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\History, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\MapsGalaxy_39, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\MapsGalaxy_39\Cache, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\History, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\WeatherBlink, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\WeatherBlink\Cache, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\History, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Settings, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\GamingWonderland, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\GamingWonderland\Cache, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.SearchQu.A, C:\Users\Guest\AppData\LocalLow\searchquband, Quarantined, [44be8a406a11ed4914f85e7241c1f010],
    PUP.Optional.SearchQu.A, C:\Users\Owner\AppData\LocalLow\searchquband, Quarantined, [d1319f2b473425119775fdd3f111738d],
    PUP.Optional.SearchQu.A, C:\Users\Guest\AppData\LocalLow\searchqutoolbar, Quarantined, [b34f4f7b463561d5d13ca82838ca1ee2],
    PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, Quarantined, [dc26f8d2017a152128bc4c87639fc040],
    PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, Quarantined, [dc26f8d2017a152128bc4c87639fc040],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Quarantined, [956d2e9ce695a09653043f971ce6847c],
    PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\log, Quarantined, [956d2e9ce695a09653043f971ce6847c],
    PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, Quarantined, [956d2e9ce695a09653043f971ce6847c],
    PUP.Optional.SystemSpeedup, C:\Users\Owner\AppData\Roaming\Systweak\ssd, Quarantined, [3bc7d0fa403b132328d1c11525dd926e],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{B51F827F-5DA7-408E-84DD-F559DDFB6221}, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.Groovorio.A, C:\Users\Owner\AppData\Roaming\GroovorioUpdater, Quarantined, [4bb7af1b82f97bbb51712faa689a956b],
    PUP.Optional.Groovorio.A, C:\Users\Owner\AppData\Roaming\GroovorioUpdater\UpdateProc, Quarantined, [4bb7af1b82f97bbb51712faa689a956b],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\2.1.1000.13665, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\2.1.1000.13665, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\Backup, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\Logs, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_bifdbibngieombdobbohdcehhdakpkfp_0, Quarantined, [09f93e8ce794ff371614a936a062f20e],
    PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo, Quarantined, [37cb9337cead83b3e08f449fdf2324dc],
    PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, Quarantined, [5da5c00a85f665d15323a93a7a8860a0],
    PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, Quarantined, [9171edddcead7cbade2407de52b035cb],
     
  5. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is the 2. part of the scanlog
    Files: 359
    PUP.Optional.iBryte, C:\Users\Owner\AppData\Roaming\setup.exe, Quarantined, [b84a92384b30f343e5576348ce33d729],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome\ShopAtHomeAppInstaller_C24746343_D1_R1029863.exe, Quarantined, [709207c3bdbe55e163b5511b6f9237c9],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome\ShopAtHomeAppInstaller_C24746343_D1_R1053218 .exe, Quarantined, [37cbd0facfac76c057c18ddf5ba605fb],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome\ShopAtHomeAppInstaller_C24746343_D1_R1053218.exe, Quarantined, [2ed415b5007b0e284eca006c57aa37c9],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome\ShopAtHomeAppInstaller_C24746343_D1_R1054627.exe, Quarantined, [af5341896e0df0461bfdb1bb09f843bd],
    PUP.Optional.Inbox, C:\Users\Owner\Downloads\MapsSetup (1).exe, Quarantined, [e61c1eac8fecd95dbaa15bba1de4669a],
    PUP.Optional.Inbox, C:\Users\Owner\Downloads\MapsSetup (2).exe, Quarantined, [02006862760571c507545eb73ec3619f],
    PUP.Optional.Inbox, C:\Users\Owner\Downloads\MapsSetup.exe, Quarantined, [59a9ebdfcdaecd69aab1e4317e8315eb],
    PUP.Optional.RegCleanPro, C:\Users\Owner\Downloads\rcpsetup_cpx_cpx.exe, Quarantined, [8a789d2d99e2aa8cf6c6fc38f70918e8],
    PUP.Optional.RegCleanerPro, C:\Users\Owner\Downloads\rcpsetup_matomy_2271 (1).exe, Quarantined, [7191903a89f2cb6b0438ef28976a6799],
    PUP.Optional.RegCleanerPro, C:\Users\Owner\Downloads\rcpsetup_matomy_2271.exe, Quarantined, [28da7a50a7d4c47264d84bcc01006f91],
    PUP.Optional.ToolBarInstaller.A, C:\Users\Owner\Downloads\EmailNotifierSetup (1).exe, Quarantined, [649eba10413a340282d3f25dc33e58a8],
    PUP.Optional.Inbox, C:\Users\Owner\Downloads\UnitsConverterSetup.exe, Quarantined, [9c663397fa8151e58ad1c84dbf4248b8],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\Downloads\MyCarCompanion (1).exe, Quarantined, [8e741eac2358d660910a0b4630d49868],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\Downloads\MyCarCompanion (2).exe, Quarantined, [6a98dfeb413a8da9851662efe321c13f],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\Downloads\MyCarCompanion.exe, Quarantined, [837f2aa0eb90a49247545ef3d3317987],
    PUP.Optional.Conduit, C:\Users\Owner\Downloads\Produtools_Manuals_2.1 (1).exe, Quarantined, [1ee4ebdf93e8e84ef1c0f936b848a15f],
    PUP.Optional.Conduit, C:\Users\Owner\Downloads\Produtools_Manuals_2.1.exe, Quarantined, [ae547c4e4635cd69bff2b07f936d966a],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\Downloads\HowToSimplified.exe, Quarantined, [11f17f4beb90b87e48536de438cc8a76],
    PUP.Optional.InstallCore, C:\Users\Owner\Downloads\installer_java_English.exe, Quarantined, [8f7354769be074c267c28946ff05d22e],
    PUP.Optional.MyWebSearch, C:\Users\Owner\Downloads\DictionaryBoss.exe, Quarantined, [e61c9139215aee48854ef2a139cb26da],
    PUP.Optional.iBryte, C:\Users\Owner\Downloads\Setup (1).exe, Quarantined, [45bd48820a71cf677bbb6942c041669a],
    PUP.Optional.AirAdInstaller, C:\Users\Owner\Downloads\Setup (6).exe, Quarantined, [24de8941aad142f49aa10e2c30d024dc],
    PUP.Optional.AirAdInstaller, C:\Users\Owner\Downloads\Setup (7).exe, Quarantined, [877bbd0de299b97d26153901956b6f91],
    PUP.Optional.AirAdInstaller, C:\Users\Owner\Downloads\Setup (8).exe, Quarantined, [31d1309acbb0f442d16a8ab0d72958a8],
    PUP.Optional.AirAdInstaller, C:\Users\Owner\Downloads\Setup (9).exe, Quarantined, [c43eeedc225950e690ab59e135cb40c0],
    PUP.Optional.OptimunInstaller, C:\Users\Owner\Downloads\Java_Updater_Setup (1).exe, Quarantined, [51b1ab1f5c1f023406d3c9809d633cc4],
    PUP.Optional.OptimunInstaller, C:\Users\Owner\Downloads\Java_Updater_Setup.exe, Quarantined, [dc267555a9d21a1c974290b908f8cb35],
    PUP.Optional.AirAdInstaller, C:\Users\Owner\Downloads\SoftwareUpdate (1).exe, Quarantined, [2dd516b4443770c6d9629b9f936d2cd4],
    PUP.Optional.AirAdInstaller, C:\Users\Owner\Downloads\SoftwareUpdate.exe, Quarantined, [02009e2c91eab38317240d2dc13f46ba],
    PUP.Optional.MindSpark.A, C:\Users\Owner\Downloads\SweepstakesAlley.exe, Quarantined, [50b2bb0f02796dc91599178942c2d32d],
    PUP.Optional.TidyNetwork.A, C:\Users\Owner\AppData\Local\TidyNetwork\TidyNetwork.exe, Quarantined, [837f5d6d0f6c42f4da28751d778a2fd1],
    PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313037333930383339332d554a374134342d2a326c5b5a, Quarantined, [6a98b5152b50a69002e47b6af70b817f],
    PUP.Optional.Goobzo, C:\Windows\System32\Tasks\SMW_UpdateTask_Time_313037333930383339332d554a374134342d2a326c5b5a, Quarantined, [a0620bbf9cdf3df9a103c81efb079d63],
    PUP.Optional.Goobzo, C:\ProgramData\SearchModule\smhe.js, Quarantined, [6f9320aa205b76c0347142a408faac54],
    PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\ASP, Quarantined, [d032eae0423949ed3efb51987b879d63],
    PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperProJSUpd, Quarantined, [c9396a607ffc72c479feb73306fc5ca4],
    PUP.Optional.Groovorio.A, C:\Windows\Tasks\Groovorio Updater.job, Quarantined, [40c2ebdfdaa173c3a8d908e5b250758b],
    PUP.Optional.SoftwareUpdater.A, C:\Users\Owner\AppData\Local\SwvUpdater\Updater.xml, Quarantined, [e51d1ab0de9df93d403abe30c83a32ce],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-1, Quarantined, [3dc5309ac7b4c76fae1c826cc141738d],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-2, Quarantined, [16ec03c7a9d206305f6b07e703fff808],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-4, Quarantined, [26dc00ca9ae10f27e7e3fcf2f210ec14],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-5, Quarantined, [1ce617b362198aacc60437b79d65bc44],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-5_user, Quarantined, [25dd20aaf3881224fbcff8f69c666898],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-6, Quarantined, [cc365e6c9cdf5bdbbe0cc529e81a669a],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-7, Quarantined, [cf33c00aaecdd75f8149c826966cd22e],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-1, Quarantined, [ae54ffcb97e44bebeae0d717847e44bc],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-11, Quarantined, [837fccfe1962a98d1ab0638b5ca6c53b],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-7, Quarantined, [14ee61691b60ce68e3e7519d40c207f9],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\db415e59-ab65-4eba-9477-a21fec3645a4-11, Quarantined, [4fb3fbcf4d2e59ddedddd717ff03c33d],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\db415e59-ab65-4eba-9477-a21fec3645a4-3, Quarantined, [e31f9634b1ca26103991f0fe41c16898],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome\install.log, Quarantined, [d62c8b3fa1da60d6328fa26c49bafd03],
    PUP.Optional.ShopAtHome.A, C:\Users\Owner\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\install.log, Quarantined, [d62c8b3fa1da60d6328fa26c49bafd03],
    PUP.Optional.TidyNetwork.A, C:\Users\Owner\AppData\Local\TidyNetwork\sidTRUS26.tidy, Quarantined, [719113b7512af046253d34060cf8d32d],
    PUP.Optional.TidyNetwork.A, C:\Users\Owner\AppData\Local\TidyNetwork\log.log, Quarantined, [719113b7512af046253d34060cf8d32d],
    PUP.Optional.TidyNetwork.A, C:\Users\Owner\AppData\Local\TidyNetwork\petnupdate.exe, Quarantined, [719113b7512af046253d34060cf8d32d],
    PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{9a9157bb-003e-4fef-8bd1-c09bc4586a28}w64.sys, Quarantined, [8979d0fae695e452f287173556ae9d63],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-2.job, Quarantined, [5da5ad1de794a78f421817364aba47b9],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-4.job, Quarantined, [39c9aa20c0bb2c0a2f2b5fee2dd710f0],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\167e5f24-7829-48e6-a625-b268a1a22be0-7.job, Quarantined, [986a96347605fb3b1842ed6014f0e21e],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\76a23cba-cc11-427a-84ce-b0166951d110-10.job, Quarantined, [877b6169b5c61f17f763f459ab59bd43],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\76a23cba-cc11-427a-84ce-b0166951d110-11.job, Quarantined, [51b1963468134beb65f5fd50c044ba46],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-1.job, Quarantined, [b052c901c5b61a1cc595e06d93719b65],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-11.job, Quarantined, [976b10bad1aad16596c4ae9f24e08080],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-6.job, Quarantined, [b15162683a411a1ce575b29b12f2d62a],
    PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, Quarantined, [06fc5773a8d33402aec2410cb054fe02],
    PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, Quarantined, [07fbcefc9fdc57df6c064c01bb49fe02],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bifdbibngieombdobbohdcehhdakpkfp_0.localstorage, Quarantined, [6b97f2d88eed7bbb8d548ec1a85c19e7],
     
