1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Thread Lock For Inactivity

Discussion in 'Malware and Virus Removal' started by JusticeNY, 2016/05/13.

Page 1 of 2
  1. 2016/05/13
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    sorry my other thread was locked for inactivity i was dealing with finals and was busy sorry for not coming back swiftly here are the logs u requested maybe my thread could be opened back up and merged?
     
    JusticeNY,
    #1
  2. 2016/05/13
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-04-2016
    Ran by sixlove (administrator) on SIXLOVE-PC (26-04-2016 21:46:07)
    Running from C:\Users\sixlove\Desktop
    Loaded Profiles: sixlove (Available Profiles: IUSR_NMPR & sixlove & House)
    Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Language: English (United States)
    Internet Explorer Version 9 (Default browser: IE)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AMD) C:\Windows\System32\atiesrxx.exe
    (Microsoft Corporation) C:\Windows\System32\SLsvc.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (SigmaTel, Inc.) C:\Windows\System32\stacsv.exe
    (Mindspark) C:\Program Files\TelevisionFanatic\bar\1.bin\64barsvc.exe
    (Yahoo! Inc.) C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    (SlimWare Utilities, Inc.) C:\Program Files\DriverUpdate\DriverUpdate.exe
    (Microsoft Corporation) C:\Windows\System32\wpcumi.exe
    (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    (AOL Inc.) C:\Program Files\Common Files\AOL\1413747133\ee\aolsoftware.exe
    (APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
    (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
    (SigmaTel, Inc.) C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
    (Microsoft Corporation) C:\Windows\ehome\ehtray.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
    (PC Drivers Headquarters) C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe
    (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
    (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
    (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
    () C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe
    (Microsoft Corporation) C:\Windows\System32\taskmgr.exe
    (Mindspark) C:\Program Files\TelevisionFanatic\bar\1.bin\AppIntegrator.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [CCUTRAYICON] => C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe [215256 2007-06-27] (Intel(R) Corporation)
    HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2012-02-23] (Apple Inc.)
    HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
    HKLM\...\Run: [WPCUMI] => C:\Windows\system32\WpcUmi.exe [176128 2006-11-02] (Microsoft Corporation)
    HKLM\...\Run: [FileAgent] => C:\Program Files\FileCenter\Main\FileAgent.exe [5766800 2013-08-16] (Lucion Technologies, LLC)
    HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
    HKLM\...\Run: [HostManager] => C:\Program Files\Common Files\AOL\1413747133\ee\AOLSoftware.exe [41800 2010-03-08] (AOL Inc.)
    HKLM\...\Run: [SunJavaUpdateSched] => "C:\Program Files\Java\jre1.8.0_31\bin\jusched.exe "
    HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1934744 2015-01-30] (APN)
    HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-07] (Apple Inc.)
    HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
    HKLM\...\Run: [TelevisionFanatic EPM Support] => C:\Program Files\TelevisionFanatic\bar\1.bin\64medint.exe [11608 2015-10-28] (Mindspark)
    HKLM\...\Run: [SigmatelSysTrayApp] => C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [405504 2007-09-12] (SigmaTel, Inc.)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-10-31] (Apple Inc.)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Run: [Driver Detective] => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [4678040 2014-01-28] (PC Drivers Headquarters)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Policies\system: [LogonHoursAction] 2
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk [2007-12-14]
    ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2015-12-13]
    ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
    BootExecute: autocheck autochk * ???,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * system.
    GroupPolicyUsers\S-1-5-21-3249766445-722992797-2274620919-1002\User: Restriction <======= ATTENTION
    CHR HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{6CC151F6-C8D3-4E5A-BB05-1495966C18CE}: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{DC925712-341B-4237-869B-2D59EA9F3FDF}: [DhcpNameServer] 172.20.10.1

    Internet Explorer:
    ==================
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.tb.ask.com/index.jhtml?n=781C24A8&p2=^XP^xdm044^S14600^us&ptb=7EA1712E-C8A2-4691-B663-B015F2B59BD2&si=CLquy7zh9MgCFVQYHwodzXEIyQ
    URLSearchHook: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll (Yahoo! Inc.)
    URLSearchHook: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 - (No Name) - {0696f815-a3a9-490a-bb14-9ec3350b1276} - C:\Program Files\TelevisionFanatic\bar\1.bin\64SrcAs.dll (Mindspark)
    SearchScopes: HKLM -> {901E8648-A01B-460A-A29E-9D7C40438BAF} URL = hxxp://search.aol.com/aol/search?q={searchTerms}&s_it=clireset-ie
    SearchScopes: HKLM -> {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^XP^xdm044^S14600^us&si=CLquy7zh9MgCFVQYHwodzXEIyQ&ptb=7EA1712E-C8A2-4691-B663-B015F2B59BD2&psa=&ind=2015110312&st=sb&n=781c24a8&searchfor={searchTerms}
    SearchScopes: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> DefaultScope {31B823BE-0FD2-40ED-84E0-CA5B603D159B} URL = hxxp://search.aol.com/aol/search?q={searchTerms}&s_it=clireset-ie
    SearchScopes: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> {31B823BE-0FD2-40ED-84E0-CA5B603D159B} URL = hxxp://search.aol.com/aol/search?q={searchTerms}&s_it=clireset-ie
    SearchScopes: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> {5A59A166-E37B-4912-A6E8-5CF0D580FB6F} URL = hxxp://www.search.ask.com/web?tpid=ORJ-SPE&o=APN11405&pf=V7&p2=^BBD^OSJ000^YY^US&gct=&itbv=12.24.1.51&apn_uid=52BFE773-85F4-44F1-9E7B-7EE4269D5815&apn_ptnrs=BBD&apn_dtid=^OSJ000^YY^US&apn_dbr=ie_9.0.8112.16609&doi=2015-03-02&trgb=IE&q={searchTerms}&psv=&pt=tb
    SearchScopes: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> {a5b9c0f5-5616-47cd-a95f-e43b488faccf} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^XP^xdm044^S14600^us&si=CLquy7zh9MgCFVQYHwodzXEIyQ&ptb=7EA1712E-C8A2-4691-B663-B015F2B59BD2&psa=&ind=2015110312&st=sb&n=781c24a8&searchfor={searchTerms}
    BHO: Search Assistant BHO -> {5d79f641-c168-40df-a32f-bacea7509e75} -> C:\Program Files\TelevisionFanatic\bar\1.bin\64SrcAs.dll [2015-10-28] (Mindspark)
    BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-03-01] (Oracle Corporation)
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
    BHO: Toolbar BHO -> {cb41fc95-f1b3-4797-8bb6-1012ff62abba} -> C:\Program Files\TelevisionFanatic\bar\1.bin\64bar.dll [2015-10-28] (Mindspark)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-03-01] (Oracle Corporation)
    Toolbar: HKLM - TelevisionFanatic - {c98d5b61-b0ea-4d48-9839-1079d352d880} - C:\Program Files\TelevisionFanatic\bar\1.bin\64bar.dll [2015-10-28] (Mindspark)
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
    Toolbar: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
    Toolbar: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> No Name - {4F524A2D-5350-4500-76A7-7A786E7484D7} - No File
    Toolbar: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> TelevisionFanatic - {C98D5B61-B0EA-4D48-9839-1079D352D880} - C:\Program Files\TelevisionFanatic\bar\1.bin\64bar.dll [2015-10-28] (Mindspark)
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
    DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)

    FireFox:
    ========
    FF ProfilePath: C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default
    FF DefaultSearchEngine: AOL Search
    FF SearchEngineOrder.1: Yahoo
    FF SearchEngineOrder.2:
    FF SelectedSearchEngine: AOL Search
    FF Homepage: hxxp://www.aol.com/?mtmhp=hyplogusaolp00000093
    FF Keyword.URL: hxxp://aolsearch.aol.com/aol/search?invocationType=client_searchbox&query=
    FF NetworkProxy: "no_proxies_on ", "*.local "
    FF NetworkProxy: "type ", 0
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-07] ()
    FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
    FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-03-01] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-03-01] (Oracle Corporation)
    FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
    FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
    FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
    FF Plugin: @viewpoint.com/VMP -> C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll [2004-02-20] ()
    FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
    FF SearchPlugin: C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\searchplugins\aolsearch.xml [2014-09-16]
    FF Extension: ArcadeParlor - C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404} [2014-02-02] [not signed]
    FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-12] [not signed]
    FF Extension: ArcadeParlor - C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404} [2014-02-02] [not signed]
    FF Extension: WordExtra - C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\Extensions\korey@markus.me [2014-02-23] [not signed]
    FF Extension: WordExtra - C:\Program Files\Mozilla Firefox\browser\extensions\korey@markus.me [2015-10-30] [not signed]
    FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
    FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-04-03]

    Chrome:
    =======
    CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\49.0.2623.112\PepperFlash\pepflashplayer.dll ()
    CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll => No File
    CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\49.0.2623.112\ppGoogleNaClPluginChrome.dll => No File
    CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\49.0.2623.112\pdf.dll => No File
    CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 4.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll => No File
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll => No File
    CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
    CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
    CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
    CHR Profile: C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Chrome Web Store Payments) - C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-15]
    CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <not found>

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S4 AdobeActiveFileMonitor6.0; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832 2007-09-11] ()
    S4 AlertService; C:\Program Files\Intel\IntelDH\CCU\AlertService.exe [223448 2007-06-27] (Intel(R) Corporation)
    S3 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46184 2014-02-06] (AOL Inc.)
    R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [177560 2015-01-30] (APN LLC.)
    S4 DHTRACE; C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe [39640 2007-06-27] (Intel(R) Corporation)
    S4 DQLWinService; C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe [208896 2007-02-12] () [File not signed]
    S4 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2007-12-14] (Macrovision Europe Ltd.) [File not signed]
    S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
    S4 ISSM; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe [59096 2007-06-27] (Intel(R) Corporation)
    S2 M1 Server; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe [268504 2007-06-27] ()
    S4 MCLServiceATL; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe [157912 2007-06-27] (Intel(R) Corporation)
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
    S4 NMSCore; C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe [317656 2007-06-27] (Intel(R) Corporation)
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
    S4 QualityManager; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe [272600 2007-06-27] (Intel(R) Corporation)
    S4 Remote UI Service; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe [446680 2007-06-27] (Intel(R) Corporation)
    R2 STacSV; C:\Windows\system32\STacSV.exe [94208 2007-09-12] (SigmaTel, Inc.)
    S4 stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [69632 2007-07-11] (MicroVision Development, Inc.) [File not signed]
    R2 TelevisionFanaticService; C:\Program Files\TelevisionFanatic\bar\1.bin\64barsvc.exe [89432 2015-10-28] (Mindspark)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-19] (Microsoft Corporation)
    S4 XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [386560 2006-08-04] (Conexant Systems, Inc.) [File not signed]