  6. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is the 3. section
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bifdbibngieombdobbohdcehhdakpkfp_0.localstorage, Quarantined, [6b97f2d88eed7bbb8d548ec1a85c19e7],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\1.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\10.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\1707.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\2229.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\450.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\83.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\a.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\b.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\c.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\d.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\e.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\f.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\g.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\h.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\i.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\j.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\k.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\l.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\m.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\mru.xml, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\n.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\o.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\p.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\q.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\r.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\s.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\t.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\u.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\v.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\w.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\wlu.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\x.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\y.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Guest\AppData\LocalLow\PriceGong\Data\z.txt, Quarantined, [f909dbef9ddec4722c73bc05f60ce41c],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\4464.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\h.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\1.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\10.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\1009.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\11991.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\1566.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\1707.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\17781.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\17875.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\17910.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\18228.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\18860.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\2229.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\2443.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\2501.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\2967.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\3620.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\371.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\3911.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\407.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\413.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\4240.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\4379.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\i.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\j.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\k.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\l.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\m.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\n.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\o.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\p.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\q.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\r.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\s.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\t.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\u.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\v.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\w.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\wlu.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\x.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\y.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\z.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\4489.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\450.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\5260.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\6092.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\6110.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\6781.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\7030.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\7031.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\7462.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\7494.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\83.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\8871.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\8930.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\94.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\947.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\9480.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\970.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\9832.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\a.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\b.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\c.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\d.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\e.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\f.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
    PUP.Optional.PriceGong.A, C:\Users\Owner\AppData\LocalLow\PriceGong\Data\g.txt, Quarantined, [8d7555753c3f2e08d4cb06bbb84a936d],
     
  7. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is section 4.
    PUP.Optional.Datamngr.A, C:\Users\Guest\AppData\LocalLow\DataMngr\{7CA1F051-A4FB-4143-B263-02B41E571EED}, Quarantined, [11f10ebc176478be5035b2124eb404fc],
    PUP.Optional.FunWebProducts.A, C:\Users\Guest\AppData\LocalLow\FunWebProducts\Shared\Cache\SmileyCentralBtn.html, Quarantined, [33cf67631c5f01358fbde2eace349e62],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\AppData\LocalLow\FunWebProducts\Installr\Cache\0E74BB10.exe, Quarantined, [ba4826a41c5f1d191339527af80a1ce4],
    PUP.Optional.FunWebProducts.A, C:\Users\Owner\AppData\LocalLow\FunWebProducts\Installr\Cache\files.ini, Quarantined, [ba4826a41c5f1d191339527af80a1ce4],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\00059137, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D181, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D1FE.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D25B.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D2A9.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D316.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D42F.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D50A.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D586.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D5E4.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D632.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005D690.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\0005E6B6.jhtml, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\00060DF4, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\00062184.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\00E09FBC.bmp, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Cache\files.ini, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\History\search3, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings\prevcfg2.htm, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings\setting3.htm, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings\setting3.htm.bak, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings\s_w1.dat, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings\s_w1.dat.bak, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings\s_w2.dat, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\bar\Settings\s_w2.dat.bak, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\MapsGalaxy_39\Cache\PopupProperties202980343.html, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\MapsGalaxy_39\Cache\PopupProperties202980364.html, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\MapsGalaxy_39\Cache\PopupProperties202980406.html, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\MapsGalaxy_39\MapsGalaxy_39\Cache\Radio.html, Quarantined, [50b2e4e6ef8c3bfb8c74517e0cf657a9],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\00059137, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005CED2, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005CF40.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005CFAD.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D0D5.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D1CF.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D21D.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D316.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D410.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D548.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D642.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005D69F.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\0005E31D.jhtml, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\00060A3C, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\00061DEB.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\00E0A1ED.bmp, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Cache\files.ini, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\History\search3, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings\prevcfg2.htm, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings\setting3.htm, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings\setting3.htm.bak, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings\s_w1.dat, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings\s_w1.dat.bak, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings\s_w2.dat, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\bar\Settings\s_w2.dat.bak, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\WeatherBlink\Cache\PopupProperties100016377.html, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\WeatherBlink\Cache\PopupProperties100016381.html, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\WeatherBlink\Cache\PopupProperties100065008.html, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\WeatherBlink\Cache\PopupProperties200821773.html, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\WeatherBlink\WeatherBlink\Cache\Radio.html, Quarantined, [d82ad6f456257eb8c061389717ebcc34],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\00059137, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D01A, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D097.bmp, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D0F4.bmp, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D152.bmp, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D1A0.bmp, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D21D.bmp, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D27A.bmp, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\0005D2E8.BMP, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Cache\files.ini, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\History\search3, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\bar\Settings\prevcfg2.htm, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\GamingWonderland\Cache\PopupProperties204300035.html, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.MindSpark.A, C:\Users\Guest\AppData\LocalLow\GamingWonderland\GamingWonderland\Cache\Radio.html, Quarantined, [b84a33973546e94d82d5913ec9396f91],
    PUP.Optional.SearchQu.A, C:\Users\Guest\AppData\LocalLow\searchqutoolbar\dtx.ini, Quarantined, [b34f4f7b463561d5d13ca82838ca1ee2],
    PUP.Optional.SearchQu.A, C:\Users\Guest\AppData\LocalLow\searchqutoolbar\guid.dat, Quarantined, [b34f4f7b463561d5d13ca82838ca1ee2],
    PUP.Optional.SearchQu.A, C:\Users\Guest\AppData\LocalLow\searchqutoolbar\log.txt, Quarantined, [b34f4f7b463561d5d13ca82838ca1ee2],
    PUP.Optional.SearchQu.A, C:\Users\Guest\AppData\LocalLow\searchqutoolbar\preferences.dat, Quarantined, [b34f4f7b463561d5d13ca82838ca1ee2],
    PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, Quarantined, [dc26f8d2017a152128bc4c87639fc040],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p24668.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p11024.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p11876.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p12200.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p13576.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p2000.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p2796.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p32340.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p4088.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p8400.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p8764.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p8932.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Users\Owner\AppData\LocalLow\Clip-High_D_06\DTFProxyToServerSect_bCrossriderApp0061872_p9912.dat, Quarantined, [2fd31dadb6c50a2c042b9a3a53afa55b],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\background.html, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Clip-High_D_06-nova.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\1293297481.mxaddon, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\733e4dc1-7e70-4f46-98dc-bd5989e6e212.crx, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\76a23cba-cc11-427a-84ce-b0166951d110.crx, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\76a23cba-cc11-427a-84ce-b0166951d110.xpi, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Clip-High_D_06.ico, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Interop.IWshRuntimeLibrary.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Newtonsoft.Json.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\SuperSocket.ClientEngine.Common.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\SuperSocket.ClientEngine.Core.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\SuperSocket.ClientEngine.Protocol.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Uninstall.exe, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\WebSocket4Net.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\bgNova.html, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Clip-High_D_06-bg.exe, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Clip-High_D_06-buttonutil.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Clip-High_D_06-buttonutil.exe, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Clip-High_D_06-buttonutil64.dll, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.ClipHD.A, C:\Program Files (x86)\Clip-High_D_06\Clip-High_D_06-buttonutil64.exe, Quarantined, [2dd508c2a7d459ddd85941935ba718e8],
    PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\log\ProtectWindowsManager_2014-07-25[11-49-57-052].log, Quarantined, [956d2e9ce695a09653043f971ce6847c],
    PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, Quarantined, [956d2e9ce695a09653043f971ce6847c],
    PUP.Optional.SystemSpeedup, C:\Users\Owner\AppData\Roaming\Systweak\ssd\SSDPTstub.exe, Quarantined, [3bc7d0fa403b132328d1c11525dd926e],
     
  8. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is section 5.
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\Cinema-Plus-1.2-nova.dll, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\1293297481.mxaddon, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\3d0224e0-0c25-4e2d-b699-333462a8e439.crx, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\background.html, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\bec10963-09fe-4f00-8676-d4aa5acf4b0f.crx, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\bgNova.html, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\Cinema-Plus-1.2-bho.dll, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\Interop.IWshRuntimeLibrary.dll, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\Newtonsoft.Json.dll, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\SuperSocket.ClientEngine.Common.dll, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\SuperSocket.ClientEngine.Core.dll, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\SuperSocket.ClientEngine.Protocol.dll, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\Uninstall.exe, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\WebSocket4Net.dll, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\Cinema-Plus-1.2.ico, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\d177e3ca-0352-41a9-9c3e-7a78ecd4e696-11.exe, Delete-on-Reboot, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\d177e3ca-0352-41a9-9c3e-7a78ecd4e696.crx, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.CinemaPlus.A, C:\Program Files (x86)\Cinema-Plus-1.2\d177e3ca-0352-41a9-9c3e-7a78ecd4e696.xpi, Quarantined, [17eba02aa4d7a5918565b621b44e60a0],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, Quarantined, [f70b9b2f8fec979ff837f2e65ca6dc24],
    PUP.Optional.Groovorio.A, C:\Users\Owner\AppData\Roaming\GroovorioUpdater\UpdateProc\config.dat, Quarantined, [4bb7af1b82f97bbb51712faa689a956b],
    PUP.Optional.Groovorio.A, C:\Users\Owner\AppData\Roaming\GroovorioUpdater\UpdateProc\info.dat, Quarantined, [4bb7af1b82f97bbb51712faa689a956b],
    PUP.Optional.Groovorio.A, C:\Users\Owner\AppData\Roaming\GroovorioUpdater\UpdateProc\STTL.DAT, Quarantined, [4bb7af1b82f97bbb51712faa689a956b],
    PUP.Optional.Groovorio.A, C:\Users\Owner\AppData\Roaming\GroovorioUpdater\UpdateProc\TTL.DAT, Quarantined, [4bb7af1b82f97bbb51712faa689a956b],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\AddonSafelist, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\completedatabase.db, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Cookies.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\DigSign.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FilePathFIX.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FilePaths.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\FileSignature.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Folders.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Md5.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\Registry.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\SetupSign.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\signatures\StrSetupSign.bin, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\100oupdate.zip, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1835completedatabase.zip, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1884mupdate.zip, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1891mupdate.zip, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1892update.zip, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1893update.zip, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced-System-Protector\updates\1894update.zip, Quarantined, [6d9547834a310432b7e9a537de247f81],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\ASPStartupManagerErrorLog.txt, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\QDetail.db, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\Settings.db, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\Update.ini, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\2.1.1000.13665\ASPLog.txt, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\Logs\log_19-07-14_02-29-20.xml, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.AdvancedSystemProtector.A, C:\Users\Owner\AppData\Roaming\Systweak\Advanced-System-Protector\Logs\SMLog.xml, Quarantined, [ac56e8e2106b1b1b6f316676fc067789],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\000116.ldb, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\000130.ldb, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\000146.log, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\CURRENT, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\LOCK, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\LOG, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\LOG.old, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bifdbibngieombdobbohdcehhdakpkfp\MANIFEST-000144, Quarantined, [847e309a394276c01b0ee8f72fd309f7],
    PUP.Optional.CrossRider.A, C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_bifdbibngieombdobbohdcehhdakpkfp_0\12, Quarantined, [09f93e8ce794ff371614a936a062f20e],
    PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, Quarantined, [5da5c00a85f665d15323a93a7a8860a0],
    PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, Quarantined, [5da5c00a85f665d15323a93a7a8860a0],
    PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\spbihe.js, Quarantined, [9171edddcead7cbade2407de52b035cb],
     