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [26248 2012-08-02] (EldoS Corporation)
    R3 IntelDH; C:\Windows\System32\Drivers\IntelDH.sys [5632 2007-12-14] (Intel Corporation)
    R2 nmsunidr; C:\Windows\System32\DRIVERS\nmsunidr.sys [5376 2007-02-18] (Gteko Ltd.)
    S3 R300; C:\Windows\System32\DRIVERS\atikmdag.sys [8913920 2011-11-10] (Advanced Micro Devices, Inc.)
    S3 Ser2rs; C:\Windows\System32\DRIVERS\ser2rs.sys [76288 2007-06-25] (Prolific Technology Inc.)
    R3 STHDA; C:\Windows\System32\drivers\stwrt.sys [326656 2007-09-12] (SigmaTel, Inc.)
    S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13368 2016-04-26] (SlimWare Utilities, Inc.)
    S3 TSHWMDTCP; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.sys [14552 2007-06-27] ()
    R1 tStLib; C:\Windows\System32\drivers\tStLib.sys [55232 2014-03-22] (StdLib)
    R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-29] (America Online, Inc.)
    U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-04-26 21:46 - 2016-04-26 21:46 - 00021618 _____ C:\Users\sixlove\Desktop\FRST.txt
    2016-04-26 21:44 - 2016-04-26 21:46 - 00000000 ____D C:\FRST
    2016-04-26 21:44 - 2016-04-25 15:57 - 01726976 _____ (Farbar) C:\Users\sixlove\Desktop\FRST.exe
    2016-04-23 12:19 - 2016-04-23 12:19 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (4).exe
    2016-04-23 12:18 - 2016-04-23 12:18 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (3).exe
    2016-04-23 12:17 - 2016-04-23 12:17 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue.exe
    2016-04-23 12:17 - 2016-04-23 12:17 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (2).exe
    2016-04-23 12:17 - 2016-04-23 12:17 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (1).exe
    2016-04-13 03:11 - 2016-03-18 13:10 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
    2016-04-13 03:11 - 2016-03-18 13:10 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2016-04-13 03:11 - 2016-03-18 13:10 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2016-04-13 03:11 - 2016-03-18 13:10 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
    2016-04-13 03:11 - 2016-03-18 13:09 - 01259520 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2016-04-13 03:11 - 2016-03-04 12:52 - 01253376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
    2016-04-13 03:10 - 2016-03-18 11:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
    2016-04-13 03:02 - 2016-03-21 18:57 - 01208568 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2016-04-13 03:02 - 2016-03-18 13:10 - 01316864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
    2016-04-13 03:02 - 2016-03-18 13:09 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2016-04-13 03:01 - 2016-03-29 16:30 - 02070016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2016-04-13 03:01 - 2016-03-17 13:45 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
    2016-04-13 03:01 - 2016-03-17 13:45 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
    2016-04-12 15:30 - 2016-03-24 16:40 - 01815552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2016-04-12 15:30 - 2016-03-24 16:38 - 12841472 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2016-04-12 15:30 - 2016-03-24 16:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2016-04-12 15:30 - 2016-03-24 16:35 - 09753600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2016-04-12 15:30 - 2016-03-24 16:35 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2016-04-12 15:30 - 2016-03-24 16:34 - 01129984 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2016-04-12 15:30 - 2016-03-24 16:33 - 01804800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2016-04-12 15:30 - 2016-03-24 16:33 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2016-04-12 15:30 - 2016-03-24 16:33 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2016-04-12 15:30 - 2016-03-24 16:33 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2016-04-12 15:30 - 2016-03-24 16:33 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
    2016-04-12 15:30 - 2016-03-24 16:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2016-04-12 15:30 - 2016-03-24 16:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2016-04-12 15:30 - 2016-03-24 16:32 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2016-04-12 15:30 - 2016-03-24 16:32 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2016-04-12 15:30 - 2016-03-24 16:32 - 00354304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2016-04-12 15:30 - 2016-03-24 16:32 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2016-04-12 15:30 - 2016-03-24 16:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2016-04-12 15:30 - 2016-03-24 16:32 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2016-04-12 15:30 - 2016-03-24 16:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
    2016-04-12 15:30 - 2016-03-24 16:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
    2016-04-12 15:30 - 2016-03-24 16:32 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-04-26 21:45 - 2006-11-02 07:18 - 00000000 ____D C:\Windows\inf
    2016-04-26 21:45 - 2006-11-02 06:33 - 00759582 _____ C:\Windows\system32\PerfStringBackup.INI
    2016-04-26 21:42 - 2015-11-12 12:13 - 00013368 _____ (SlimWare Utilities, Inc.) C:\Windows\system32\Drivers\SWDUMon.sys
    2016-04-26 21:42 - 2015-11-12 12:13 - 00000398 _____ C:\Windows\Tasks\DriverUpdate Startup.job
    2016-04-26 21:42 - 2014-09-22 22:50 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfd6d931ad4500.job
    2016-04-26 21:42 - 2014-04-19 18:15 - 00000000 ____D C:\Users\sixlove\AppData\Local\CrashDumps
    2016-04-26 21:42 - 2013-09-09 18:58 - 00000000 ____D C:\ProgramData\FileCenter
    2016-04-26 21:37 - 2006-11-02 09:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2016-04-26 21:37 - 2006-11-02 08:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
    2016-04-26 21:37 - 2006-11-02 08:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
    2016-04-24 16:35 - 2007-12-14 08:30 - 00000012 _____ C:\Windows\bthservsdp.dat
    2016-04-24 16:35 - 2006-11-02 09:01 - 00032556 _____ C:\Windows\Tasks\SCHEDLGU.TXT
    2016-04-23 12:52 - 2014-09-22 22:51 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfd6d9356718b0.job
    2016-04-23 12:19 - 2014-02-22 20:28 - 00000000 ____D C:\Users\sixlove\AppData\Local\LogMeIn Rescue Applet
    2016-04-23 12:03 - 2012-05-04 18:50 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
    2016-04-22 18:00 - 2009-10-29 21:27 - 00000446 _____ C:\Windows\Tasks\ParetoLogic Registration.job
    2016-04-21 11:12 - 2015-11-12 12:12 - 00000448 _____ C:\Windows\Tasks\DriverUpdate Scan.job
    2016-04-20 00:20 - 2009-10-29 21:27 - 00000420 _____ C:\Windows\Tasks\ParetoLogic Update Version2.job
    2016-04-15 22:07 - 2015-12-13 20:21 - 00002555 _____ C:\Users\sixlove\Desktop\Microsoft Word.lnk
    2016-04-13 03:45 - 2006-11-02 07:18 - 00000000 ____D C:\Windows\rescache
    2016-04-13 03:29 - 2006-11-02 08:47 - 00332944 _____ C:\Windows\system32\FNTCACHE.DAT
    2016-04-13 03:10 - 2013-08-16 20:38 - 00000000 ____D C:\Windows\system32\MRT
    2016-04-13 03:03 - 2006-11-02 06:24 - 132539272 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
    2016-04-13 03:00 - 2006-11-02 08:37 - 00000000 ____D C:\Windows\system32\XPSViewer
    2016-04-11 18:54 - 2012-08-06 22:58 - 00001901 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-04-11 18:54 - 2012-08-06 22:58 - 00001889 _____ C:\Users\Public\Desktop\Google Chrome.lnk
    2016-04-07 17:04 - 2012-05-04 18:50 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
    2016-04-07 17:04 - 2011-08-20 13:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

    ==================== Files in the root of some directories =======

    2009-02-05 18:53 - 2009-02-05 18:53 - 0024064 _____ () C:\Users\sixlove\AppData\Roaming\UserTile.png
    2007-12-21 23:40 - 2007-12-21 23:40 - 0000000 _____ () C:\Users\sixlove\AppData\Roaming\wklnhst.dat
    2009-08-09 20:51 - 2009-08-09 20:57 - 0002950 _____ () C:\Users\sixlove\AppData\Local\.ipc_copyrecord
    2009-02-21 23:52 - 2009-02-21 23:52 - 0000048 _____ () C:\Users\sixlove\AppData\Local\84756-11986-27475-00TC1-94865
    2012-05-13 14:26 - 2013-10-07 02:58 - 0000680 _____ () C:\Users\sixlove\AppData\Local\d3d9caps.dat
    2007-12-20 00:49 - 2014-02-17 21:27 - 0044544 _____ () C:\Users\sixlove\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2009-08-09 20:49 - 2009-08-09 20:49 - 0001232 _____ () C:\Users\sixlove\AppData\Local\iTunesPrefs
    2008-05-26 17:23 - 2014-04-16 15:17 - 0026396 _____ () C:\ProgramData\hpzinstall.log

    Some files in TEMP:
    ====================
    C:\Users\sixlove\AppData\Local\temp\AcsInstall.dll
    C:\Users\sixlove\AppData\Local\temp\APNSetup.exe
    C:\Users\sixlove\AppData\Local\temp\jre-7u65-windows-i586-iftw.exe
    C:\Users\sixlove\AppData\Local\temp\jre-8u31-windows-au.exe
    C:\Users\sixlove\AppData\Local\temp\SHFOLDER.DLL
    C:\Users\sixlove\AppData\Local\temp\tu17p84.exe


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-04-26 21:48

    ==================== End of FRST.txt ============================
     
    JusticeNY,
    #2


  3. to hide this advert.

  4. 2016/05/13
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    Additional scan result of Farbar Recovery Scan Tool (x86) Version:25-04-2016
    Ran by sixlove (2016-04-26 21:46:38)
    Running from C:\Users\sixlove\Desktop
    Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) (2007-12-14 12:21:47)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-3249766445-722992797-2274620919-500 - Administrator - Disabled)
    Guest (S-1-5-21-3249766445-722992797-2274620919-501 - Limited - Disabled)
    House (S-1-5-21-3249766445-722992797-2274620919-1002 - Limited - Enabled) => C:\Users\House
    IUSR_NMPR (S-1-5-21-3249766445-722992797-2274620919-1000 - Limited - Enabled) => C:\Users\IUSR_NMPR
    sixlove (S-1-5-21-3249766445-722992797-2274620919-1001 - Administrator - Enabled) => C:\Users\sixlove

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)


    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
    Adobe Acrobat 4.0 (HKLM\...\Adobe Acrobat 4.0) (Version: - )
    Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
    Adobe ExtendScript Toolkit 2 (HKLM\...\Adobe_3e054d2218e7aa282c2369d939e58ff) (Version: 2.0.2 - Adobe Systems Incorporated)
    Adobe Flash Player 21 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
    Adobe Flash Player 21 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
    Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0 - Adobe Systems Incorporated)
    Adobe Photoshop Elements 6.0 (HKLM\...\Adobe Photoshop Elements 6) (Version: 6.0 - Adobe Systems Inc.)
    Adobe Premiere Elements 4.0 (HKLM\...\PremElem40) (Version: 4.0 - Adobe Systems Incorporated)
    Adobe Premiere Elements 4.0 Templates (HKLM\...\PremElem40Templates) (Version: 4.0.0 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
    Adobe Soundbooth CS3 (HKLM\...\Adobe_19c4ee81f9cc4b3dffb9a17d9b648b2) (Version: 1 - Adobe Systems Incorporated)
    AOL Uninstaller (Choose which Products to Remove) (HKLM\...\AOL Uninstaller) (Version: - AOL Inc.)
    Apple Application Support (32-bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
    Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
    Ask Toolbar (HKLM\...\{5043442D-472D-5637-00A7-A758B70C0A00}) (Version: 12.10.0.3289 - APN, LLC) <==== ATTENTION
    ATI Catalyst Control Center (HKLM\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.007.0731.2233 - )
    Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
    ccc-core-static (Version: 2007.0731.2234.38497 - ATI) Hidden
    Cisco Connect (HKLM\...\Cisco Connect) (Version: 1.3.11006.1 - Cisco Consumer Products LLC)
    Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6021.5000 - Microsoft Corporation)
    Dell DataSafe Online (HKLM\...\{2C6C74C2-042F-4D36-B7B0-0C538FCF01AB}) (Version: 1.0.15 - Dell, Inc.)
    Dell Getting Started Guide (HKLM\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
    Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell)
    Dell System Detect (HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\73f463568823ebbe) (Version: 6.5.0.6 - Dell)
    Digital Line Detect (HKLM\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc)
    Driver Detective (HKLM\...\{5D6D605B-E4B7-490B-A794-9284BC3D2A8B}) (Version: 8.1 - PC Drivers HeadQuarters)
    DriverUpdate (HKLM\...\{E6617834-9398-4F95-9C05-2D87B192E1DF}) (Version: 2.4.3 - SlimWare Utilities, Inc.)
    ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
    FileCenter 8.0.0.23 (HKLM\...\{8BC914BF-F80D-47D9-BD1E-809EB6A7C23C}_is1) (Version: 8.0.0.23 - Lucion Technologies, LLC)
    Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)
    Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
    Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
    Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (Version: 1.3.29.5 - Google Inc.) Hidden
    HiDef Media Player 1.1.12 (HKLM\...\HiDef Media Player) (Version: 1.1.12 - HiDefMedia)
    HP Photosmart Essential (HKLM\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP)
    HP Product Detection (HKLM\...\{8A9FC225-75F6-4B5D-911C-0ED230565643}) (Version: 11.15.0009 - HP)
    HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    HP_Network_UserGuide (Version: 1.00.0000 - Hewlett-Packard) Hidden
    HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
    HPSSupply (HKLM\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Hewlett Packard Development Company L.P.)
    iCloud (HKLM\...\{79BD66B2-4DAE-4C3B-B08E-DC72E507C163}) (Version: 2.1.3.25 - Apple Inc.)
    Intel(R) PRO Network Connections 12.1.12.4 (HKLM\...\PROSetDX) (Version: - Dell)
    Intel(R) Viiv(TM) Software (HKLM\...\Intel(R) Configuration Center) (Version: 1.7.512.0 - Intel Corporation)
    iPhone Configuration Utility (HKLM\...\{FA54AFB1-5745-4389-B8C1-9F7509672ED1}) (Version: 2.1.0.163 - Apple Inc.)
    iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.)
    Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
    magicJack (HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\magicJack) (Version: 2.0.6073.4252 - magicJack L.P.)
    Malwarebytes Anti-Malware version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
    Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft Office XP Professional (HKLM\...\{90110409-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.2627.01 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    MobileMe Control Panel (HKLM\...\{5A9AA2C0-972F-4239-AA41-E409434194D5}) (Version: 3.1.8.0 - Apple Inc.)
    Mozilla Firefox 41.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla)
    Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
    MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    Music, Photos & Videos Launcher (HKLM\...\{D7769185-9A7C-48D4-8874-5388743A1DE2}) (Version: 1.00.0000 - Dell Inc.)
    PDF-XChange 4 (HKLM\...\{EA08048C-3823-4DC8-B169-1D5D11FFC19F}_is1) (Version: 4.0.201.0 - Tracker Software Products Ltd)
    PDF-XChange Lite 4 (HKLM\...\{B860298B-CE03-4DE2-B92E-422F2C20A2D8}_is1) (Version: 4.0.201.0 - Tracker Software Products Ltd)
    Product Documentation Launcher (HKLM\...\{89CEAE14-DD0F-448E-9554-15781EC9DB24}) (Version: 1.00.0000 - Dell Inc.)
    QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
    Roxio Activation Module (HKLM\...\{07159635-9DFE-4105-BFC0-2817DB540C68}) (Version: 1.0 - Roxio)
    Roxio Creator Audio (HKLM\...\{83FFCFC7-88C6-41C6-8752-958A45325C82}) (Version: 3.5.0 - Roxio)
    Roxio Creator BDAV Plugin (HKLM\...\{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}) (Version: 3.5.0 - Roxio)
    Roxio Creator Copy (HKLM\...\{619CDD8A-14B6-43A1-AB6C-0F4EE48CE048}) (Version: 3.5.0 - Roxio)
    Roxio Creator Data (HKLM\...\{0D397393-9B50-4C52-84D5-77E344289F87}) (Version: 3.5.0 - Roxio)
    Roxio Creator Premier (HKLM\...\{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}) (Version: 3.5.0 - Roxio)
    Roxio Creator Tools (HKLM\...\{0394CDC8-FABD-4ED8-B104-03393876DFDF}) (Version: 3.5.0 - Roxio)
    Roxio EasyArchive (HKLM\...\{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}) (Version: 3.5.0 - Roxio)
    Roxio Express Labeler (HKLM\...\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}) (Version: 3.2 - Roxio)
    Roxio MyDVD Premier (HKLM\...\{AAC90D5F-B8B1-4A06-B888-F3A241124D0D}) (Version: 9.1.573 - Roxio)
    Roxio Update Manager (HKLM\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 6.0.0 - Roxio)
    Safari (HKLM\...\{FA4C2D53-205F-4245-9717-F3761154824D}) (Version: 5.34.57.2 - Apple Inc.)
    Search module (HKLM\...\Search module) (Version: - Search Module) <==== ATTENTION
    ShopAtHome.com Helper (HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\ShopAtHome.com Helper) (Version: 7.10.2.6 - ShopAtHome.com) <==== ATTENTION
    ShopAtHome.com Toolbar (HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\ShopAtHome.com Toolbar) (Version: 7.10.2.6 - ShopAtHome.com) <==== ATTENTION
    Skins (Version: 2007.0731.2234.38497 - ATI) Hidden
    Sonic CinePlayer Decoder Pack (HKLM\...\{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}) (Version: 4.2.0 - Sonic Solutions)
    Sprint Desktop Sync (HKLM\...\{F818A41D-3535-4949-83BB-E41121697A97}) (Version: 2.00.0000 - Core Mobility, Inc.)
    TelevisionFanatic Internet Explorer Toolbar (HKLM\...\TelevisionFanaticbar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION
    TouchCopy 09 (HKLM\...\{8F3BE4DF-76F3-443A-A305-A14FC648010C}) (Version: 9.99 - Wide Angle Software)
    User's Guides (HKLM\...\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}) (Version: - )
    Viewpoint Media Player (HKLM\...\ViewpointMediaPlayer) (Version: - )
    WinZip 11.1 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5}) (Version: 11.1.7466 - WinZip Computing, S.L. )
    Wizard101 (HKLM\...\{A9E27FF5-6294-46A8-B8FD-77B1DECA3021}) (Version: 1.0.0 - KingsIsle Entertainment, Inc.)
    WordExtra (HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\WordExtra) (Version: 1 - hxxp://www.wordextra.com)
    XPS MiniView Gadget (HKLM\...\{A73BDB2A-E4A7-4FE8-960E-6A5C8BF76FCB}) (Version: 1.00.0000 - CompanionLink Software, Inc.)
    Yahoo! Toolbar (HKLM\...\Yahoo! Companion) (Version: - Yahoo! Inc.)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{062D6B05-B83A-46DE-81AD-1750FB7C8DE5}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{0696f815-a3a9-490a-bb14-9ec3350b1276}\InprocServer32 -> C:\Program Files\TelevisionFanatic\bar\1.bin\64SrcAs.dll (Mindspark)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{08613A51-6E3E-43CC-9ECF-DD58B5837341}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{153EDC41-A2CC-4BEB-9EC8-008242389E50}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{188028B8-D91D-4BE2-BABA-68E32BDE4420}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{28E74F15-18C2-465E-B545-6CC738121C68}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{2BF6042B-B9B1-46D9-A3F8-9C987FADD4C6}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{32E26FD9-F435-4A20-A561-35D4B987CFDC}\InprocServer32 -> C:\ProgramData\WebEx\WebEx\T30_MC\atucfobj.dll (Cisco WebEx LLC)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{40A222E2-93B1-45F9-9B07-0D1160A31A6C}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{6325A84C-E746-4007-A9C5-E4C1A50ED61F}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{82E5DF24-51E8-47CD-864A-F4BD5005AA73}\InprocServer32 -> C:\Users\sixlove\AppData\Local\MICROS~1\INTERN~1\DOWNLO~1\iCloud.ocx => No File
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{92B0265C-B929-4D42-BA54-75AA39C99198}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{9BCA87A0-5B8F-4500-A5AF-EA1279714FDF}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{BB17DE65-B548-48C2-AC73-1FD1996C7261}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{C77D3EEF-FDCA-4D37-B0D2-5FF650E07825}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}\InprocServer32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{EA70EB31-CBAD-4862-AFDA-DCFCC32722ED}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{EC9100F8-5918-4F1B-9CC1-4D34A64E0FE0}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{F1A1ABE3-F454-4DD9-B520-01F2EEC5F0DD}\localserver32 -> C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe (ShopAtHome.com)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {2173779B-45B7-45D3-ADEE-AD29EDB3D736} - System32\Tasks\Driver Detective-RTMRules => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2014-01-28] (PC Drivers Headquarters)
    Task: {3C0F8DB4-D59E-4246-98F0-15B08288EF39} - System32\Tasks\{E0FB1225-99DF-4A7E-91CC-1902632554AA} => pcalua.exe -a E:\SETUP.EXE -d E:\
    Task: {3C6FABCD-6B93-4959-B2B6-EDA250932275} - System32\Tasks\{0EB340C3-3EAC-4FA2-8967-1596DEB98B3A} => pcalua.exe -a "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" -d "C:\Program Files\HP\Digital Imaging\bin" -c -inst "#Hewlett-Packard#HP Photosmart 2600 series#1212094606" -d "HP Photosmart 2600 series" -testfax "yes "
    Task: {3E9ACA2B-90A4-4E43-9FF9-55BEDB9008D8} - System32\Tasks\DriverUpdate Scan => C:\Program Files\DriverUpdate\DriverUpdate.exe [2015-09-08] (SlimWare Utilities, Inc.)
    Task: {4D8B06DE-F363-4D53-B6A9-FE47962E662C} - System32\Tasks\{3C1801AC-C822-4A70-A718-80CFD89776B9} => pcalua.exe -a E:\setup.exe -d E:\
    Task: {51558F0E-867A-4609-8241-14C339588951} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-07] (Adobe Systems Incorporated)
    Task: {5AD023DA-34D1-4582-9D79-4578B5ACE11A} - System32\Tasks\ParetoLogic Update Version2 => C:\Program Files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe
    Task: {69A8FE97-6BED-459A-BDA1-BEE80A0C94B8} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2015-05-25] (PC-Doctor, Inc.)
    Task: {6EB6B50F-7D18-4A2A-886E-7AB792121068} - System32\Tasks\GoogleUpdateTaskMachineCore1cfd6d931ad4500 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {731538D7-12E8-4B23-A436-0578DCB6DB06} - System32\Tasks\Driver Detective-RTMScan => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2014-01-28] (PC Drivers Headquarters)
    Task: {7608AD8B-203F-453E-9151-00AC1471D928} - System32\Tasks\DriverUpdate Startup => C:\Program Files\DriverUpdate\DriverUpdate.exe [2015-09-08] (SlimWare Utilities, Inc.)
    Task: {7901FEFB-5C46-45E1-99CB-B08A25C273CC} - System32\Tasks\Apple Diagnostics => C:\Program Files\Common Files\Apple\Internet Services\EReporter.exe [2013-10-31] (Apple Inc.)
    Task: {84B062A3-2827-4DEE-B99C-ECEC70625461} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
    Task: {B0EDC4BB-6CD2-4A03-BEE7-2C125CC047E3} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
    Task: {B4F974E4-6DD0-4EC3-8918-054F185A9B07} - System32\Tasks\GoogleUpdateTaskMachineUA1cfd6d9356718b0 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {BA182B48-0DA3-474E-8CDC-58D6B4510B75} - System32\Tasks\ParetoLogic Registration => Rundll32.exe "C:\Program Files\Common Files\ParetoLogic\UUS2\UUS.dll" RunUns
    Task: {CCC67470-33E3-4ED4-9A90-7729829075C3} - System32\Tasks\{3301C434-394E-45C5-9BC8-11746E72A002} => pcalua.exe -a E:\setup.exe -d E:\
    Task: {DAC25BFE-D0EE-4D10-A0F0-C1BC6D0863E8} - System32\Tasks\Driver Detective-RTMScanRunOnce => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2014-01-28] (PC Drivers Headquarters)
    Task: {FD0DBA32-5B2A-4D47-980C-05C063056151} - System32\Tasks\Driver Detective-RTMUpdater => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2014-01-28] (PC Drivers Headquarters)
    Task: {FE07F371-56C6-4D3F-9B99-AEA3E8A3C576} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\DriverUpdate Scan.job => C:\Program Files\DriverUpdate\DriverUpdate.exe
    Task: C:\Windows\Tasks\DriverUpdate Startup.job => C:\Program Files\DriverUpdate\DriverUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfd6d931ad4500.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfd6d9356718b0.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\ParetoLogic Registration.job => C:\Windows\system32\rundll32.exe C:\Program Files\Common Files\ParetoLogic\UUS2\UUS.dll
    Task: C:\Windows\Tasks\ParetoLogic Update Version2.job => C:\Program Files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    ShortcutWithArgument: C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www-search.net/?pid=s&pi=2
    ShortcutWithArgument: C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www-search.net/?pid=s&pi=2
    ShortcutWithArgument: C:\Users\sixlove\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www-search.net/?pid=s&pi=2
    ShortcutWithArgument: C:\Users\sixlove\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www-search.net/?pid=s&pi=2

    ==================== Loaded Modules (Whitelisted) ==============

    2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
    2015-03-20 18:12 - 2015-03-20 18:12 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
    2011-11-10 03:11 - 2011-11-10 03:11 - 00037376 _____ () C:\Windows\system32\atitmpxx.dll
    2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
    2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
    2016-02-10 04:28 - 2016-02-10 04:28 - 00119296 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\XPBurnComponent\a521b739d8cb9a8ff090d90319ee74bf\XPBurnComponent.ni.dll
    2014-01-28 16:25 - 2014-01-28 16:25 - 00823168 _____ () C:\Program Files\PC Drivers HeadQuarters\Driver Detective\ThemePack.Default.dll
    2014-01-28 16:25 - 2014-01-28 16:25 - 00428448 _____ () C:\Program Files\PC Drivers HeadQuarters\Driver Detective\Agent.Communication.XmlSerializers.dll
    2007-08-23 16:58 - 2007-08-23 16:58 - 02070000 _____ () C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)


    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LMIRescue_26b2270b-3700-4837-aad7-08c67032fc5b => " "= "Service "

    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\dell.com -> dell.com

    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2006-11-02 06:23 - 2014-04-19 19:06 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

    127.0.0.1 localhost

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\Wallpaper\img24.jpg
    DNS Servers: Media is not connected to internet.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)