  9. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is section 6.
    PUP.Optional.MySearchDial.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "aandpgohbohmlknpjbblpmoladhoochg ":{ "blacklist ":true}, "abciiempgohamehppammbkhkicmkgkob ":{ "blacklist ":true}, "acmpfcamncegnhjdeiodgilikjafcamg ":{ "blacklist ":true}, "aebfkgcamgnimcbnbiopgdakknjgggnm ":{ "blacklist ":true}, "aemcjbfajnnmhblifaejadoecfoaebld ":{ "blacklist ":true}, "afenhmponmfmdmbmccbmglppcmjhmhmh ":{ "blacklist ":true}, "aglmapjbjphdidmnileogpjkgpdoliep ":{ "blacklist ":true}, "agmhonoepgcnakccfpidhjehlocaeaaj ":{ "blacklist ":true}, "ahfgeienlihckogmohjhadlkjgocpleb ":{ "active_permissions ":{ "api ":[ "appNotifications ", "management ", "webstorePrivate"]}, "app_launcher_ordinal ": "n ", "page_ordinal ": "n "}, "ahjfgnikolodijnpakeknpilnemojlhc ":{ "blacklist ":true}, "aieglpnmmhleoenpbmfaffppfomgjmba ":{ "blacklist ":true}, "aifmjmboebdkdelpjenakhaodgneempp ":{ "blacklist ":true}, "alcbnnpmipohgdllkkglhkbncijplago ":{ "blacklist ":true}, "aldalonecchncedclgcndcndgilaclnk ":{ "blacklist ":true}, "aljdncnajablgppdcfbehhmidlmbndda ":{ "blacklist ":true}, "amfgdngndpfldigimkcindjalokfnmem ":{ "blacklist ":true}, "apdmgffkfhjfeejmbjidennfjdkmmmbl ":{ "blacklist ":true}, "aphncaagnlabkeipnbbicmcahnamibgb ":{ "blacklist ":true}, "bcddmcejgphfgofbpoocakaeapfomlek ":{ "blacklist ":true}, "benclngoadbppljglhphhnfknoppmjoa ":{ "blacklist ":true}, "bhdkpmneahdelgdgfhddianklldfoell ":{ "blacklist ":true}, "bilgncckogfgfipdlejkffnbkgjkmflh ":{ "blacklist ":true}, "bjihddggcgnblgojnmhpnngonofbnkaj ":{ "blacklist ":true}, "bkhafliomebnpccanacmlfaemgfiofko ":{ "blacklist ":true}, "bkkchglolnigbfncnbnnbhhempjkdpkf ":{ "blacklist ":true}, "bkplhcigeaiiliajeehehiikokgocbhb ":{ "blacklist ":true}, "bldgnkigdcpgnbfehgbameigoohecdfl ":{ "blacklist ":true}, "bndahdijlcnncjbpammoedeapmlobllc ":{ "blacklist ":true}, "boaoagnmpennjoigkkmnjhecapibhfko ":{ "blacklist ":true}, "boclfockfmgcppbajihcgajhpggaakgl ":{ "blacklist ":true}, "bokkificjhapflinbdejegngffgkcgfe ":{ "blacklist ":true}, "caphkimknlmnhpjoneddiaakmcaajagb ":{ "blacklist ":true}, "cbbbpmlnlpnjojeplppgeilanlihoojg ":{ "blacklist ":true}, "cbbjhegipokkofhhicbckicchjpcpeni ":{ "blacklist ":true}, "cekdjgnecpoooikhmceokdhojckkkhmh ":{ "blacklist ":true}, "cepfogmgfkddnllaopgknbdfkceejmhk ":{ "blacklist ":true}, "cfbdodejdeejbkffcmiaknpmojjeibpn ":{ "blacklist ":true}, "cgnkbnaiipmfbakpmhllalggoepniemh ":{ "blacklist ":true}, "cihlkpohodpdkdnfalhdkhhlhmhffmbe ":{ "blacklist ":true}, "cjhklhdjonhcohlacgggcbklpnldleck ":{ "blacklist ":true}, "cjohbbapkbkkhpohinffggbphnhoblea ":{ "blacklist ":true}, "ckckpgefkpjfopjppjfcikppehdhceah ":{ "blacklist ":true}, "clapnamcglekekmamicmbahkghdcjaeh ":{ "blacklist ":true}, "cmjphjljejnfgdbkdgdlclaabimpknna ":{ "blacklist ":true}, "cmlokmkdolieoaoddlfhaidnlmiadhik ":{ "blacklist ":true}, "coajchbkdbfhmhbgcjepiofllfjjcpfp ":{ "blacklist ":true}, "cpiiakoibaohkfoaijaigdnocfolnmll ":{ "blacklist ":true}, "dadcalgappognjbjpalfophhcfakoeac ":{ "blacklist ":true}, "danapgfidmepmcfbjjacceiaiiioieio ":{ "blacklist ":true}, "dbiblcmlcgdjjbdpbmbcpineegngkiip ":{ "blacklist ":true}, "dbmdicehacbaohlockjgdglcobimmjkh ":{ "blacklist ":true}, "dejippphmhbpgckbhdidnjmdcpfccbaj ":{ "blacklist ":true}, "dfafokiagoiocidlpglcanjkcdbdnioi ":{ "blacklist ":true}, "dfoegfajplmijblljfancdapbdaopebb ":{ "blacklist ":true}, "dgaehaeahdegbdlenicbmkbakhdgoeml ":{ "blacklist ":true}, "dgcfmgdfbfbgcpbendbhbkfjppboebed ":{ "blacklist ":true}, "dgkemngdheppgohkjjelnkjmdeimmfml ":{ "blacklist ":true}, "diinokaoicgobepmadnmedlhdfnpehcj ":{ "blacklist ":true}, "dinhjcapnfbffhiihdlnbdfjdjjfhcbk ":{ "blacklist ":true}, "djnahdkbfgnhgpakidinfonfcjbagkgp ":{ "blacklist ":true}, "dlobhinihbmedmheccecfnkcadpehmbf ":{ "blacklist ":true}, "dmhjdbigobajgnfoabodjgmcdgoeoljm ":{ "blacklist ":true}, "dmkdhgkknhnfpdjeicefnpmhcpbimden ":{ "blacklist ":true}, "dnemhlkdpajbbniphgkgceplmnkfnhfo ":{ "blacklist ":true}, "doneghboglgnflpdicnkaojmmljgejkj ":{ "blacklist ":true}, "dpgenihgggagjjggfocjceeobjkadcbc ":{ "blacklist ":true}, "dpmloehicimdjkibmobhmpgdndgbcced ":{ "blacklist ":true}, "ebdcdchjcndpjhehacedepnggfdbfkpn ":{ "blacklist ":true}, "echngajnlpjeacbanjejlhcajjfoedcc ":{ "blacklist ":true}, "edmnikahahfkfilbbjbdoiabnghbkmjc ":{ "blacklist ":true}, "efhjelcghjkfigiagdfbfilndaffpmdj ":{ "blacklist ":true}, "efnaljpgehfilpmkhobibbjceeeondmn ":{ "blacklist ":true}, "egljdhfnbjahogjahnigfnbpidlmdagi ":{ "blacklist ":true}, "ehgoiaffgjoinpkllmmnikghgpghnabc ":{ "blacklist ":true}, "ehomcoocpagnlcakcbecdaknmacmedld ":{ "blacklist ":true}, "eihjeehdobnpkonebmpanonopghepfle ":{ "blacklist ":true}, "ejijgghlncnaphklndknkbkclebfboca ":{ "blacklist ":true}, "ejlekamipdcfcfpgfepjmklllbpeecaj ":{ "blacklist ":true}, "elcaigjcaijbfpjngaekbblphmfjdhfo ":{ "blacklist ":true}, "eofejpelggimkodeojpeojnbijgiglgh ":{ "blacklist ":true}, "eopmhecjnginkckggjmhombbopmkjpam ":{ "blacklist ":true}, "epbmnbdplhcomkedpjfceakddnbgfjmf ":{ "blacklist ":true}, "fafoohpbicgbcejffcplajonhhooddle ":{ "blacklist ":true}, "fbhiehmngojjcmljddjmgpmcockbccmo ":{ "blacklist ":true}, "fcfepemfihgibdacjlnlecebknaaepmj ":{ "blacklist ":true}, "ffgfbfakpcnngelphjnppokmoicdollk ":{ "blacklist ":true}, "fhlkffpjoajppmhcakbkjndbjfljccpi ":{ "blacklist ":true}, "fiapkdjniadkodmdibdnchoifkpfoiid ":{ "blacklist ":true}, "fibgploapkhokkbncddlkcmbmiengcfp ":{ "blacklist ":true}, "fihepkmlkmciffbhijldnpmifhbkiinp ":{ "blacklist ":true}, "fjjeecfjmgfnleghoellhldedkaocjfc ":{ "blacklist ":true}, "fleljamdchegbjeiipbnmiebnhgheeld ":{ "blacklist ":true}, "flmmgcfcpbfddenepkfmgfpbaceolcoe ":{ "blacklist ":true}, "fmcccidacjgnfiafddkngmeolkoiihil ":{ "blacklist ":true}, "fmonlemffgbabjifjfaoamdflijecdbk ":{ "blacklist ":true}, "fngolbdmkneakeaoiieafkilnogbocda ":{ "blacklist ":true}, "fnhcgnmfccojojojacgeiaaeacefdohb ":{ "blacklist ":true}, "fnkaadkanmfgpfbmdcllhjdgmdbgljpi ":{ "blacklist ":true}, "fnnmbghphdnmmjdapccfobgjemjadeli ":{ "blacklist ":true}, "fnoadkjdjfgafomgmablhmffooijcfbn ":{ "blacklist ":true}, "fpbippbofbmgmbojjmgfcifpmdaelcmd ":{ "blacklist ":true}, "fpmajanjndhgpifbcbnklbiehgnpkgmf ":{ "blacklist ":true}, "fpoajjnnpmledpmohlgpgbmlhbgkgahg ":{ "blacklist ":true}, "gaicmfjflflabagobdiodejfpjikheeo ":{ "blacklist ":true}, "gandihaiobadcggbfkhpbkocmiemjlnf ":{ "blacklist ":true}, "gbenikfjhilhpgagllmfgggdjaflbmbi ":{ "blacklist ":true}, "gdggdkkjecogagaffaemnbfmllcoihjp ":{ "blacklist ":true}, "gekkhpjigmckhgmgngadbeknekgpgolb ":{ "blacklist ":true}, "ghgphbmpcfgkfneodjpbdanmdoemklio ":{ "blacklist ":true}, "ghmaokcegalalefnhlfcnjhnpdbanjkj ":{ "blacklist ":true}, "gifglngcdbggmlgkcombebegdaoknkho ":{ "blacklist ":true}, "gjkbghdignnlcknknflbigpammebiolo ":{ "blacklist ":true}, "gkjeccpmibljcfpfapfljciimedljpnm ":{ "blacklist ":true}, "gkjmgdpdndoaiholejnmdbbpdaafahmm ":{ "blacklist ":true}, "gmghjgfdialcnhadahmjefeflgnhcjeb ":{ "blacklist ":true}, "gnapdhmknipknfmhhnhdmhakdfhgeing ":{ "blacklist ":true}, "gncfgndgeoddelbfhlndhljnecoednaa ":{ "blacklist ":true}, "gngmkbiihflpghldjnbpemaicedhdddk ":{ "blacklist ":true}, "gobjcjhhebpjbmjdgmejhebbleadnceo ":{ "blacklist ":true}, "gplgjmecjpbfcdikpbicknafcnfcidek ":{ "blacklist ":true}, "hbaajkahagmlkdekmbdabikbopdgpaac ":{ "blacklist ":true}, "hbdhabpmbbanaopgkbaondabkkepjfaf ":{ "blacklist ":true}, "hbmlheccjkodhfejcmblndjodllmnlnl ":{ "blacklist ":true}, "hcapokajkngndbglnfglpfdpoeidmpha ":{ "blacklist ":true}, "hcpndbchnlgojmnijaldkicigmihmdca ":{ "blacklist ":true}, "hdijkiondgomjpehfhopomicjbiodmcm ":{ "blacklist ":true}, "hdnbmmfjbblajkjkcaeofolgfnljpnim ":{ "blacklist ":true}, "hecijapnccjhonbmacmkmffooodfokoo ":{ "blacklist ":true}, "hefmoncdemhjembgbnkgglhlookbipdc ":{ "blacklist ":true}, "hfpfbhnmbbigpmoodjemilggabklpopj ":{ "blacklist ":true}, "hgbaomphocgmdpmiohjclchaaljpaelp ":{ "blacklist ":true}, "hgboiaecclcbjphldpbgfgggcbihmnai ":{ "blacklist ":true}, "hgjgaeknhmidehalnmokomhpfhbfmpcm ":{ "blacklist ":true}, "hhfffemhgkginfafaoapljdllodppana ":{ "blacklist ":true}, "hhfiljkpjapjjphcocclhhaldpfkkjbi ":{ "blacklist ":true}, "hhjmkijkgojfifipdgmiemghfikbohcm ":{ "blacklist ":true}, "hhlgbfcfbkhlmajakkcjippgpcmejkko ":{ "blacklist ":true}, "hilncbjbdpnfepdidfchmdclhpnlegpj ":{ "blacklist ":true}, "hjkhligcnpfjhjlapmejaiaiigibofif ":{ "blacklist ":true}, "hkbgccpdcpbdckohbknjlamamelcnlki ":{ "blacklist ":true}, "hkjcejgfmaanpncnpoidgbhoikcaeepd ":{ "blacklist ":true}, "hkjfdgjkgpbbdmadbglcgljjjddkcdha ":{ "blacklist ":true}, "hmmoglffhpmacaacfbbmbbkcbdkjphnc ":{ "blacklist ":true}, "hnbcdmfeoldeppcbnnjmjkdofohaljbn ":{ "blacklist ":true}, "hncomkjbbkchfjelocejkbbflmjhlhfp ":{ "blacklist ":true}, "hnipgljcblpgnnojcfldehpeknhakbgj ":{ "blacklist ":true}, "hnkcpoijaeegompjgbjjhkdmljldaccg ":{ "blacklist ":true}, "hnnebfeppcbhhbhiifeaajgcjnkljlld ":{ "blacklist ":true}, "hnonhhpgjnjcjfbkjdpfbkfpaodcmncb ":{ "blacklist ":true}, "hpcdoodjfcmpcpkeendjnjkeinimhkih ":{ "blacklist ":true}, "hpibmhghjndideebpackbdlpncgkcppp ":{ "blacklist ":true}, "iablioliielnhdianpbiijaoncbmfend ":{ "blacklist ":true}, "iccblehkchfmjgfafjcpjlkjcponhdhl ":{ "blacklist ":true}, "icihfeaofpcfehanhbnjigdlpfahjlee ":{ "blacklist ":true}, "iemfpgbdjfoihicbocpbjppipdbfimeh ":{ "blacklist ":true}, "ifbkndkaolfbjjhnnhfmkbkoclpdkpli ":{ "blacklist ":true}, "ifeijfpkjckedpclgncedmgdiaoeahmk ":{ "blacklist ":true}, "igaajdmlejbjcbmpmnigopikfdaccdcm ":{ "blacklist ":true}, "igbaoknfddliiaoimhehfbkfekpmmfll ":{ "blacklist ":true}, "igghanohiioehififjoalfkdoicafjof ":{ "blacklist ":true}, "ihnembcpodnfgkafmiojebccomjekopm ":{ "blacklist ":true}, "iiiinekimabooeihccihfopoadcaaphn ":{ "blacklist ":true}, "ijecjbcgpblkacpijljpaienknanaloa ":{ "blacklist ":true}, "ijenlpgidnapbndonoinbkhekgjonojg ":{ "blacklist ":true}, "ilhjicgcglhjigdehkcehjdokmkahbjl ":{ "blacklist ":true}, "imfbomjbodpfgfhfahlgkkcllmhbelhk ":{ "blacklist ":true}, "imkffpjpdngdkpgadcmnlkhhmhdocijn ":{ "blacklist ":true}, "iobnpmeeecphddicmhhmdjbnlbdhjlne ":{ "blacklist ":true}, "iomejadoamfilglofmeaffghddcgapmf ":{ "blacklist ":true}, "jaejgaoiipdjjlbnapngknalafalbkej ":{ "blacklist ":true}, "janhdpmhnighonkkbkdpnljcoenpfkbh ":{ "blacklist ":true}, "jbmbiepnidbnhbbfdbgioomdkgnbcacj ":{ "blacklist ":true}, "jbnafcjbcfgejacaanogofkkehcomamp ":{ "blacklist ":true}, "jcmipejepoimfflnoapdmkdephgjinck ":{ "blacklist ":true}, "jfalnphfjdoalcdhlnhdpekbmmopkgkj ":{ "blacklist ":true}, "jfjagidcpadkoaonbogmbgfimmnefeie ":{ "blacklist ":true}, "jgdkappiifgomhgikcjbanhnmlekpeje ":{ "blacklist ":true}, "jgmpapdckakiohhebmeoemejibommimi ":{ "blacklist ":true}, "jhhabiomopkibeecgngiggmopkeofacl ":{ "blacklist ":true}, "jindbcpkhnnnjgcjgmkjedbibibiojjf ":{ "blacklist ":true}, "jjnkfllhcgkgnfbekpnmoikpfihpjfli ":{ "blacklist ":true}, "jkihmglffmfjedfbpbpdbbimcodjbmdh ":{ "blacklist ":true}, "jkmhalpofmlfeglboejbchpoijnkmcgh ":{ "blacklist ":true}, "jmbkhogpjgjpfjhpdikloblkbkljkgao ":{ "blacklist ":true}, "jmeanodbelbflfmnkfdjgpikmldgjjko ":{ "blacklist ":true}, "jmifipgdcllamghkhdplfjffkciekbgo ":{ "blacklist ":true}, "jpehgolpfgnknboibogccapmdcadjkbd ":{ "blacklist ":true}, "jpeijjbllejgmokmahkeommcodahoobm ":{ "blacklist ":true}, "jpgfhihjicjofdejkbjgnjlaglaciobe ":{ "ack_external ":true, "active_permissions ":{ "api ":[ "plugin ", "tabs"], "scriptable_host ":[ "http://*/* ", "https://*/*"]}, "events ":[ "runtime.onInstalled"], "from_bookmark ":false, "from_webstore ":false, "install_time ": "12989031277843535 ", "lastpingday ": "12989746792029473 ", "location ":3, "manifest ":{ "background_page ": "background.html ", "content_scripts ":[{ "all_frames ":true, "js ":[ "websiteLogon.js ", "websiteLogonOTP.js ", "OTPList.js"], "matches ":[ "http://*/* ", "https://*/*"], "run_at ": "document_end "}], "description ": "TrueSuite Website Logon Extension. ", "id ": "C7254B0615674141AAA78F0B01CC1CE5 ", "key ": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwjKejyUbqOW+APaTdQVmhuDtsfj+lqupnhmLUCkJVwkhNBHLfkz5+WNO/zmoPbc8O0TRvT5HuF9YvvvnwcT4QXkI2E59lbyNuLPtHCWqCLuAD9Gt6MOsVOZhKGNBHy0PtkSnkVlPJeGYdRZlK9kgf26xcXBas6YLK6KoJ/DRbaQIDAQAB ", "name ": "Website Logon ", "permissions ":[ "tabs"], "plugins ":[{ "path ": "npwebsitelogon.dll ", "public ":true}], "version ": "1.0 "}, "path ": "jpgfhihjicjofdejkbjgnjlaglaciobe\\1.0_0 ", "state ":1}, "jpgidahfcgiajlcbleeiaibpmmblcmnb ":{ "blacklist ":true}, "jpkdlckejfjidmplieobnhijmoiecbhl ":{ "blacklist ":true}, "kbipembkfhbdmkkkfbigmohilmknjnof ":{ "blacklist ":true}, "kcanfkmhccbaheheaackijegkclkaeic ":{ "blacklist ":true}, "kcfnnanmpghdnoompcfclakpacapnfbn ":{ "blacklist ":true}, "kcgplbmkmfcpngilmhjmebdgkkpbdemp ":{ "blacklist ":true}, "kdchmeaiapjkejkcbeclgjklemecieeg ":{ "blacklist ":true}, "kelcbonmemlciepjdmfcifnhloeammhj ":{ "blacklist ":true}, "kelljdoinjlkmkncffgadbebgpmlcang ":{ "blacklist ":true}, "kffhenjbibjnbnjhlkcdlmpeccpaohio ":{ "blacklist ":true}, "kgbkdabomfdpfoibliicpmibceaoohgh ":{ "blacklist ":true}, "kgdhnhadbnpeibkghaebmhmngobdafag ":{ "blacklist ":true}, "kgdkcodealpfjolmiagcogfbgmaamegh ":{ "blacklist ":true}, "kgdmldjagfciieddcnlhampgkajkpanc ":{ "blacklist ":true}, "kibgmcdcfmcglajcfbecilngejnfppjp ":{ "blacklist ":true}, "kiipngoehgkgkackngaidmhmnchfbmio ":{ "blacklist ":true}, "kinhljbhjmcmoddhdoodekeklmjapjff ":{ "blacklist ":true}, "kkhomejdleoonmbdhcigkhkjcghngncf ":{ "blacklist ":true}, "kleaapgdkahaekcocmkbgfainbhihccj ":{ "blacklist ":true}, "kmlebjoghkhpapfhbdikannggmmffnco ":{ "blacklist ":true}, "kolbbghckjilleabphhgeggcgpfidofi ":{ "blacklist ":true}, "lambangeielkjcnmioccboaphdfcffib ":{ "blacklist ":true}, "lbaddolhebpnhdcdkicpcflhnfamcemn ":{ "blacklist ":true}, "lbficnmfealeidppcbgdcbemgfjodbkg ":{ "blacklist ":true}, "lceaiepehinnomgijphkmjccbigkljkj ":{ "blacklist ":true}, "lcfkojlnjnedeoepfemhdgkhiabkeadc ":{ "blacklist ":true}, "ldgfapfmnplpaohbbadnecegcpfkfall ":{ "blacklist ":true}, "lgalokbapphhklmilicdefmgbjkcmldf ":{ "blacklist ":true}, "lgcnahanhlfpceencjmlehpfklokhojk ":{ "blacklist ":true}, "lifbcibllhkdhoafpjfnlhfpfgnpldfl ":{ "ack_external ":true, "active_permissions ":{ "api ":[ "plugin ", "tabs"], "explicit_host ":[ "http://*/* ", "https://*/*"], "scriptable_host ":[ "file:///* ", "http://*/* ", "https://*/*"]}, "events ":[ "runtime.onInstalled"], "from_bookmark ":false, "from_webstore ":false, "install_time ": "12989031277970535 ", "lastpingday ": "12989746792029473 ", "location ":3, "manifest ":{ "background_page ": "background.html ", "browser_action ":{ "default_icon ": "skype.png ", "default_title ": "Options "}, "content_scripts ":[{ "all_frames ":true, "js ":[ "contentscript.js"], "matches ":[ "http://*/* ", "file://*/* ", "https://*/*"], "run_at ": "document_end "}], "description ": "Skype Click to Call ", "key ": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB ", "name ": "Skype Click to Call ", "permissions ":[ "tabs ", "http://*/* ", "https://*/*"], "plugins ":[{ "path ": "npSkypeChromePlugin.dll ", "public ":true}], "version ": "6.1.0.10441 "}, "path ": "lifbcibllhkdhoafpjfnlhfpfgnpldfl\\6.1.0.10441_0 ", "state ":1}, "likifpgnijjfbdegfepoalpamlgnfofi ":{ "blacklist ":true}, "liomofjeffddiiccaolcnllbhnipbkhe ":{ "blacklist ":true}, "ljcicfibknpmlcmcecddjlbgkejehhpa ":{ "blacklist ":true}, "ljeihpebkahejeacdalhkhmckmggppif ":{ "blacklist ":true}, "lkdimamelhbiijkiljlnedmhnnkkmlbl ":{ "blacklist ":true}, "lkfdchejjogilmloogbbjlnlpbhgjfab ":{ "blacklist ":true}, "lkhcbijhgfchgdmklonlobkfbcadbokg ":{ "blacklist ":true}, "lljnngafekbnkpdfophmcdlbfebcbcld ":{ "blacklist ":true}, "lnahlgmhpghkhmafjppdidhcoaomipfg ":{ "blacklist ":true}, "lnbeebaenahmkbffnimghceldeeihfak ":{ "blacklist ":true}, "lncjcfkpannmofmpgdfoonkniofdnaba ":{ "blacklist ":true}, "lndempehphjoeimfchjflohpmhamiamf ":{ "blacklist ":true}, "lnjgjionmhobdfdegbciceafphgemjnc ":{ "blacklist ":true}, "lnlaeblencbjjjeaanegaldcjfekeled ":{ "blacklist ":true}, "lojppnndedobolgfepahepphhloediji ":{ "blacklist ":true}, "loldehkdjdncebfnncknlkdchjclifbn ":{ "blacklist ":true}, "lookpbabilcplifjdeifacodednpacmk ":{ "blacklist ":true}, "lpgiafapdmlapiokjnmpbbfkomiceoml ":{ "blacklist ":true}, "lplmcpcnhpbffpcfiaddbeaplhhbengd ":{ "blacklist ":true}, "mamfageekafifnickhgkibkofcclfefe ":{ "blacklist ":true}, "mbmdaiddhfoljplpdhohimgieioblfif ":{ "blacklist ":true}, "mcknnlhkkdbcppajgefagceglahcafjd ":{ "blacklist ":true}, "mdiehnlecbjlppbpaaipmlnhhjgepfcg ":{ "blacklist ":true}, "mdngbiejioalifclonjepjjfppmbgned ":{ "blacklist ":true}, "megkcfpbmemnpkgadkoompnoajcolpni ":{ "blacklist ":true}, "mfffdpnblflpobcnekhekiahepofaane ":{ "blacklist ":true}, "mfhfkclojmdocagbmecgcnlofppebebd ":{ "blacklist ":true}, "mfncimdpmknolnnnccdmkpnpkaofonkc ":{ "blacklist ":true}, "mgdgiplcofghdmpekdeeceolepakodcb ":{ "blacklist ":true}, "mjalegijammcloleihdmooifidcjggjp ":{ "blacklist ":true}, "mjgobkikdipfikmaoakdcdbicpioljgg ":{ "blacklist ":true}, "mjolnadmlahbpepjaemohnkhpjkbhmef ":{ "blacklist ":true}, "mknjbohhleiicbpagpgmhoaigbblmnic ":{ "blacklist ":true}, "mkobblpffgbncfhijabakfafmkjdmmnm ":{ "blacklist ":true}, "mlmegahemifabfmdnndafagnncfbnahn ":{ "blacklist ":true}, "mlmmbepkgelpbenpobinockmiehdahai ":{ "blacklist ":true}, "mlnoedbhndgbjcbeadjfnmjloejlgojk ":{ "blacklist ":true}, "mmjodihhmnpkldljaifiajmlnpflfhpm ":{ "blacklist ":true}, "mndoohjdoechinpkfbkolflbonciahfo ":{ "blacklist ":true}, "mnhcgaghminpdabllkbkecahjfkdiabk ":{ "blacklist ":true}, "mnichagcickblneeijmfnmoiakigmmhf ":{ "blacklist ":true}, "mnllienogacopjnkmhgnniopjpgjpopp ":{ "blacklist ":true}, "mogepbcllienegdibkfpmombhefhcoic ":{ "blacklist ":true}, "mplhbhmkccidaokcelbcbcmhhedebcng ":{ "blacklist ":true}, "naopgnjebjeeedbbhcadkhkmeefmloho ":{ "blacklist ":true}, "nbieffehfdniifkgdckbndjhojohbfjj ":{ "blacklist ":true}, "nckmikohoilfkcoahbjpbgbpegcjgngm ":{ "blacklist ":true}, "ncpdanjmicnihdlijomcggnnekloephc ":{ "blacklist ":true}, "ndhkiimgbjnendpcfbiadlifmangejoa ":{ "blacklist ":true}, "ndiogongcmocdgjciemhagfhpjamehpe ":{ "blacklist ":true}, "negkalblfongjbphdcbbhddlickhlamd ":{ "blacklist ":true}, "nepfiodmbijheamafkiglonfkjebdjmf ":{ "blacklist ":true}, "nfecfkjnlkbphobjbcnphimihniieehc ":{ "blacklist ":true}, "nhboiakpmibkbkbeehchlfkggmhphpnk ":{ "blacklist ":true}, "nhkmojkfnknbbmhbnacjdlodokeophkl ":{ "blacklist ":true}, "nibohffepnilngkecenfdgnokfhmnkod ":{ "blacklist ":true}, "nidmbljkkcbdfklgdkklgjgmhejmbojn ":{ "blacklist ":true}, "nidodbfomffkfabciljelkbdiabkeehe ":{ "blacklist ":true}, "nifbebeekindefklojhchehidpikbjfc ":{ "blacklist ":true}, "nihhbeikpchdddoillfdcdinnnnllmna ":{ "blacklist ":true}, "nlgapikcofpablcmfgaoodlhiejiehhh ":{ "blacklist ":true}, "nmmnodocfckpoddcgihiihcdinaonckb ":{ "blacklist ":true}, "nmphbnbmgfccfhcmibikmhcgajjpelpf ":{ "blacklist ":true}, "nnioepmjbjjlflmdgjanlcmbjahljeeo ":{ "blacklist ":true}, "nochkknnbahbhmmknnmdhagelcnfagom ":{ "blacklist ":true}, "noefghcilkpcabnhhilojimkkjplhcnd ":{ "blacklist ":true}, "npadaghbcdejfngcjpbnoikajdnongca ":{ "blacklist ":true}, "npolaghondefgiomhkbiiompikfjneep ":{ "blacklist ":true}, "oakhllhnbcpgagdafgbninlpjdemdmjk ":{ "blacklist ":true}, "oanjogmonneelfpnfmdlalfddkeckdej ":{ "blacklist ":true}, "ocmhjnhildbnglmlfimkjnnfgddelacb ":{ "blacklist ":true}, "ocnlnkjmfnolmbclblfhfhcakldceiec ":{ "blacklist ":true}, "odnamglmogfldajnhkfodmloofeokcmm ":{ "blacklist ":true}, "oghphhcagopecifjblgdcfihjnlcbcfc ":{ "blacklist ":true}, "ogjbodghhojomghbdfnlkppdagkfjede ":{ "blacklist ":true}, "oidjdpbndkjhmhmgdoggibcjnippkcgo ":{ "blacklist ":true}, "ojglppmhgfohhfeinlhklglifnbfebak ":{ "blacklist ":true}, "omceiakkomngangmllpgbjcoeloglald ":{ "blacklist ":true}, "onfbaaifbbahonepmednhkjbhdgogkbl ":{ "blacklist ":true}, "onpnpccdagncipgnoofbhchlbajcjnkd ":{ "blacklist ":true}, "oocfbmollajebjjpkahmlnclfhkjijea ":{ "blacklist ":true}, "ookcgejbfhcmcanfkfmmmpahflnlajbl ":{ "blacklist ":true}, "opnnngnphijodjhemhdafpnnpdjggofe ":{ "blacklist ":true}, "pajgiddgjidlcajihkjoacjbplimkgfe ":{ "blacklist ":true}, "pbdgmppmccanplobanhfkjndjkmmabgk ":{ "blacklist ":true}, "pbekednmpdekknlffkiopooofokfmkla ":{ "blacklist ":true}, "pbglijbamgmlcpnnpbfjkbdeheejjloj ":{ "blacklist ":true}, "peiijdmlgbelnnmnkighhkpeihmmamio ":{ "blacklist ":true}, "pfcelnbmkeoaeicedjomcjkcammlkdbk ":{ "blacklist ":true}, "pfhlnanelpgjbhndafjamnpfhkjadoip ":{ "blacklist ":true}, "pfoiaildicnbcjojocjlpcibenphhbln ":{ "blacklist ":true}, "pfonklmafadkmcedjlodommcoipgbcde ":{ "blacklist ":true}, "pgelifedkjaohmjehecojkfldinjlamn ":{ "blacklist ":true}, "pgjpnfpidejcmjibaaohcmehfohacckf ":{ "blacklist ":true}, "pgldfhecfiofkhnbgcncepnkjkeoahlk ":{ "blacklist ":true}, "phkpgooenaonkpnabopdbjjfmphclela ":{ "blacklist ":true}, "pihcfdffalbcnmbghijdfcaanagapelf ":{ "blacklist ":true}, "pjdhkkcnlbfebiokpeghfffajaabahfo ":{ "blacklist ":true}, "pjgbfgdpkbfimabdalhjmmeeelbmkcac ":{ "blacklist ":true}, "pkbbbncikcipejaiiiioboongndhmjgl ":{ "blacklist ":true}, "pkbkkendemaimikinaefldfljliecapm ":{ "blacklist ":true}, "pkhidkonipdjidjglnkfcfhnkfnlefbk ":{ "blacklist ":true}, "plfijddblbcdcnammpdmfccchkbdekmm ":{ "blacklist ":true}, "pnaiiipilbpcceggeanphcpkkihnojan ":{ "blacklist ":true}, "pnnbdjcjeiobikdfikegpclkcimgafpp ":{ "blacklist ":true}, "pnpfkfanlgljpkpilhgiimfadggfmhcd ":{ "blacklist ":true}, "pnpgiaejfbdapllkchhgchjpdbcpiooa ":{ "blacklist ":true}, "pobponmhkpmphbnfhpjdagklbkmjhked ":{ "blacklist ":true}, "ppmfajacidhcjbddpgmcmigffpppcadd ":{ "blacklist ":true}}, "toolbar ":[ "lifbcibllhkdhoafpjfnlhfpfgnpldfl"], "toolbarsize ":-1}, "homepage ": "http://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0DtD0D0Fzy0A0C0Azz0DtB0CtD0Czy0DtN0D0Tzu0SyByDtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtBtDtC1N1R&cr=1222733837&ir= ", "homepage_is_newtabpage ":false, "net ":{ "http_server_properties ":{ "accounts.google.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":32},{ "id ":6, "value ":0}], "supports_spdy ":true}, "accounts.youtube.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":32},{ "id ":6, "value ":0}], "supports_spdy ":true}, "chatenabled.mail.google.com:443 ":{ "settings ":[{ "id ":4, "value ":10},{ "id ":5, "value ":32},{ "id ":6, "value ":0}], "supports_spdy ":true}, "clients1.google.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":38},{ "id ":6, "value ":0}], "supports_spdy ":true}, "clients2.google.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":10},{ "id ":6, "value ":0}], "supports_spdy ":true}, "googleads.g.doubleclick.net:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":10},{ "id ":6, "value ":0}], "supports_spdy ":true}, "lh5.googleusercontent.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":32},{ "id ":6, "value ":0}], "supports_spdy ":true}, "mail-attachment.googleusercontent.com:443 ":{ "settings ":[{ "id ":4, "value ":10},{ "id ":5, "value ":32},{ "id ":6, "value ":0}], "supports_spdy ":true}, "mail.google.com:443 ":{ "settings ":[{ "id ":4, "value ":10}], "supports_spdy ":true}, "pagead2.googleadservices.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":32},{ "id ":6, "value ":0}], "supports_spdy ":true}, "plus.google.com:443 ":{ "settings ":[{ "id ":4, "value ":100}], "supports_spdy ":true}, "ssl.google-analytics.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":32},{ "id ":6, "value ":0}], "supports_spdy ":true}, "ssl.gstatic.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":17},{ "id ":6, "value ":0}], "supports_spdy ":true}, "www.google.com:443 ":{ "settings ":[{ "id ":4, "value ":100},{ "id ":5, "value ":10},{ "id ":6, "value ":0}], "supports_spdy ":true}, "www.googleadservices.com:443 ":{ "settings ":[{ "id ":4, "value ":100}], "supports_spdy ":true}}}, "ntp ":{ "gplus_required ":false, "promo_closed ":false, "promo_end ":1345014000.0, "promo_group ":895, "promo_group_max ":1, "promo_group_timeslice ":0, "promo_increment ":1, "promo_initial_segment ":4, "promo_line ": "What do you think of Chrome? <a href=\ "http://survey.googleratings.com/wix/p5963862.aspx\ ">Take the survey</a> ", "promo_num_groups ":1000, "promo_resource_cache_update ": "1345346648.011477 ", "promo_start ":1344495600.0, "promo_views ":0, "promo_views_max ":15}, "plugins ":{ "enabled_internal_pdf3 ":true, "enabled_nacl ":true, "last_internal_directory ": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.79 ", "plugins_list ":[{ "enabled ":true, "name ": "Shockwave Flash ", "path ": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.60\\PepperFlash\\pepflashplayer.dll ", "version ": "11.3.31.222 "},{ "enabled ":true, "name ": "Shockwave Flash ", "path ": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.79\\gcswf32.dll ", "version ": "11,3,300,268 "},{ "enabled ":true, "name ": "Flash "},{ "enabled ":true, "name ": "Remoting Viewer ", "path ": "internal-remoting-viewer ", "version ":" "},{ "enabled ":true, "name ": "Remoting Viewer "},{ "enabled ":true, "name ": "Native Client ", "path ": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.79\\ppGoogleNaClPluginChrome.dll ", "version ":" "},{ "enabled ":true, "name ": "Native Client "},{ "enabled ":true, "name ": "Chrome PDF Viewer ", "path ": "C:\\Program Files (x86)\\Google\\Chrome\\Application\\21.0.1180.79\\pdf.dll ", "version ":" "},{ "enabled ":true, "name ": "Chrome PDF Viewer "},{ "enabled ":true, "name ": "Simple Pass 2011 ", "path ": "C:\\Users\\Guest\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\jpgfhihjicjofdejkbjgnjlaglaciobe\\1.0_0\\npwebsitelogon.dll ", "version ": "1, 0, 0, 1 "},{ "enabled ":true, "name ": "Simple Pass 2011 "},{ "enabled ":true, "name ": "Skype Click to Call ", "path ": "C:\\Users\\Guest\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\lifbcibllhkdhoafpjfnlhfpfgnpldfl\\6.1.0.10441_0\\npSkypeChromePlugin.dll ", "version ": "6.1.0.10441 "},{ "enabled ":true, "name ": "Skype Click to Call "},{ "enabled ":true, "name ": "Adobe Acrobat ", "path ": "C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll ", "version ": "10.1.3.23 "},{ "enabled ":false, "name ": "Adobe Acrobat "},{ "enabled ":true, "name ": "MindSpark Toolbar Platform Plugin Stub ", "path ": "C:\\Program Files (x86)\\GamingWonderland\\bar\\1.bin\\NPgtStub.dll ", "version ": "1, 0, 1, 1 "},{ "enabled ":true, "name ": "MindSpark Toolbar Platform Plugin Stub ", "path ": "C:\\Program Files (x86)\\MapsGalaxy_39\\bar\\1.bin\\NP39Stub.dll ", "version ": "1, 0, 1, 1 "},{ "enabled ":true, "name ": "MindSpark Toolbar Platform Plugin Stub ", "path ": "C:\\Program Files (x86)\\WeatherBlink\\bar\\1.bin\\NPgcStub.dll ", "version ": "1, 0, 1, 1 "},{ "enabled ":true, "name ": "MindSpark Toolbar Platform Plugin Stub "},{ "enabled ":true, "name ": "Google Update ", "path ": "C:\\Program Files (x86)\\Google\\Update\\1.3.21.115\\npGoogleUpdate3.dll ", "version ": "1.3.21.115 "},{ "enabled ":true, "name ": "Google Update "},{ "enabled ":true, "name ": "Java(TM) Platform SE 6 U33 ", "path ": "C:\\Program Files (x86)\\Java\\jre6\\bin\\plugin2\\npjp2.dll ", "version ": "6.0.330.5 "},{ "enabled ":true, "name ": "Java Deployment Toolkit 6.0.330.5 ", "path ": "C:\\Windows\\SysWOW64\\npdeployJava1.dll ", "version ": "6.0.330.5 "},{ "enabled ":true, "name ": "Java "},{ "enabled ":true, "name ": "My Web Search Plugin Stub ", "path ": "C:\\Program Files (x86)\\MyWebSearch\\bar\\1.bin\\NPMyWebS.dll ", "version ": "1, 0, 1, 0 "},{ "enabled ":true, "name ": "My Web Search Plugin Stub "},{ "enabled ":true, "name ": "Windows LiveÂ? Photo Gallery ", "path ": "C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll ", "version ": "15.4.3508.1109_ship.wlx.w4m4 (ship) "},{ "enabled ":true, "name ": "Windows LiveÂ? Photo Gallery "},{ "enabled ":true, "name ": "Silverlight Plug-In ", "path ": "c:\\Program Files (x86)\\Microsoft Silverlight\\5.1.10411.0\\npctrl.dll ", "version ": "5.1.10411.0 "},{ "enabled ":true, "name ": "Silverlight "}]}, "profile ":{ "avatar_index ":0, "content_settings ":{ "clear_on_exit_migrated ":true, "pattern_pairs ":{ "*,* ":{ "per_plugin ":{ "npsitesafety.dll ":1}}}, "plugin_whitelist ":{ "npsitesafety ":{ "dll ":true}}, "pref_version ":1}, "exited_cleanly ":true, "name ": "First user "}, "session ":{ "startup_urls ": [ "http://start.mysearchdial.com/?f=1&a=irmsd0101&cd=2XzuyEtN2Y1L1Qzu0DtD0D0Fzy0A0C0Azz0DtB0CtD0Czy0DtN0D0Tzu0SyByDtAtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtBtDtC1N1R&cr=1222733837&ir=" ],), Replaced,[59a95a706c0f6fc723ef90800104847c]