    MSCONFIG\Services: APNMCP => 2
    MSCONFIG\Services: FLEXnet Licensing Service => 3
    MSCONFIG\Services: STacSV => 2
    MSCONFIG\startupfolder: C:^Users^sixlove^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sprint media monitor.lnk => C:\Windows\pss\Sprint media monitor.lnk.Startup
    MSCONFIG\startupreg: cdloader => "C:\Users\sixlove\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
    MSCONFIG\startupreg: Driver Detective => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe /applicationMode:systemTray /showWelcome:false
    MSCONFIG\startupreg: ECenter => C:\Dell\E-Center\EULALauncher.exe
    MSCONFIG\startupreg: ShopAtHomeUpdater => C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeUpdater.exe
    MSCONFIG\startupreg: ShopAtHomeWatcher => C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeWatcher.exe
    MSCONFIG\startupreg: SigmatelSysTrayApp => C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
    FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
    FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [{24E07C88-1FE0-4AD8-8D9C-49FD9CDD032C}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe
    FirewallRules: [{41AFDD03-4BD8-4B6F-AF7A-78C1AE97A699}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe
    FirewallRules: [{310710D4-3185-4B5C-AC06-01B6210B44E5}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
    FirewallRules: [{1F552DBD-598F-4204-885D-180B5A3E9786}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
    FirewallRules: [{91F757BA-309C-4CBF-84AB-ECA49C65D9C5}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
    FirewallRules: [{9AD5E102-C65B-4CDB-B00A-DECD8379F614}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
    FirewallRules: [{B249DE5D-1B7A-4F82-994E-3746C8E6EB6D}] => (Allow) LPort=9442
    FirewallRules: [{F35D4BF5-0C0E-47F2-90C4-EE4C1FAD3C0C}] => (Allow) LPort=1900
    FirewallRules: [{FDD55FE3-7A37-4D2D-8176-171259BFF538}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [{EAD8BC82-DD43-485D-9987-DEA0C609C683}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [{8A78A203-AB19-4601-BD70-0B8C77FF2531}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zS4010.tmp\setup\HPZnui01.exe
    FirewallRules: [{6F96998A-ECB5-4208-B58E-BD392DFE9D12}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zS4010.tmp\setup\HPZnui01.exe
    FirewallRules: [{FAA1BA8A-7F39-45ED-A637-93E7916AEAE0}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zSB4F2.tmp\setup\HPZnui01.exe
    FirewallRules: [{72302808-BCFB-4EA5-B25E-E22041625815}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zSB4F2.tmp\setup\HPZnui01.exe
    FirewallRules: [{F06DCFB6-A927-4052-994C-55D5861E3F34}] => (Allow) LPort=80
    FirewallRules: [{D2EAD6F7-72E5-4B28-B7C0-9A4A72E4EFA8}] => (Allow) LPort=80
    FirewallRules: [{C2E0C213-9C05-43FB-BE0A-53BDE90B4A28}] => (Allow) LPort=80
    FirewallRules: [{1E9C3342-0932-41B4-A546-A9454D08CC87}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{370649EC-28C8-4A24-B518-467EA06668B8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{A0A5C2EC-DC82-4CF8-977D-69B434961388}] => (Allow) C:\Users\sixlove\Desktop\NOI.exe
    FirewallRules: [{B7357DB8-4502-4EA9-97F8-347129549142}] => (Allow) C:\Users\sixlove\Desktop\NOI.exe
    FirewallRules: [TCP Query User{C5EDDD49-A1BE-42C2-B731-BE16F33A5803}C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe] => (Allow) C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe
    FirewallRules: [UDP Query User{28B145DF-D6C9-4F4E-854A-8CFBCFA5D84B}C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe] => (Allow) C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe
    FirewallRules: [TCP Query User{B5BB450C-BD91-491E-BE8A-756696F5DF06}C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe] => (Allow) C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe
    FirewallRules: [UDP Query User{AA3BA73B-A695-40D7-8D42-EFCA45AA4099}C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe] => (Allow) C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe
    FirewallRules: [{049E5C54-3AC0-4FC3-AC66-2F28374F4EDC}] => (Allow) C:\Program Files\iolo\System Mechanic Professional\SysMech.exe
    FirewallRules: [{5092CAA6-77E1-473E-B143-201E4587445D}] => (Allow) C:\Program Files\iolo\System Mechanic Professional\SysMech.exe
    FirewallRules: [{2B194D6C-3B9C-419F-90C9-579D2F1F6281}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{D02EBA9E-0F79-4868-9A9C-37F476E03599}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [TCP Query User{6D596F79-BA79-4594-9227-4DCEE2A7280E}C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Block) C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
    FirewallRules: [UDP Query User{5370C081-FEC0-49A5-9F0B-E34A87E9B820}C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Block) C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
    FirewallRules: [{C0B46CCD-C51D-4DBE-AED5-052405F49F07}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
    FirewallRules: [{0289554A-83AB-4E3F-97E6-B19A87BA5290}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLDial.exe
    FirewallRules: [{A59473C7-903F-451D-B9F6-B7A0F94D83F2}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLDial.exe
    FirewallRules: [{BC7FEA3F-1763-4019-8C3C-6CE024EDD7EF}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLacsd.exe
    FirewallRules: [{46B47C58-D80E-4D7A-A62B-2A08E341CDEB}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLacsd.exe
    FirewallRules: [{CE7A8C2E-2A5A-4D11-B57A-1F23242AAEEA}] => (Allow) C:\Program Files\Common Files\AOL\1413747133\ee\aolsoftware.exe
    FirewallRules: [{330F4F61-6162-4A86-B77C-B01B3A125FB7}] => (Allow) C:\Program Files\Common Files\AOL\1413747133\ee\aolsoftware.exe
    FirewallRules: [{20F8CDC4-4900-4DA3-A7CB-65772AAAD891}] => (Allow) C:\Program Files\AOL Desktop 9.7\waol.exe
    FirewallRules: [{EB4815FA-02F1-4D47-BD93-4B7B998D7E60}] => (Allow) C:\Program Files\AOL Desktop 9.7\waol.exe
    FirewallRules: [{976994FB-03ED-4926-B08C-B039B159C010}] => (Allow) C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe
    FirewallRules: [{277D28D7-4875-4315-94BE-4BDA269C7BD4}] => (Allow) C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe
    FirewallRules: [{4BFC07C9-BC2D-471A-AF89-52E33DCA1E56}] => (Allow) C:\Program Files\Common Files\AOL\Loader\aolload.exe
    FirewallRules: [{E19B7698-0046-48D0-9F8F-1F4731378AED}] => (Allow) C:\Program Files\Common Files\AOL\Loader\aolload.exe
    FirewallRules: [{28B90287-A75D-4210-8A68-ECDAE51BDF68}] => (Allow) C:\Program Files\Common Files\AOL\System Information\sinf.exe
    FirewallRules: [{567D0C58-A6FB-4E8B-8F5F-13336BF4EC37}] => (Allow) C:\Program Files\Common Files\AOL\System Information\sinf.exe
    FirewallRules: [{D8CA5DA7-BB11-4E94-B4DF-3B6908DF10B5}] => (Allow) C:\Program Files\AOL Desktop 9.7\aolbrowser.exe
    FirewallRules: [{FEBC1544-E59B-4C89-947D-07AE6F39A10A}] => (Allow) C:\Program Files\AOL Desktop 9.7\aolbrowser.exe
    FirewallRules: [TCP Query User{6D312A6D-AF6E-4672-A96E-FF86D7E1916E}C:\program files\xbmc\xbmc.exe] => (Allow) C:\program files\xbmc\xbmc.exe
    FirewallRules: [UDP Query User{71995D42-EF64-464C-83DC-1484A811545F}C:\program files\xbmc\xbmc.exe] => (Allow) C:\program files\xbmc\xbmc.exe
    FirewallRules: [TCP Query User{81A44424-0AEF-4791-900D-5A694A0B3C7B}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
    FirewallRules: [UDP Query User{45DC5187-EB3A-4FEC-9C3B-71C81FD65D34}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
    FirewallRules: [{A76BC259-44AC-40B6-AD3B-511B84CF7538}] => (Allow) C:\Program Files\iTunes\iTunes.exe
    FirewallRules: [{162773E6-7479-4267-9567-8C9CB6307316}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
    FirewallRules: [{723BC2BD-F9DD-4212-A423-6128330B961F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
    FirewallRules: [{DD7DC078-028D-492B-B0C5-43DCC6762C26}] => (Allow) C:\Users\sixlove\AppData\Local\temp\7zS4599\HPDiagnosticCoreUI.exe
    FirewallRules: [{93E106E9-044E-42EC-84DD-24215F12E8B6}] => (Allow) C:\Users\sixlove\AppData\Local\temp\7zS4599\HPDiagnosticCoreUI.exe
    FirewallRules: [{EAA877FA-875C-4EC5-ABA9-B2BEA9B6FE89}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

    ==================== Restore Points =========================

    23-03-2016 17:33:26 Scheduled Checkpoint
    24-03-2016 11:34:13 Windows Update
    25-03-2016 00:00:03 Scheduled Checkpoint
    26-03-2016 00:00:01 Scheduled Checkpoint
    27-03-2016 00:00:01 Scheduled Checkpoint
    28-03-2016 00:00:00 Scheduled Checkpoint
    29-03-2016 00:00:00 Scheduled Checkpoint
    30-03-2016 00:00:04 Scheduled Checkpoint
    31-03-2016 00:00:00 Scheduled Checkpoint
    01-04-2016 00:00:01 Scheduled Checkpoint
    02-04-2016 00:00:01 Scheduled Checkpoint
    03-04-2016 00:00:01 Scheduled Checkpoint
    04-04-2016 00:00:01 Scheduled Checkpoint
    05-04-2016 00:00:01 Scheduled Checkpoint
    06-04-2016 00:00:04 Scheduled Checkpoint
    07-04-2016 00:00:01 Scheduled Checkpoint
    08-04-2016 00:00:03 Scheduled Checkpoint
    09-04-2016 00:00:03 Scheduled Checkpoint
    10-04-2016 23:13:08 Scheduled Checkpoint
    12-04-2016 00:00:01 Scheduled Checkpoint
    13-04-2016 00:00:01 Scheduled Checkpoint
    13-04-2016 03:00:12 Windows Update
    14-04-2016 00:00:00 Scheduled Checkpoint
    15-04-2016 00:00:00 Scheduled Checkpoint
    16-04-2016 00:00:01 Scheduled Checkpoint
    17-04-2016 00:00:01 Scheduled Checkpoint
    18-04-2016 00:00:01 Scheduled Checkpoint
    19-04-2016 00:00:01 Scheduled Checkpoint
    20-04-2016 15:02:26 Scheduled Checkpoint
    22-04-2016 00:00:01 Scheduled Checkpoint
    23-04-2016 00:00:01 Scheduled Checkpoint

    ==================== Faulty Device Manager Devices =============

    Name: Microsoft 6to4 Adapter
    Description: Microsoft 6to4 Adapter
    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
    Manufacturer: Microsoft
    Service: tunnel
    Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
    Resolution: Update the driver


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (04/26/2016 09:47:55 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module SysMenu.dll, version 1.0.0.5, time stamp 0x52b449c7, exception code 0xc0000005, fault offset 0x0006ce5c,
    process id 0x938, application start time 0xrundll32.exe0.

    Error: (04/26/2016 09:42:37 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, faulting module CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, exception code 0xc0000005, fault offset 0x00013190,
    process id 0xe94, application start time 0xCCU_Engine.exe0.

    Error: (04/23/2016 12:15:55 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application iTunes.exe, version 12.1.2.27, time stamp 0x55236809, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x05800000,
    process id 0x13d0, application start time 0xiTunes.exe0.

    Error: (04/22/2016 12:36:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Client application bug: DNSServiceResolve(5c:59:48:76:35:6b@fe80::5e59:48ff:fe76:356b._apple-mobdev._tcp.local.) active for over two minutes. This places considerable burden on the network.

    Error: (04/22/2016 03:52:24 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module SysMenu.dll, version 1.0.0.5, time stamp 0x52b449c7, exception code 0xc0000005, fault offset 0x0006ce5c,
    process id 0x1468, application start time 0xrundll32.exe0.

    Error: (04/21/2016 06:35:51 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application iTunes.exe, version 12.1.2.27, time stamp 0x55236809, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00ffffff,
    process id 0xe88, application start time 0xiTunes.exe0.

    Error: (04/21/2016 03:52:24 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application rundll32.exe, version 6.0.6000.16386, time stamp 0x4549b0e1, faulting module SysMenu.dll, version 1.0.0.5, time stamp 0x52b449c7, exception code 0xc0000005, fault offset 0x0006ce5c,
    process id 0xe14, application start time 0xrundll32.exe0.

    Error: (04/20/2016 01:03:54 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application iTunes.exe, version 12.1.2.27, time stamp 0x55236809, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000010,
    process id 0x4fc, application start time 0xiTunes.exe0.

    Error: (04/20/2016 12:52:56 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, faulting module CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, exception code 0xc0000005, fault offset 0x00013190,
    process id 0xdb0, application start time 0xCCU_Engine.exe0.

    Error: (04/20/2016 12:33:57 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application iTunes.exe, version 12.1.2.27, time stamp 0x55236809, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x9fb96f1e,
    process id 0x13a4, application start time 0xiTunes.exe0.


    System errors:
    =============
    Error: (04/26/2016 09:39:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058

    Error: (04/24/2016 04:32:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058

    Error: (04/24/2016 04:31:04 PM) (Source: EventLog) (EventID: 6008) (User: )
    Description: The previous system shutdown at 1:00:46 PM on 4/23/2016 was unexpected.

    Error: (04/20/2016 12:52:44 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058

    Error: (04/20/2016 12:49:18 PM) (Source: cdrom) (EventID: 11) (User: )
    Description: The driver detected a controller error on \Device\CdRom0.

    Error: (04/19/2016 04:50:23 PM) (Source: DCOM) (EventID: 10016) (User: sixlove-PC)
    Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}sixlove-PCsixloveS-1-5-21-3249766445-722992797-2274620919-1001LocalHost (Using LRPC)

    Error: (04/19/2016 04:50:23 PM) (Source: DCOM) (EventID: 10016) (User: sixlove-PC)
    Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}sixlove-PCsixloveS-1-5-21-3249766445-722992797-2274620919-1001LocalHost (Using LRPC)

    Error: (04/19/2016 04:49:45 PM) (Source: DCOM) (EventID: 10016) (User: sixlove-PC)
    Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}sixlove-PCsixloveS-1-5-21-3249766445-722992797-2274620919-1001LocalHost (Using LRPC)

    Error: (04/13/2016 03:30:21 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058

    Error: (04/10/2016 10:33:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058


    CodeIntegrity:
    ===================================
    Date: 2015-11-24 13:06:05.673
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-11-24 13:06:05.318
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-11-24 13:06:05.012
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-11-24 13:06:04.715
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-11-24 13:06:02.896
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-11-24 13:06:02.541
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-11-24 13:06:02.238
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-11-24 13:06:01.958
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-03-16 11:43:52.711
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2015-03-16 11:43:52.425
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz
    Percentage of memory in use: 35%
    Total physical RAM: 3325.03 MB
    Available physical RAM: 2137.41 MB
    Total Virtual: 6843.05 MB
    Available Virtual: 5856.05 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:283.04 GB) (Free:144.62 GB) NTFS ==>[drive with boot components (obtained from BCD)]
    Drive d: (RECOVERY) (Fixed) (Total:15 GB) (Free:5.3 GB) NTFS
    Drive g: (USB) (Removable) (Total:1.96 GB) (Free:1.2 GB) FAT

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 30000000)
    Partition 1: (Not Active) - (Size=55 MB) - (Type=DE)
    Partition 2: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
    Partition 3: (Active) - (Size=283 GB) - (Type=07 NTFS)

    ========================================================
    Disk: 1 (Size: 2 GB) (Disk ID: 6F20736B)
    No partition Table on disk 1.
    Disk 1 is a removable device.

    ==================== End of Addition.txt ============================
     
    JusticeNY,
    #3
  5. 2016/05/13
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    # AdwCleaner v5.114 - Logfile created 13/05/2016 at 17:57:36
    # Updated 27/04/2016 by Xplode
    # Database : 2016-04-24.3 [Local]
    # Operating system : Windows Vista (TM) Home Premium Service Pack 2 (X86)
    # Username : sixlove - SIXLOVE-PC
    # Running from : C:\Users\sixlove\Desktop\adwcleaner_5.114.exe
    # Option : Clean
    # Support : ToolsLib

    ***** [ Services ] *****

    [-] Service Deleted : APNMCP
    [-] Service Deleted : TelevisionFanaticService
    [-] Service Deleted : YahooAUService
    [-] Service Deleted : swdumon

    ***** [ Folders ] *****

    [-] Folder Deleted : C:\ProgramData\Yahoo! Companion
    [#] Folder Deleted : C:\ProgramData\Application Data\Yahoo! Companion
    [-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Detective
    [-] Folder Deleted : C:\Program Files\Yahoo!\Companion
    [-] Folder Deleted : C:\Windows\Installer\{E6617834-9398-4F95-9C05-2D87B192E1DF}
    [-] Folder Deleted : C:\Users\sixlove\AppData\Local\Temp\apn
    [-] Folder Deleted : C:\Windows\system32\config\systemprofile\AppData\Roaming\PC Tech Hotline
    [-] Folder Deleted : C:\Windows\system32\config\systemprofile\AppData\Local\SearchProtect
    [-] Folder Deleted : C:\Users\sixlove\AppData\LocalLow\Yahoo! Companion
    [-] Folder Deleted : C:\Users\sixlove\AppData\LocalLow\Yahoo!\Companion
    [-] Folder Deleted : C:\Users\sixlove\AppData\Roaming\Yahoo!\Companion
    [-] Folder Deleted : C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ShopAtHome.com Toolbar
    [-] Folder Deleted : C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\wordextra
    [-] Folder Deleted : C:\Users\House\AppData\LocalLow\Yahoo! Companion
    [-] Folder Deleted : C:\Users\House\AppData\LocalLow\Yahoo!\Companion
    [-] Folder Deleted : C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\korey@markus.me
    [-] Folder Deleted : C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com
    [-] Folder Deleted : C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com
    [#] Folder Deleted : C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com

    ***** [ Files ] *****

    [-] File Deleted : C:\Program Files\Yahoo!\Common\unyt.exe
    [-] File Deleted : C:\Program Files\Common Files\System\SysMenu.dll
    [-] File Deleted : C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_mapsgalaxy.dl.tb.ask.com_0.localstorage
    [-] File Deleted : C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_mapsgalaxy.dl.tb.ask.com_0.localstorage-journal
    [-] File Deleted : C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_us.yhs4.search.yahoo.com_0.localstorage
    [-] File Deleted : C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_us.yhs4.search.yahoo.com_0.localstorage-journal
    [-] File Deleted : C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www-search.net_0.localstorage
    [-] File Deleted : C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www-search.net_0.localstorage-journal

    ***** [ DLLs ] *****


    ***** [ WMI ] *****


    ***** [ Shortcuts ] *****

    [-] Shortcut Disinfected : C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    [-] Shortcut Disinfected : C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
    [-] Shortcut Disinfected : C:\Users\sixlove\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
    [-] Shortcut Disinfected : C:\Users\sixlove\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
    [-] Shortcut Disinfected : C:\Users\House\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    [-] Shortcut Disinfected : C:\Users\House\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
    [-] Shortcut Disinfected : C:\Users\House\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
    [-] Shortcut Disinfected : C:\Users\House\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

    ***** [ Scheduled tasks ] *****

    [-] Task Deleted : ShopperPro
    [-] Task Deleted : ShopperProJSUpd
    [-] Task Deleted : SMupdate1
    [-] Task Deleted : SPDriver
    [-] Task Deleted : Microsoft\Windows\Multimedia\SMupdate3
    [-] Task Deleted : Microsoft\Windows\Maintenance\SMupdate2

    ***** [ Registry ] *****

    [-] Key Deleted : HKCU\Software\Classes\AppID\ShopAtHomeHelper.EXE
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AudioCD\shell\PlayWithiMesh
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\DriversHQ.DriverDetective.Client.exe
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\yt.DLL
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\ytbbroker.EXE
    [-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [iWebar-bg.exe]
    [-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [Object Browser-bg.exe]
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TelevisionFanaticbar Uninstall Internet Explorer
    [-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.CookiesManager
    [-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.CookiesManager.1
    [-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.hxxpHandle302
    [-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.hxxpHandle302.1
    [-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.PostUrlWorker
    [-] Key Deleted : HKCU\Software\Classes\ShopAtHomeHelper.PostUrlWorker.1
    [-] Key Deleted : HKCU\Software\Classes\Toolbar3.CustomInternetSecurityImpl
    [-] Key Deleted : HKCU\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFCtrl.AniGIF
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\GameTreatWidget.GameTreatWidget.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\IMWeb.IMWebControl.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.Protector
    [-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
    [-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
    [-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\WMHelperiMesh.WMHelper
    [-] Key Deleted : HKLM\SOFTWARE\Classes\WMHelperiMesh.WMHelper.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar
    [-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.CacheLoader
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.CacheLoader.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.Clickstream
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.Clickstream.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.YTHelper
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.YTHelper.2
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.YToolbarBand
    [-] Key Deleted : HKLM\SOFTWARE\Classes\yt.YToolbarBand.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBAutoSearchAssistant
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBAutoSearchAssistant.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBAutoUpdaterAssistant
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBAutoUpdaterAssistant.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBCustomizerAssistant
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBCustomizerAssistant.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBGeneralAssistant
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBGeneralAssistant.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBMessengerAssistant
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBMessengerAssistant.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBSingleInstanceAssistant
    [-] Key Deleted : HKLM\SOFTWARE\Classes\ytbbroker.YTBSingleInstanceAssistant.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\YTNavAssist.NameSpaceCF
    [-] Key Deleted : HKLM\SOFTWARE\Classes\YTNavAssist.NameSpaceCF.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\YTNavAssist.NameSpacePP
    [-] Key Deleted : HKLM\SOFTWARE\Classes\YTNavAssist.NameSpacePP.1
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1CAE874F-F5C7-4BCC-BA46-9AD26DF35B93}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EFC0651C-B6D7-49CD-A6E0-B1CE9AB5FE46}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{08613A51-6E3E-43CC-9ECF-DD58B5837341}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{153EDC41-A2CC-4BEB-9EC8-008242389E50}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{188028B8-D91D-4BE2-BABA-68E32BDE4420}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{28E74F15-18C2-465E-B545-6CC738121C68}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{2BF6042B-B9B1-46D9-A3F8-9C987FADD4C6}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{40A222E2-93B1-45F9-9B07-0D1160A31A6C}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{6325A84C-E746-4007-A9C5-E4C1A50ED61F}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{9BCA87A0-5B8F-4500-A5AF-EA1279714FDF}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{BB17DE65-B548-48C2-AC73-1FD1996C7261}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{C77D3EEF-FDCA-4D37-B0D2-5FF650E07825}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{EA70EB31-CBAD-4862-AFDA-DCFCC32722ED}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{EC9100F8-5918-4F1B-9CC1-4D34A64E0FE0}
    [-] Key Deleted : HKCU\Software\Classes\CLSID\{F1A1ABE3-F454-4DD9-B520-01F2EEC5F0DD}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F02C0832-C85C-4B93-8C6F-9DF20121A10D}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{067ECE13-6DD2-47C7-8EFE-24DA8BC1D8DA}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{148132E6-626D-4A5E-8063-A761EB29A50B}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F8AB43ED-EC88-4DE7-B213-F89157D29C62}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6DC82D15-92F2-11D1-A255-00A0C932C7DF}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1E57256D-9F39-4267-AB39-D7813D644C5A}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31371420-098D-4C0E-A11E-EBEC2305DD01}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3A06AA27-D94B-48C2-BB55-9FD0FF2120E3}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{46140CE4-76FE-440E-AE88-4C2272BC05C7}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F9C4C5C-2BA8-4E00-A697-9F710BB1026B}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E7F49ED-8C94-4AAA-A407-3010D099B11A}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B8445FED-900C-4137-AD15-DDD2F6306B62}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BB27DF2F-6F05-4A42-9FFD-14696D795750}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9989BC14-9B5B-4B3B-8040-478FD1685E34}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4B8E39FD-ED07-4A41-9681-3D78DAFCEE66}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{596BB86E-F1E5-A1DE-3363-41AB634E77EF}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3492A3A-6715-9371-F8DB-1C48CC4DAAA1}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A63B48E9-1EC7-413E-9C48-3404BBF87BF3}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFDE11A9-FE0B-4548-B876-5EAC0A6CE86E}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F56ACA29-1C99-40F1-AC64-2E44C4F6BC71}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{12D3E096-0FDF-42CC-8F44-04944F9C1648}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22389F39-2CF4-47C4-B8B2-273BB16BF70C}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23E3CEB3-D63A-433E-A5D0-4DB1C501B915}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26A3152F-CF87-4C5B-8093-4D4B9EC084EB}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{29E3319C-4B3C-479F-8692-BDD2CA30BEDD}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{367BD1CD-74A3-451F-B1A4-6A2DE4129A2D}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{49F018EE-F362-4B5B-8EC8-BCF9246ABF21}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63B73044-FC1A-4FE1-991B-FDBD4CDAA868}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7207E52B-821E-4C05-A8D6-2965B2BE77CF}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{863FCF5D-DC39-4DA9-AF32-CB0025990EEE}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B09E015A-4D4E-4F8D-A436-95E19140947D}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B1E712C4-03AA-495F-B0F5-0F057E126E2A}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D13DC65C-C77B-4986-9078-DEA3D34C71BB}
    [-] Key Deleted : HKCU\Software\Classes\TypeLib\{B944FF5E-EC87-4E1E-8C49-2FF3BC573997}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
    [-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{61A2027D-B837-4080-A925-6E30E10DEF32}
    [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2FF49ED5-A3EF-410B-918E-97DECEB5996D}
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F02C0832-C85C-4B93-8C6F-9DF20121A10D}
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2FF49ED5-A3EF-410B-918E-97DECEB5996D}
    [-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}]
    [-] Key Deleted : HKCU\Software\AskPartnerNetwork
    [-] Key Deleted : HKCU\Software\SevereWeatherAlerts
    [-] Key Deleted : HKCU\Software\ShopAtHome.com
    [-] Key Deleted : HKCU\Software\ShopperPro
    [-] Key Deleted : HKCU\Software\Yahoo\Companion
    [-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar
    [-] Key Deleted : HKCU\Software\AppDataLow\Software\Object Browser
    [-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion
    [-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
    [-] Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
    [-] Key Deleted : HKLM\SOFTWARE\MetaStream
    [-] Key Deleted : HKLM\SOFTWARE\SearchModule
    [-] Key Deleted : HKLM\SOFTWARE\ShopperPro
    [-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc
    [-] Key Deleted : HKLM\SOFTWARE\Viewpoint
    [-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion
    [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShopAtHome.com Helper
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5D6D605B-E4B7-490B-A794-9284BC3D2A8B}
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search module
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E6617834-9398-4F95-9C05-2D87B192E1DF}
    [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5D6D605B-E4B7-490B-A794-9284BC3D2A8B}
    [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search module
    [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
    [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Yahoo! Companion
    [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E6617834-9398-4F95-9C05-2D87B192E1DF}
    [-] Key Deleted : HKU\.DEFAULT\Software\PCTechHotline
    [-] Key Deleted : HKU\.DEFAULT\Software\Yahoo\Companion
    [-] Key Deleted : HKU\.DEFAULT\Software\Yahoo\YFriendsBar
    [-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Object Browser
    [-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Yahoo\Companion
    [-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar
    [-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser
    [-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3249766445-722992797-2274620919-1001\Software\AskPartnerNetwork
    [-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3249766445-722992797-2274620919-1001\Software\ShopperPro
    [-] Key Deleted : HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar
    [-] Key Deleted : HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6A54B56C58C82a4688AFB93F42EA17B
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B506D6D57B4EB0947A492948CBD3A2B8
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\B506D6D57B4EB0947A492948CBD3A2B8
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\B506D6D57B4EB0947A492948CBD3A2B8
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
    [-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\Driver Detective
    [-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Driver Detective]
    [#] Value Deleted : HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Software\Microsoft\Windows\CurrentVersion\Run [Driver Detective]
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\ShopAtHomeUpdater
    [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\ShopAtHomeWatcher