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  10. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is the dds text file in parts
    DDS (Ver_2012-11-20.01) - NTFS_AMD64
    Internet Explorer: 11.0.9600.17239 BrowserJavaVersion: 10.67.2
    Run by Owner at 19:17:09 on 2014-08-26
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8175.5550 [GMT -7:00]
    .
    AV: Norton Security Suite *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
    SP: Norton Security Suite *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    FW: Norton Security Suite *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\WLANExt.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    C:\Program Files (x86)\Norton Security Suite\Engine\21.5.0.19\N360.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.91\ccSvcHst.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
    C:\Windows\system32\taskhost.exe
    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.91\ccSvcHst.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files (x86)\Glary Utilities 4\SoftwareUpdate.exe
    C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
    C:\Program Files (x86)\Glary Utilities 4\Integrator.exe
    C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
    C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
    C:\Program Files (x86)\Norton Security Suite\Engine\21.5.0.19\N360.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\System32\WUDFHost.exe
    C:\Program Files\hp\HP Officejet 6500 E710n-z\Bin\ScanToPCActivationApp.exe
    C:\Program Files (x86)\Skype\Phone\Skype.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    C:\Program Files\hp\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicator.exe
    C:\Windows\system32\svchost.exe -k HPService
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Windows\system32\wuauclt.exe
    C:\Windows\system32\svchost.exe -k SDRSVC
    c:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe
    C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
    c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
    C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    c:\program files (x86)\teamviewer\version9\TeamViewer_Desktop.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\Macromed\Flash\FlashUtil64_14_0_0_176_ActiveX.exe
    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    C:\Windows\System32\svchost.exe -k swprv
    C:\Windows\SysWOW64\NOTEPAD.EXE
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\System32\cscript.exe
    .
     