    ***** [ Web browsers ] *****

    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_196378.value ", "%22/*%5Cr%5Cn@desc%5Cr%5Cn%5CtBase64%20encoder%20and[...]
    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_353990.value ", "%22var%20jw_urls%20%3D%20new%20Array%28%5C%22b570350[...]
    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_353991.value ", "%22function%20md5cycle%28x%2C%20k%29%20%7B%5Cnvar%20[...]
    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_483924.value ", "%22var%20jw_urls1%20%3D%20new%20Array%28%5C%22e3f510[...]
    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_483925.value ", "%22var%20jw_urls2%20%3D%20new%20Array%28%5C%22a4483f[...]
    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_bundledUrls.value ", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.internaldb.monetization_plugin_bundledUrls.value ", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
    [-] [C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\prefs.js] Deleted : user_pref( "keyword.URL ", "hxxp://aolsearch.aol.com/aol/search?invocationType=client_searchbox&query= ");
    [-] [C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_196378.value ", "%22/*%5Cr%5Cn@desc%5Cr%5Cn%5CtBase64%20encoder%20and[...]
    [-] [C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_353990.value ", "%22var%20jw_urls%20%3D%20new%20Array%28%5C%22b570350[...]
    [-] [C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_353991.value ", "%22function%20md5cycle%28x%2C%20k%29%20%7B%5Cnvar%20[...]
    [-] [C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_483924.value ", "%22var%20jw_urls1%20%3D%20new%20Array%28%5C%22e3f510[...]
    [-] [C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.Resources_resource_483925.value ", "%22var%20jw_urls2%20%3D%20new%20Array%28%5C%22a4483f[...]
    [-] [C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\prefs.js] Deleted : user_pref( "extensions.a2eb528f3950d48a3be4b5d7de6c8331ea41e199b6ca44d23ab8773f2d1973314com35510.35510.internaldb.monetization_plugin_bundledUrls.value ", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

    *************************

    :: "Tracing" keys deleted
    :: Winsock settings cleared

    *************************

    C:\AdwCleaner\AdwCleaner[C1].txt - [28269 bytes] - [13/05/2016 17:57:36]
    C:\AdwCleaner\AdwCleaner[S1].txt - [30311 bytes] - [13/05/2016 17:15:41]

    ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [28417 bytes] ##########
     
    JusticeNY,
    #4
  6. 2016/05/13
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    # DelFix v10.6 - Logfile created 22/04/2014 at 16:49:06
    # Updated 11/11/2013 by Xplode
    # Username : sixlove - SIXLOVE-PC
    # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)

    ~ Activating UAC ... OK

    ~ Removing disinfection tools ...

    Deleted : C:\Qoobox
    Deleted : C:\_OTL
    Deleted : C:\AdwCleaner
    Deleted : C:\Users\sixlove\Desktop\mbar
    Deleted : C:\Users\sixlove\Desktop\RK_Quarantine
    Deleted : C:\ComboFix.txt
    Deleted : C:\Users\sixlove\Desktop\adwcleaner.exe
    Deleted : C:\Users\sixlove\Desktop\AdwCleaner[S1].txt
    Deleted : C:\Users\sixlove\Desktop\ComboFix.exe
    Deleted : C:\Users\sixlove\Desktop\dds.com
    Deleted : C:\Users\sixlove\Desktop\dds.txt
    Deleted : C:\Users\sixlove\Desktop\Extras.Txt
    Deleted : C:\Users\sixlove\Desktop\FSS.exe
    Deleted : C:\Users\sixlove\Desktop\FSS.txt
    Deleted : C:\Users\sixlove\Desktop\JRT.exe
    Deleted : C:\Users\sixlove\Desktop\JRT.txt
    Deleted : C:\Users\sixlove\Desktop\logzz.txt
    Deleted : C:\Users\sixlove\Desktop\otl (2).txt
    Deleted : C:\Users\sixlove\Desktop\OTL NEW04212014_231814.txt
    Deleted : C:\Users\sixlove\Desktop\OTL.Txt
    Deleted : C:\Users\sixlove\Desktop\OTL.exe
    Deleted : C:\Users\sixlove\Desktop\RKreport[0]_D_04182014_233245.txt
    Deleted : C:\Users\sixlove\Desktop\RKreport[0]_D_04182014_2332452.txt
    Deleted : C:\Users\sixlove\Desktop\RKreport[0]_S_04182014_233026.txt
    Deleted : C:\Users\sixlove\Desktop\RogueKiller.exe
    Deleted : C:\Users\sixlove\Desktop\SecurityCheck.exe
    Deleted : C:\Users\sixlove\Desktop\TFC.exe
    Deleted : C:\Users\sixlove\Downloads\esetsmartinstaller_enu.exe
    Deleted : C:\Windows\grep.exe
    Deleted : C:\Windows\PEV.exe
    Deleted : C:\Windows\NIRCMD.exe
    Deleted : C:\Windows\MBR.exe
    Deleted : C:\Windows\SED.exe
    Deleted : C:\Windows\SWREG.exe
    Deleted : C:\Windows\SWSC.exe
    Deleted : C:\Windows\SWXCACLS.exe
    Deleted : C:\Windows\Zip.exe
    Deleted : HKLM\SOFTWARE\OldTimer Tools
    Deleted : HKLM\SOFTWARE\AdwCleaner
    Deleted : HKLM\SOFTWARE\Swearware
    Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

    ~ Creating registry backup ... OK

    ~ Cleaning system restore ...

    Deleted : RP #752 [Scheduled Checkpoint | 04/16/2014 15:07:59]
    Deleted : RP #753 [Scheduled Checkpoint | 04/18/2014 01:58:41]
    Deleted : RP #755 [avast! antivirus system restore point | 04/18/2014 18:35:35]
    Deleted : RP #756 [418 | 04/19/2014 03:26:04]
    Deleted : RP #757 [Scheduled Checkpoint | 04/22/2014 04:14:50]

    New restore point created !

    ~ Resetting system settings ... OK

    ########## - EOF - ##########
     
    JusticeNY,
    #5
  7. 2016/05/13
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.6 (04.25.2016)
    Operating System: Windows Vista (TM) Home Premium x86
    Ran by sixlove (Administrator) on Fri 05/13/2016 at 17:12:02.96
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 76

    Successfully deleted: C:\ai_recyclebin (Folder)
    Successfully deleted: C:\Program Files\mozilla firefox\defaults\pref\itms.js (File)
    Successfully deleted: C:\ProgramData\apn (Folder)
    Successfully deleted: C:\ProgramData\pc drivers headquarters (Folder)
    Successfully deleted: C:\ProgramData\searchmodule (Folder)
    Successfully deleted: C:\ProgramData\Start Menu\Programs\driverupdate (Folder)
    Successfully deleted: C:\ProgramData\viewpoint (Folder)
    Successfully deleted: C:\Users\Public\Desktop\driverupdate.lnk (Shortcut)
    Successfully deleted: C:\Users\sixlove\AppData\Local\downloaded installers (Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage-journal (File)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage (File)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal (File)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage (File)
    Successfully deleted: C:\Users\sixlove\AppData\Local\installer (Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\slimware utilities inc (Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\televisionfanatic (Folder)
    Successfully deleted: C:\Users\sixlove\Appdata\LocalLow\crazyforcricket_3k (Folder)
    Successfully deleted: C:\Users\sixlove\Appdata\LocalLow\crazyforcricket_3kei (Folder)
    Successfully deleted: C:\Users\sixlove\Appdata\LocalLow\televisionfanatic (Folder)
    Successfully deleted: C:\Users\sixlove\Appdata\LocalLow\yahoocouponaddon (Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\imesh.lnk (Shortcut)
    Successfully deleted: C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404} (Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\searchplugins\aolsearch.xml (File)
    Successfully deleted: C:\Users\sixlove\AppData\Roaming\shopathome (Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Roaming\wordextra (Folder)
    Successfully deleted: C:\Users\sixlove\Start Menu\Programs\arcadeparlor (Folder)
    Successfully deleted: C:\Windows\System32\ai_recyclebin (Folder)
    Successfully deleted: C:\Windows\System32\drivers\swdumon.sys (File)
    Successfully deleted: C:\Windows\System32\Tasks\Driver Detective-RTMRules (Task)
    Successfully deleted: C:\Windows\System32\Tasks\Driver Detective-RTMScan (Task)
    Successfully deleted: C:\Windows\System32\Tasks\Driver Detective-RTMScanRunOnce (Task)
    Successfully deleted: C:\Windows\System32\Tasks\Driver Detective-RTMUpdater (Task)
    Successfully deleted: C:\Windows\System32\Tasks\DriverUpdate Scan (Task)
    Successfully deleted: C:\Windows\System32\Tasks\DriverUpdate Startup (Task)
    Successfully deleted: C:\Windows\System32\Tasks\ParetoLogic Registration (Task)
    Successfully deleted: C:\Windows\System32\Tasks\ParetoLogic Update Version2 (Task)
    Successfully deleted: C:\Windows\System32\Tasks\PCDEventLauncherTask (Task)
    Successfully deleted: C:\Windows\Tasks\DriverUpdate Scan.job (Task)
    Successfully deleted: C:\Windows\Tasks\DriverUpdate Startup.job (Task)
    Successfully deleted: C:\Windows\Tasks\ParetoLogic Registration.job (Task)
    Successfully deleted: C:\Windows\Tasks\ParetoLogic Update Version2.job (Task)
    Successfully deleted: C:\Windows\wininit.ini (File)
    Successfully deleted: C:\Program Files\askpartnernetwork (Folder)
    Successfully deleted: C:\Program Files\crazyforcricket_3kei (Folder)
    Successfully deleted: C:\Program Files\driverupdate (Folder)
    Successfully deleted: C:\Program Files\pc drivers headquarters (Folder)
    Successfully deleted: C:\Program Files\televisionfanatic (Folder)
    Successfully deleted: C:\Program Files\viewpoint (Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\04HXJX8K (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1GW715BE (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2K71XHO5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\530O68Y0 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9TK9Q681 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D8XZHRUK (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GC092RXB (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S16DRNO4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SEH9ZMSA (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TFKQJEVZ (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\prefetch\DRIVERUPDATE.EXE-06063A69.pf (File)
    Successfully deleted: C:\Windows\prefetch\GOOGLETOOLBARUSER_32.EXE-2DD0DFA7.pf (File)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\04HXJX8K (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1GW715BE (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2K71XHO5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\530O68Y0 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9TK9Q681 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D8XZHRUK (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GC092RXB (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S16DRNO4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SEH9ZMSA (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TFKQJEVZ (Temporary Internet Files Folder)
    Successfully repaired: C:\Users\sixlove\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk (Shortcut)
    Successfully repaired: C:\Users\sixlove\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (Shortcut)
    Successfully repaired: C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (Shortcut)
    Successfully repaired: C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (Shortcut)
    Successfully repaired: C:\Users\sixlove\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk (Shortcut)
    Successfully repaired: C:\Users\sixlove\Start Menu\Programs\Internet Explorer.lnk (Shortcut)



    Registry: 21

    Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ApnTBMon (Registry Value)
    Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\TelevisionFanatic EPM Support (Registry Value)
    Successfully deleted: HKLM\Software\MozillaPlugins\@viewpoint.com/vmp (Registry Key)
    Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\APNMCP (Registry Key)
    Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\SWDUMon (Registry Key)
    Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\TelevisionFanaticService (Registry Key)
    Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\YahooAUService (Registry Key)
    Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page (Registry Value)
    Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4F524A2D-5350-4500-76A7-7A786E7484D7} (Registry Value)
    Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C98D5B61-B0EA-4D48-9839-1079D352D880} (Registry Value)
    Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31B823BE-0FD2-40ED-84E0-CA5B603D159B} (Registry Key)
    Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5A59A166-E37B-4912-A6E8-5CF0D580FB6F} (Registry Key)
    Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf} (Registry Key)
    Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{901E8648-A01B-460A-A29E-9D7C40438BAF} (Registry Key)
    Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf} (Registry Key)
    Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5d79f641-c168-40df-a32f-bacea7509e75} (Registry Key)
    Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cb41fc95-f1b3-4797-8bb6-1012ff62abba} (Registry Key)
    Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Main\\SearchAssistant (Registry Value)
    Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Main\\Start Page (Registry Value)
    Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)
    Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{C98D5B61-B0EA-4D48-9839-1079D352D880} (Registry Value)




    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Fri 05/13/2016 at 17:13:50.46
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
    JusticeNY,
    #6
  8. 2016/05/14
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    [​IMG] I don't see any AV program running which is required according to step 1 in our preliminaries.

    [​IMG] I didn't ask for running DelFix.

    [​IMG] I still need log from Malwarebytes.

    [​IMG] Uninstall following unwanted programs:

    Ask Toolbar
    Search module
    ShopAtHome.com Helper
    ShopAtHome.com Toolbar
    TelevisionFanatic Internet Explorer Toolbar
     
    broni,
    #7
  9. 2016/05/15
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    i have comodo av running

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 5/15/2016
    Scan Time: 5:06:56 PM
    Logfile: bytes.txt
    Administrator: Yes

    Version: 2.2.1.1043
    Malware Database: v2016.02.16.06
    Rootkit Database: v2016.02.08.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows Vista Service Pack 2
    CPU: x86
    File System: NTFS
    User: sixlove

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 458863
    Time Elapsed: 18 min, 47 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 1
    PUP.Optional.NextLive, C:\Users\sixlove\AppData\Roaming\newnext.me\nengine.dll, , [8adc70f19ffa9c9a41f356e59b661fe1],