  11. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is part 2
    ============== Pseudo HJT Report ===============
    .
    uSearch Bar = hxxp://www.google.com
    uSearch Page = hxxp://www.google.com
    uDefault_Page_URL = www.google.com
    uDefault_Search_URL = www.google.com
    mSearch Bar = hxxp://www.google.com
    mURLSearchHooks: {b2bf7b3f-bf0b-4c48-aec6-f92c51be63e1} - <orphaned>
    mURLSearchHooks: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - <orphaned>
    mWinlogon: Userinit = userinit.exe,
    BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll
    BHO: {11111111-1111-1111-1111-110611191113} - <orphaned>
    BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\21.5.0.19\coieplg.dll
    BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\21.5.0.19\ips\ipsbho.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
    BHO: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll
    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
    BHO: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
    TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>
    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -
    TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\21.5.0.19\coieplg.dll
    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    EB: <No Name>: {555D4D79-4BD2-4094-A395-CFC534424A05} - LocalServer32 - <no file>
    EB: <No Name>: {555D4D79-4BD2-4094-A395-CFC534424A05} - LocalServer32 - <no file>
    uRun: [HP Officejet 6500 E710n-z (NET)] "C:\Program Files\hp\HP Officejet 6500 E710n-z\Bin\ScanToPCActivationApp.exe" -deviceID "CN1CF3308305JW:NW" -scfn "HP Officejet 6500 E710n-z (NET)" -AutoStart 1
    uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
    mRun: [MSConfig] C:\Users\Owner\Desktop\Geek Squad Backup 00366-966068192 -AB\WINDOWS\pchealth\helpctr\binaries\msconfig.exe /auto
    mPolicies-Explorer: NoActiveDesktop = dword:1
    mPolicies-Explorer: NoActiveDesktopChanges = dword:1
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
    mPolicies-System: ConsentPromptBehaviorUser = dword:3
    mPolicies-System: EnableUIADesktopToggle = dword:0
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
    IE: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-001045-0002-0045-ABCDEFFEDCBC} - <orphaned>
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    .
    INFO: HKCU has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    .
    INFO: HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
    DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://oas.support.microsoft.com/ActiveX/MSDcode.cab
    DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} - hxxps://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB
    DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect125.cab
    DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} - hxxp://ak.imgag.com/imgag/cp/install/Crusher.cab
    TCP: NameServer = 10.1.10.1
    TCP: Interfaces\{00890D61-EE38-4A32-88CB-D8536B91A80A} : DHCPNameServer = 192.168.1.1
    TCP: Interfaces\{00890D61-EE38-4A32-88CB-D8536B91A80A}\25F69716C6055647 : DHCPNameServer = 192.168.1.1
    TCP: Interfaces\{00890D61-EE38-4A32-88CB-D8536B91A80A}\25F69716C6055647F5548545 : DHCPNameServer = 192.168.1.250
    TCP: Interfaces\{00890D61-EE38-4A32-88CB-D8536B91A80A}\E4544574541425 : DHCPNameServer = 192.168.1.1
    TCP: Interfaces\{278BE347-0C6F-4A0C-8794-992147426C9C} : DHCPNameServer = 10.1.10.1
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - <orphaned>
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    SSODL: WebCheck - <orphaned>
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    x64-BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.5.0.19\coieplg.dll
    x64-BHO: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll
    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
    x64-BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9} - <orphaned>
    x64-TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine64\21.5.0.19\coieplg.dll
    x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
    x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    .
    INFO: x64-HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
    x64-Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - <orphaned>
    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
    x64-SSODL: WebCheck - <orphaned>
    .
     
  12. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is part 3.
    ============= SERVICES / DRIVERS ===============
    .
    R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\N360x64\1505000.013\symds64.sys [2014-8-12 493656]
    R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\N360x64\1505000.013\symefa64.sys [2014-8-12 1148120]
    R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2012-9-12 46368]
    R1 BHDrvx64;BHDrvx64;C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\BASHDefs\20140821.007\BHDrvx64.sys [2014-8-18 1588016]
    R1 ccSet_N360;N360 Settings Manager;C:\Windows\System32\drivers\N360x64\1505000.013\ccsetx64.sys [2014-8-12 162392]
    R1 IDSVia64;IDSVia64;C:\Program Files (x86)\Norton Security Suite\NortonData\21.1.0.18\Definitions\IPSDefs\20140825.001\IDSviA64.sys [2014-8-25 525016]
    R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\N360x64\1505000.013\ironx64.sys [2014-8-12 264280]
    R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\N360x64\1505000.013\symnets.sys [2014-8-12 593112]
    R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files (x86)\LogMeIn\x64\rainfo.sys [2011-9-16 16056]
    R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\Windows\System32\drivers\LMIRfsDriver.sys [2011-11-9 72216]
    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-8-23 1809720]
    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-8-23 860472]
    R2 N360;Norton Security Suite;C:\Program Files (x86)\Norton Security Suite\Engine\21.5.0.19\n360.exe [2014-8-12 265040]
    R2 PCCUJobMgr;Common Client Job Manager Service;C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.15.91\ccSvcHst.exe [2011-12-18 126392]
    R2 TeamViewer9;TeamViewer 9;C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-8-9 5052224]
    R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-3-17 231440]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2014-8-2 142128]
    R3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\System32\drivers\lvrs64.sys [2012-1-17 351136]
    R3 LVUVC64;Logitech Webcam C210(UVC);C:\Windows\System32\drivers\LVUVC64.sys [2011-8-19 4865568]
    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2014-8-23 25816]
    R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-8-23 122584]
    R3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-8-23 63704]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-8-12 471144]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-4-3 315008]
    S3 BTWAMPFL;BTWAMPFL;C:\Windows\System32\drivers\btwampfl.sys [2011-8-12 349736]
    S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2011-8-12 39464]
    S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-9-14 57280]
    S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-8-14 111616]
    S3 pmxdrv;pmxdrv;C:\Windows\System32\drivers\pmxdrv.sys [2011-8-12 31152]
    S3 SWDUMon;SWDUMon;C:\Windows\System32\drivers\SWDUMon.sys [2014-5-16 16152]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]
    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-11-5 1255736]
    S4 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-3-17 204288]
    S4 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-3-1 183560]
    S4 FPLService;TrueSuiteService;C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-6-9 264008]
    S4 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-7-28 1511872]
    S4 GamesAppIntegrationService;GamesAppIntegrationService;C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2013-10-7 240736]
    S4 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
    S4 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
    S4 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2011-2-24 212944]
    S4 LMIGuardianSvc;LMIGuardianSvc;C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2011-9-26 376144]
    S4 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2014-4-9 4343664]
    S4 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [2012-9-2 132504]
    S4 pdfcDispatcher;PDF Document Manager;C:\Program Files (x86)\PDF Complete\pdfsvc.exe [2011-8-12 1128952]
    S4 RoxioNow Service;RoxioNow Service;C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-11-26 399344]
    S4 UMVPFSrv;UMVPFSrv;C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-1-17 450848]
    S4 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-8-12 2656280]
    .
    =============== Created Last 30 ================
    .
    2014-08-24 01:56:39 122584 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
    2014-08-24 01:56:24 91352 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
    2014-08-24 01:56:24 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys
    2014-08-24 01:56:24 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys
    2014-08-24 01:56:24 -------- d-----w- C:\ProgramData\Malwarebytes
    2014-08-24 01:56:24 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware
    2014-08-23 20:12:43 -------- d-----w- C:\Windows\pss
    2014-08-20 17:48:46 -------- d-----w- C:\Users\Owner\AppData\Local\Adobe
    2014-08-19 00:07:02 10924376 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{25E76EE7-3E43-47CC-9963-2F7853731F9B}\mpengine.dll
    2014-08-14 10:01:05 99480 ----a-w- C:\Windows\SysWow64\infocardapi.dll
    2014-08-14 10:01:05 8856 ----a-w- C:\Windows\SysWow64\icardres.dll
    2014-08-14 10:01:05 8856 ----a-w- C:\Windows\System32\icardres.dll
    2014-08-14 10:01:05 619672 ----a-w- C:\Windows\SysWow64\icardagt.exe
    2014-08-14 10:01:05 171160 ----a-w- C:\Windows\System32\infocardapi.dll
    2014-08-14 10:01:05 1389208 ----a-w- C:\Windows\System32\icardagt.exe
    2014-08-14 10:00:53 35480 ----a-w- C:\Windows\SysWow64\TsWpfWrp.exe
    2014-08-14 10:00:53 35480 ----a-w- C:\Windows\System32\TsWpfWrp.exe
    2014-08-12 21:57:57 875736 ----a-w- C:\Windows\System32\drivers\N360x64\1505000.013\srtsp64.sys
    2014-08-12 21:57:57 593112 ----a-w- C:\Windows\System32\drivers\N360x64\1505000.013\symnets.sys
    2014-08-12 21:57:57 493656 ----a-r- C:\Windows\System32\drivers\N360x64\1505000.013\symds64.sys
    2014-08-12 21:57:57 36952 ----a-r- C:\Windows\System32\drivers\N360x64\1505000.013\srtspx64.sys
    2014-08-12 21:57:57 264280 ----a-r- C:\Windows\System32\drivers\N360x64\1505000.013\ironx64.sys
    2014-08-12 21:57:57 23568 ----a-r- C:\Windows\System32\drivers\N360x64\1505000.013\symelam.sys
    2014-08-12 21:57:57 162392 ----a-r- C:\Windows\System32\drivers\N360x64\1505000.013\ccsetx64.sys
    2014-08-12 21:57:57 1148120 ----a-w- C:\Windows\System32\drivers\N360x64\1505000.013\symefa64.sys
    2014-08-12 21:57:45 -------- d-----w- C:\Windows\System32\drivers\N360x64\1505000.013
    2014-08-10 04:41:30 -------- d-----w- C:\NPE
    2014-08-10 04:37:26 -------- d-----w- C:\Users\Owner\AppData\Local\NPE
    2014-08-10 03:11:33 -------- d-----w- C:\Users\Owner\AppData\Roaming\NewspaperDirect
    2014-08-10 02:56:08 -------- d-----w- C:\Program Files\Enigma Software Group
    2014-08-10 02:55:40 -------- d-----w- C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
    2014-08-10 02:55:39 -------- d-----w- C:\Program Files (x86)\Common Files\Wise Installation Wizard
    2014-08-10 02:01:11 98216 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
    2014-08-09 20:51:36 10924376 ------w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates\mpengine.dll
    2014-08-09 19:42:49 145792 ----a-w- C:\Windows\System32\drivers\E1G6032E.sys
    2014-08-09 18:38:35 16224 ----a-w- C:\Windows\System32\Native.exe
    2014-08-05 22:43:24 290304 ----a-w- C:\Windows\SysWow64\subinacl.exe
    2014-08-05 22:43:23 -------- d-----w- C:\Program Files\Common Files\Microsoft
    2014-08-05 22:43:23 -------- d-----w- C:\Program Files\Adware-Removal-Tool
    2014-08-04 01:03:36 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
    2014-08-04 01:03:33 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2
    2014-08-03 21:47:01 -------- d-----w- C:\Program Files (x86)\predm
     
  13. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    here is part 4.
    ==================== Find3M ====================
    .
    2014-08-20 04:04:36 71344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2014-08-20 04:04:36 699568 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
    2014-08-07 02:06:41 529920 ----a-w- C:\Windows\System32\aepdu.dll
    2014-08-07 02:01:34 424448 ----a-w- C:\Windows\System32\aeinv.dll
    2014-08-05 16:20:00 270496 ------w- C:\Windows\System32\MpSigStub.exe
    2014-07-25 14:02:12 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
    2014-07-25 14:01:41 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
    2014-07-25 13:30:30 66048 ----a-w- C:\Windows\System32\iesetup.dll
    2014-07-25 13:28:35 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
    2014-07-25 13:28:27 548352 ----a-w- C:\Windows\System32\vbscript.dll
    2014-07-25 13:25:45 83968 ----a-w- C:\Windows\System32\MshtmlDac.dll
    2014-07-25 13:04:40 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
    2014-07-25 13:00:51 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
    2014-07-25 13:00:25 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
    2014-07-25 12:59:28 758272 ----a-w- C:\Windows\System32\jscript9diag.dll
    2014-07-25 12:47:25 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
    2014-07-25 12:34:49 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
    2014-07-25 12:34:03 455168 ----a-w- C:\Windows\SysWow64\vbscript.dll
    2014-07-25 12:33:08 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
    2014-07-25 12:30:32 61952 ----a-w- C:\Windows\SysWow64\MshtmlDac.dll
    2014-07-25 12:28:15 5824512 ----a-w- C:\Windows\System32\jscript9.dll
    2014-07-25 12:28:05 72704 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
    2014-07-25 12:10:15 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
    2014-07-25 12:08:47 597504 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
    2014-07-25 12:06:47 4204032 ----a-w- C:\Windows\SysWow64\jscript9.dll
    2014-07-25 11:43:16 60416 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
    2014-07-25 11:39:29 2087936 ----a-w- C:\Windows\System32\inetcpl.cpl
    2014-07-25 11:39:25 1249280 ----a-w- C:\Windows\System32\mshtmlmedia.dll
    2014-07-25 11:07:49 2001920 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
    2014-07-25 11:07:10 1068032 ----a-w- C:\Windows\SysWow64\mshtmlmedia.dll
    2014-07-25 10:52:06 2266624 ----a-w- C:\Windows\System32\wininet.dll
    2014-07-25 10:05:23 1792512 ----a-w- C:\Windows\SysWow64\wininet.dll
    2014-07-18 19:50:21 35656 ----a-w- C:\Windows\System32\LMIport.dll
    2014-07-18 19:50:21 107368 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll
    2014-07-18 19:50:20 92488 ----a-w- C:\Windows\System32\LMIinit.dll
    2014-07-16 03:23:41 2048 ----a-w- C:\Windows\System32\tzres.dll
    2014-07-16 02:46:02 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
    2014-07-14 02:02:45 1216000 ----a-w- C:\Windows\System32\rpcrt4.dll
    2014-07-14 01:40:58 664064 ----a-w- C:\Windows\SysWow64\rpcrt4.dll
    2014-06-19 01:39:48 23464448 ----a-w- C:\Windows\System32\mshtml.dll.840
    2014-06-19 01:06:55 2724864 ----a-w- C:\Windows\System32\mshtml.tlb.588
    2014-06-19 00:48:18 2768384 ----a-w- C:\Windows\System32\iertutil.dll.304
    2014-06-19 00:16:07 17276416 ----a-w- C:\Windows\SysWow64\mshtml.dll.332
    2014-06-19 00:09:47 452608 ----a-w- C:\Windows\System32\dxtmsft.dll.196
    2014-06-18 23:51:38 5721088 ----a-w- C:\Windows\System32\jscript9.dll.115
    2014-06-18 23:48:44 292864 ----a-w- C:\Windows\System32\dxtrans.dll.694
    2014-06-18 23:32:55 2179072 ----a-w- C:\Windows\SysWow64\iertutil.dll.208
    2014-06-18 23:28:45 43008 ----a-w- C:\Windows\SysWow64\jsproxy.dll.327
    2014-06-18 22:58:27 2266112 ----a-w- C:\Windows\System32\wininet.dll.711
    2014-06-18 22:52:18 4254720 ----a-w- C:\Windows\SysWow64\jscript9.dll.470
    2014-06-18 22:51:48 13527040 ----a-w- C:\Windows\System32\ieframe.dll.4
    2014-06-18 22:35:47 11742208 ----a-w- C:\Windows\SysWow64\ieframe.dll.643
    2014-06-18 22:34:25 1393664 ----a-w- C:\Windows\System32\urlmon.dll.108
    2014-06-18 22:13:59 1791488 ----a-w- C:\Windows\SysWow64\wininet.dll.640
    2014-06-18 22:09:34 1139200 ----a-w- C:\Windows\SysWow64\urlmon.dll.372
    2014-06-18 02:18:30 692736 ----a-w- C:\Windows\System32\osk.exe
    2014-06-18 01:51:32 646144 ----a-w- C:\Windows\SysWow64\osk.exe
    2014-06-18 01:10:36 3157504 ----a-w- C:\Windows\System32\win32k.sys
    2014-06-16 02:10:19 985536 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
    2014-06-06 21:52:03 107368 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll.000.bak
    2014-06-06 10:10:34 624128 ----a-w- C:\Windows\System32\qedit.dll
    2014-06-06 09:44:17 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
    2014-06-05 14:45:15 1460736 ----a-w- C:\Windows\System32\lsasrv.dll.169
    2014-06-05 14:45:15 1460736 ----a-w- C:\Windows\System32\lsasrv.dll
    2014-06-05 14:26:58 22016 ----a-w- C:\Windows\SysWow64\secur32.dll.319
    2014-06-05 14:26:58 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
    2014-06-05 14:25:49 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll.292
    2014-06-05 14:25:49 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
    2014-06-03 10:02:37 112064 ----a-w- C:\Windows\System32\consent.exe
    2014-06-03 10:02:21 504320 ----a-w- C:\Windows\System32\msihnd.dll
    2014-06-03 10:02:21 3241984 ----a-w- C:\Windows\System32\msi.dll
    2014-06-03 10:02:12 1941504 ----a-w- C:\Windows\System32\authui.dll
    2014-06-03 09:29:50 337408 ----a-w- C:\Windows\SysWow64\msihnd.dll
    2014-06-03 09:29:50 2363392 ----a-w- C:\Windows\SysWow64\msi.dll
    2014-06-03 09:29:40 1805824 ----a-w- C:\Windows\SysWow64\authui.dll
    2014-05-30 07:52:51 172032 ----a-w- C:\Windows\SysWow64\wdigest.dll
    2014-05-30 07:52:49 65536 ----a-w- C:\Windows\SysWow64\TSpkg.dll
    2014-05-30 07:52:45 247808 ----a-w- C:\Windows\SysWow64\schannel.dll.517
    2014-05-30 07:52:45 247808 ----a-w- C:\Windows\SysWow64\schannel.dll
    2014-05-30 07:52:41 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll.628
    2014-05-30 07:52:41 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll
    2014-05-30 07:52:40 259584 ----a-w- C:\Windows\SysWow64\msv1_0.dll.296
    2014-05-30 07:52:40 259584 ----a-w- C:\Windows\SysWow64\msv1_0.dll
    2014-05-30 07:52:36 550912 ----a-w- C:\Windows\SysWow64\kerberos.dll.206
    2014-05-30 07:52:36 550912 ----a-w- C:\Windows\SysWow64\kerberos.dll
    2014-05-30 07:52:30 17408 ----a-w- C:\Windows\SysWow64\credssp.dll.169
    2014-05-30 07:52:30 17408 ----a-w- C:\Windows\SysWow64\credssp.dll
    2014-05-30 06:45:52 497152 ----a-w- C:\Windows\System32\drivers\afd.sys
    2013-06-13 01:26:32 186760 ----a-w- C:\Program Files (x86)\64res.dll
    .
    ============= FINISH: 19:17:17.27 ===============
     
  14. 2014/08/30
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    I hope I did this correctly and I hope someone can help and give me an idea what zi can do to fix the problem. Thanks so much for any help

    gerdy
     
  15. 2014/08/31
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ===========================

    I still need Attach.txt log from DDS.
     
  16. 2014/09/01
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    Hi I did attach the dds at the end and I had to do this in several post because it also was kind of large. I was trying to zip it up but then I could not copy it to the post. please tell me if I need to send again. Thanks
     
  17. 2014/09/01
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Split the file between couple of replies.
     
  18. 2014/09/05
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Still with me?
     
  19. 2014/09/08
    gerdy

    gerdy Well-Known Member Thread Starter

    Joined:
    2009/12/01
    Messages:
    42
    Likes Received:
    0
    Thanks for all your help on this matter but my nephew is taking care of the problem since he is visiting. please close the thread for me since I cant find the place to close it. Thanks
     
  20. 2014/09/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Thanks for letting me know :)
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.