    Registry Keys: 411
    PUP.Optional.Conduit, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CltMngSvc, , [0561bfa230691c1a891f5fd83ac77789],
    PUP.Optional.ObjectBrowser, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311281150}, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344284450}, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366286650}, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311281150}, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKLM\SOFTWARE\CLASSES\CrossriderApp0032850.BHO, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110311281150}, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110311281150}, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110311281150}, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.ObjectBrowser, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311281150}\INPROCSERVER32, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.Goobzo, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKLM\SOFTWARE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKLM\SOFTWARE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO.1, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.Goobzo, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\INPROCSERVER32, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.InboxToolBar, HKLM\SOFTWARE\CLASSES\CLSID\{042DA63B-0933-403D-9395-B49307691690}, , [fb6b78e94e4ba39329731d8eb052ce32],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{042DA63B-0933-403D-9395-B49307691690}, , [fb6b78e94e4ba39329731d8eb052ce32],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{042DA63B-0933-403D-9395-B49307691690}, , [fb6b78e94e4ba39329731d8eb052ce32],
    PUP.Optional.FunWebProducts, HKLM\SOFTWARE\CLASSES\CLSID\{33119133-0854-469d-807A-171568457991}, , [05613f2231682c0aaa0ec8d3758dc040],
    PUP.Optional.FunWebProducts, HKLM\SOFTWARE\CLASSES\TYPELIB\{03119103-0854-469d-807A-171568457991}, , [05613f2231682c0aaa0ec8d3758dc040],
    PUP.Optional.FunWebProducts, HKLM\SOFTWARE\CLASSES\INTERFACE\{23119123-0854-469D-807A-171568457991}, , [05613f2231682c0aaa0ec8d3758dc040],
    PUP.Optional.FunWebProducts, HKLM\SOFTWARE\CLASSES\TelevisionFanatic.SkinLauncherSettings, , [05613f2231682c0aaa0ec8d3758dc040],
    PUP.Optional.ArcadeParlor, HKLM\SOFTWARE\CLASSES\CLSID\{39AD0726-986D-40F9-972B-E3BFA24B7745}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.ArcadeParlor, HKLM\SOFTWARE\CLASSES\TYPELIB\{1F29738C-11D6-4AE5-A1B1-86D4D5F3A69C}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.ArcadeParlor, HKLM\SOFTWARE\CLASSES\INTERFACE\{96B4DEA0-F89C-475C-8124-B247260B7CB5}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.ArcadeParlor, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{39AD0726-986D-40F9-972B-E3BFA24B7745}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.ArcadeParlor, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{39AD0726-986D-40F9-972B-E3BFA24B7745}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.ArcadeParlor, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{39AD0726-986D-40F9-972B-E3BFA24B7745}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.ArcadeParlor, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{39AD0726-986D-40F9-972B-E3BFA24B7745}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.ArcadeParlor, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{39AD0726-986D-40F9-972B-E3BFA24B7745}, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{5d79f641-c168-40df-a32f-bacea7509e75}, , [2442baa7a1f866d0dba9cbd229d91be5],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{5D79F641-C168-40DF-A32F-BACEA7509E75}, , [2442baa7a1f866d0dba9cbd229d91be5],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{5D79F641-C168-40DF-A32F-BACEA7509E75}, , [2442baa7a1f866d0dba9cbd229d91be5],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{5D79F641-C168-40DF-A32F-BACEA7509E75}, , [2442baa7a1f866d0dba9cbd229d91be5],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5D79F641-C168-40DF-A32F-BACEA7509E75}, , [2442baa7a1f866d0dba9cbd229d91be5],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5D79F641-C168-40DF-A32F-BACEA7509E75}, , [2442baa7a1f866d0dba9cbd229d91be5],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5D79F641-C168-40DF-A32F-BACEA7509E75}, , [2442baa7a1f866d0dba9cbd229d91be5],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{c98d5b61-b0ea-4d48-9839-1079d352d880}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{04d2b915-19ff-41e9-994d-95dc898bea43}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{0597d3be-9a4d-4426-a8a7-572ad299852e}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E7F49ED-8C94-4AAA-A407-3010D099B11A}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{7007FA4C-E372-4485-ADFA-213B9E38D87F}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{7AE769DF-F151-4541-B820-031726E76E06}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{9DFFAA5F-44C6-4FF2-80EE-76368D0A2E75}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{F85503FF-ED21-4493-9A4A-B6765EB45D94}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{FEEAF56C-C91B-4D1C-9FC8-BAFD85F5F2B3}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TelevisionFanatic.SettingsPlugin.1, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TelevisionFanatic.SettingsPlugin, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{04D2B915-19FF-41E9-994D-95DC898BEA43}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{04D2B915-19FF-41E9-994D-95DC898BEA43}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C98D5B61-B0EA-4D48-9839-1079D352D880}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C98D5B61-B0EA-4D48-9839-1079D352D880}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C98D5B61-B0EA-4D48-9839-1079D352D880}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C98D5B61-B0EA-4D48-9839-1079D352D880}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C98D5B61-B0EA-4D48-9839-1079D352D880}, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{cb41fc95-f1b3-4797-8bb6-1012ff62abba}, , [92d4e1802b6e2f07cc78fba34eb420e0],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CB41FC95-F1B3-4797-8BB6-1012FF62ABBA}, , [92d4e1802b6e2f07cc78fba34eb420e0],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CB41FC95-F1B3-4797-8BB6-1012FF62ABBA}, , [92d4e1802b6e2f07cc78fba34eb420e0],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CB41FC95-F1B3-4797-8BB6-1012FF62ABBA}, , [92d4e1802b6e2f07cc78fba34eb420e0],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CB41FC95-F1B3-4797-8BB6-1012FF62ABBA}, , [92d4e1802b6e2f07cc78fba34eb420e0],
    PUP.Optional.InboxToolBar, HKLM\SOFTWARE\CLASSES\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, , [0066501120796ec8a87f138932d0ff01],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, , [0066501120796ec8a87f138932d0ff01],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, , [0066501120796ec8a87f138932d0ff01],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, , [0066501120796ec8a87f138932d0ff01],
    PUP.Optional.InboxToolBar, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, , [0066501120796ec8a87f138932d0ff01],
    PUP.Optional.InboxToolBar, HKLM\SOFTWARE\CLASSES\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, , [90d6e180fb9e60d6d94fbede3fc349b7],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, , [90d6e180fb9e60d6d94fbede3fc349b7],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, , [90d6e180fb9e60d6d94fbede3fc349b7],
    PUP.Optional.InboxToolBar, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, , [90d6e180fb9e60d6d94fbede3fc349b7],
    PUP.Optional.InboxToolBar, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, , [90d6e180fb9e60d6d94fbede3fc349b7],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1000_Classes\CLSID\{0696f815-a3a9-490a-bb14-9ec3350b1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002_Classes\CLSID\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0696F815-A3A9-490A-BB14-9EC3350B1276}, , [3b2b0b561386c17568658c1022e0e51b],
    PUP.Optional.SearchProtect.AppFlsh, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, , [84e2223fbddc8ea8340b2b803fc39b65],
    PUP.Optional.SearchProtect.AppFlsh, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, , [84e2223fbddc8ea8340b2b803fc39b65],
    PUP.Optional.Crawler, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}, , [6cfa4f1273264ee8802c05a6ba48748c],
    PUP.Optional.Crawler, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}, , [6cfa4f1273264ee8802c05a6ba48748c],
    PUP.Optional.SearchNet, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}, , [8ed88bd69cfde45235cdbac025ddc13f],
    PUP.Optional.ASK, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4F524A2D-5350-4500-76A7-7A786E7484D7}, , [6ff7273a435685b16c103b6727db847c],
    PUP.Optional.ASK, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4F524A2D-5350-4500-76A7-7A786E7484D7}, , [6ff7273a435685b16c103b6727db847c],
    PUP.Optional.BetterBrowse, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{964CFD95-89CB-4BA5-A122-36258EA0662A}, , [96d06bf6b1e8f046ad336930857df907],
    PUP.Optional.BetterBrowse, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{964CFD95-89CB-4BA5-A122-36258EA0662A}, , [96d06bf6b1e8f046ad336930857df907],
    PUP.Optional.FunWebProducts, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, , [ea7c2e33b6e369cdf6c1198237cb926e],
    PUP.Optional.FunWebProducts, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, , [ea7c2e33b6e369cdf6c1198237cb926e],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{970A72AD-2603-4B4E-BB28-AFF6AB80CCCD}, , [4224fa67ff9a85b1a148e4b902004ab6],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{970A72AD-2603-4B4E-BB28-AFF6AB80CCCD}, , [4224fa67ff9a85b1a148e4b902004ab6],
    PUP.Optional.SevereWeatherAlerts, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Severe Weather Alerts, , [7aecc1a018812c0ad8871df0718f8c74],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{fba7cbb1-fc93-4149-8862-d94451a7d167}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{608f7340-e221-4afb-a848-c4dad297cd58}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{966430CC-2097-45CA-8626-2C3F454C3297}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{02515cef-2063-4d64-b87a-d504c99d40dd}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{aed3b1e0-fabb-4c27-a2da-ec8352ee7e30}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{9989BC14-9B5B-4B3B-8040-478FD1685E34}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{BB27DF2F-6F05-4A42-9FFD-14696D795750}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{8be781d8-5e70-423d-82de-9e4756fce53c}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{026fd9ba-112b-4d9f-86ea-589e28016e8c}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{5ECA89E7-16B3-4F2D-A68F-4E938CAAD5BB}, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.FunWebProducts, HKLM\SOFTWARE\FUNWEBPRODUCTS, , [a7bfde83e7b251e5cbe02bbad231cf31],
    PUP.Optional.ObjectBrowser, HKLM\SOFTWARE\Object Browser, , [34328bd64c4d1f1762468b6be2214ab6],
    PUP.Optional.PCFixSpeed, HKLM\SOFTWARE\PCFixSpeed, , [2e38de83f7a2af871b6106ab887b49b7],
    PUP.Optional.TelevisionFanatic, HKLM\SOFTWARE\TelevisionFanatic, , [75f18cd58316a78f1182d92f36ce39c7],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\CrossriderApp0032850.Sandbox.1, , [76f086db6c2dde58dd4325b8a95ae917],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\CrossriderApp0035510.BHO, , [cc9aa8b9a3f65bdb928e4c910bf8d12f],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\CrossriderApp0035510.Sandbox.1, , [e1856ef3bfdad66051cf22bbd13219e7],
    PUP.Optional.InboxToolBar, HKLM\SOFTWARE\INBOX TOOLBAR, , [0165cc95a3f6181e9d64a942857ee11f],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{01B016A4-97BF-42BC-BC23-C32DB20C20BA}, , [283eafb2aeeb3df9c7a515c9739055ab],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C41E4A4-EE81-4356-A49E-BAD043346918}, , [44222c35a1f859dd0e5db22cea19ab55],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E0560D4-2BAC-4756-8B3C-D26A73883BC4}, , [b3b33928bddc93a3a8c25d812dd6ba46],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E7F49ED-8C94-4AAA-A407-3010D099B11A}, , [165092cf37622b0bfa6dda19a75ceb15],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89CC5A31-B592-4BB3-82F5-BD8ACA3E0BF0}, , [b1b561002277979f34338c67679ced13],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9DFFAA5F-44C6-4FF2-80EE-76368D0A2E75}, , [224418494356de58f770777cde25e11f],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCB9E43C-84FC-4C52-88D1-8A7E1C850359}, , [e97d78e9217838feaebdc519aa598a76],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7D6E605-01AE-44E7-8C0C-E6A7AE939DFC}, , [74f25110dcbde74fbeae1fbfcc37bc44],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB1D05EE-2FBB-4371-8076-183BCE8C930E}, , [2c3a1f420f8a90a66406d20ca95a30d0],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D09094B3-B426-4F16-A6D9-E211FE222127}, , [a4c2db865b3e33033a2d648f70934eb2],
    PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E017EF59-8C1E-4124-BF6D-6D647D01E352}, , [e284c1a0b8e1fa3c491e7a79867d9769],
    PUP.Optional.iWebar, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\iWebar, , [54121051fa9ffd39dc751ece09fa738d],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OBJECT BROWSER, , [d294fa67ecad96a06eba38e255afbb45],
    PUP.Optional.ASK.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5043442D-472D-5637-00A7-A758B70C0A00}, , [77ef0f52c0d994a2fc2eee261fe5817f],
    PUP.Optional.WordExtra, HKLM\SOFTWARE\WORDEXTRA, , [3a2cd78a9cfd9b9b3e5bb7587490c937],
    PUP.Optional.BetterBrowse, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util BetterBrowse, , [34325c05d4c539fddbf4eae8ed16d927],
    PUP.Optional.iWebar, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, , [392d0160396085b13814eefed72ce41c],
    PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\APPDATALOW\SOFTWARE\conduitEngine, , [42244918e1b89f9781a7a821d92af808],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\APPDATALOW\SOFTWARE\TelevisionFanatic, , [5a0c2041534646f05eb6f101ba4927d9],
    PUP.Optional.MyWebSearch, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{47053881-2311-4862-8D59-B3FBF8433D8C}, , [313572efdebb77bfe1cb48ad25de24dc],
    PUP.Optional.W3i, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9C5F4D55-F70A-42CD-9B80-79B3140D62CE}, , [293d0a570594e0562a9997759a6ac739],
    PUP.Optional.MyWebSearch, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A5B9C0F5-5616-47CD-A95F-E43B488FACCF}, , [de88c89988114aec6349c2338d763dc3],
    PUP.Optional.Inbox, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C04B7D22-5AEC-4561-8F49-27F6269208F6}, , [194d96cb3e5b7db91036876f659d3fc1],
    PUP.Optional.BetterBrowse, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\BetterBrowse, , [0264520f6d2c7fb75b71d9f9956eae52],
    PUP.Optional.PCFixSpeed, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\PCFixSpeed, , [bfa70f524752b0865d1c961bc83b758b],
    PUP.Optional.TelevisionFanatic, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\TelevisionFanatic, , [c89e39285742ce68dfb25eaa80848080],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [74f2cc95198024125cde2faece3554ac],
    PUP.Optional.iWebar, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, , [c99db2af326762d4ef5d8a62e51ef808],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\APPDATALOW\SOFTWARE\TelevisionFanatic, , [0a5c362bd3c6c571a56f5e947f842ed2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{01B016A4-97BF-42BC-BC23-C32DB20C20BA}, , [8bdbc29f7b1e63d33d0e994521e23fc1],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13F6E8FD-778C-437B-B6B0-BADED2BC3BAF}, , [6bfb352c9aff0d292625e7f77291857b],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1668EB62-FD7A-49A1-A4B6-5170CB5791D0}, , [382e253cfd9c82b496b5cc12d330bf41],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{17D673F2-4B1E-4019-A84C-C04B68D86E6F}, , [174f88d969302f07f259d8069a69639d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E2590B5-9461-4E89-802A-96BF3BA3DDD4}, , [d09669f82871ee48440657878380c13f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E2664B1-3345-4018-B836-8C573FBC6FD4}, , [ff678dd4ecad58de7bd034aa04ffc53b],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1EE8E95D-2B6B-4402-9A8E-591EA2239BB9}, , [fc6ad190d2c768ce4dfd5a8427dc8e72],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1FD009A6-12AB-496C-BEAA-3C6DA766BAFA}, , [fe6891d0eaafc86e1a300ed001023ac6],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{22A6B9ED-2D41-4054-9E21-91C0D947D49D}, , [c0a690d16831d660a3a702dc8f748b75],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25F7BBD8-1E8E-4198-A76E-50A61ECAA1AD}, , [a6c08cd50396cd6925255b8333d0b24e],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26953B5D-2DD4-4A0C-97A1-6E6966AD311B}, , [b2b4e37e09901b1bc189dd01a55e4eb2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26B4435F-C6F7-4325-9989-655278AC3174}, , [97cf0a579dfcb58164e66f6f7b8849b7],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26E3EF15-96E0-407A-A2EB-36BAF3C997A5}, , [5e081d448e0b44f2b595ca1411f26d93],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2707A888-B801-455B-8BC2-531A1CB6692D}, , [0264065bb8e139fd321815c9996ae61a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{294CCCC7-5B87-4E54-B081-78F18A276A1C}, , [a4c2adb44d4cad8960eaf1ed6d96c937],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29849F76-773B-4BCF-98C2-5FDAF9EB6553}, , [5c0a4e1385142a0cc3888f4f847f08f8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A26F8D6-6D25-4989-B4A4-C1676FFF97FF}, , [d88ea5bcf3a6f442eb5faf2f50b3f010],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A28925A-61F6-49B4-8EBD-995C31E68549}, , [70f668f99504ff37103a23bbbd46ae52],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C41E4A4-EE81-4356-A49E-BAD043346918}, , [69fdc79addbcde5847032ab4d92a9f61],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C56CA39-28A1-4493-A519-CABA891595C1}, , [273f5c05811895a18ebd2db122e1cc34],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CE39D7B-3159-4340-80B8-6A86933355D0}, , [bbab8bd6297016205eec1fbff112e917],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{31CD8368-568E-4FAA-A078-CD3BA1C7F5DC}, , [da8c89d83366b383de6d3da142c11ae6],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{31FE4F88-347A-4D4C-A02C-2C38E8E1C698}, , [392d4e1313866bcb88c3548aa65db54b],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33904C07-D156-4234-8E7C-9223C2EF7DA9}, , [bfa7ca97702938fe113929b5768d12ee],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35D471A8-9808-4248-961F-401526AEC96F}, , [fa6cfe63cfcafd395eed8559f80bf010],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A5A7D68-493B-4588-B638-8D1126C29761}, , [8cdad48d2c6df5416fdcd90540c38779],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{417A9513-AA6C-4B16-AD26-CD16ABC1A2A5}, , [570f273a3b5e59dd68e3b42a3bc8f30d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{42F3DAE1-D121-4A6B-997A-9EB397E92DEE}, , [273fb2af217860d68bc047979d660bf5],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4370D2DE-9FE8-413F-BEFA-EC48E36F55F3}, , [ea7c74ed8514b87ecb7f7c62e41f33cd],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{47CD4C6D-14C7-489B-B7CA-A06735AB24EE}, , [1551ff626e2bb97d65e6b5290ef5ab55],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B0B24D3-AAB3-4339-898F-FBBAD1341EF5}, , [5a0cd68bb7e20b2b98b25a849370c937],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BA7997B-D81C-4B15-8016-E4634D459048}, , [68febea383169f97d47738a633d0718f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BCCE268-F70B-44F7-9767-6AA89FEF3A7E}, , [c3a37de42475f83e60eb38a6f21153ad],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F019B68-C993-408F-8BD2-19411150C028}, , [93d38dd44c4d95a173d7a33b966dd42c],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50479689-6019-4F60-B3D8-9EBC1B1086C5}, , [580e6100d2c754e260ebcd11ce3515eb],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50BB4C09-CC45-4922-9A67-7BE229A7478D}, , [5610d190a6f34beb7fcbe4fa5aa9a25e],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{54836CA8-4814-47C4-B19E-E516F66410F4}, , [aabcadb453463501a9a1914d7f84d62a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5509EE24-A1E2-4D17-9DF6-142298FC6A3E}, , [2046baa7485152e4391295496d961ae6],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{57D19862-7287-41F0-ACA0-1B9FA99E8DC1}, , [b0b6451c6b2efd39ae9cce1010f39e62],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{587736F4-51EE-4A67-B5DC-F06AE1FBCC6D}, , [c4a2c899b5e40630cd7e38a6ed16b947],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58F72242-1D6B-45E1-813A-3EA229C48D1A}, , [392dcb96e5b43204d37834aa778c6f91],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{59B7BFB9-A8D5-4B44-9D91-AA7B8AE6334E}, , [70f685dca7f24de92327974730d320e0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5ADC9B56-AF01-4F33-9333-82E3C9E1341C}, , [e185a0c19dfcc57136159e4046bda858],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5EB9DCA1-F359-4753-A992-E5FD6530ABB6}, , [2046a4bd7b1e52e4b5968658c43f9c64],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5EE47754-E21A-4D60-B77F-90EDF651A1D3}, , [3d291f428a0fd75fa2a96975dd26847c],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F34DF1F-C7C9-4BA8-A1DB-6171E0BE88DA}, , [244267fabddc60d6b09ab32b63a00000],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6319EE58-B984-41CF-BA96-DFBD26216DAC}, , [3432e37e3b5e69cd4cffe3fb53b0a65a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6381C2BB-6BEC-4220-B9DD-5E25755480BC}, , [570fa4bd782185b1ae9dfee06e957888],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68486C44-83C2-4ED2-BD4D-4B9EABC497EA}, , [85e10061495050e65af19549996a6997],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6854DB12-87B5-4731-839F-C19CC714B88F}, , [1155c0a17e1bd95dd17aae30ef14f010],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{691F5FCB-7DA6-4D61-90F7-C644B6368DEC}, , [6600283949509f971337eef0897a926e],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E4B1616-4500-41C9-8567-A3818053E2D9}, , [0f57d28f316857dfd8727866699aa858],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EE8C9CD-ADC2-4211-9370-732BC1333179}, , [3f27b2afc2d7a195af9c29b5a360f808],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{70272616-D494-4BD3-BAE1-97CCEDC9D032}, , [273f352c7b1edb5b371333ab14ef27d9],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72C523B5-54E2-46CA-9837-8AD6A04961B1}, , [85e13c253e5b4bebed5d4c9248bbb050],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{756F8F29-163D-479E-8B62-DC9CBDF4FA4A}, , [a7bfe37ee4b595a19bafbb23f1125da3],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{78CCDEA6-7448-45B3-BA96-3F621E4D2AC2}, , [4b1b4120c4d5bc7a77d47866c93a15eb],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7B1A4D7D-161A-43C1-AC40-913EB9DB94F6}, , [6bfbb3aefd9cb77fb89314caec177f81],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7C527830-9DD7-4C9A-846D-E8C67063D224}, , [561064fd9108ee48371397473bc81ee2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D8C21C2-CB88-41A8-88E2-864FC1921232}, , [92d46cf5950481b50446dc02ce35966a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7DF28B86-5094-4419-9D92-27668863A0CE}, , [3630025ffd9c4ceadb6fac32877c867a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8218B0F6-AE49-47F8-A2C4-E774612D8A6A}, , [d195bea3c2d72115a0ab607e46bd26da],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{822D8001-BCF0-4743-A388-3A925E636787}, , [7fe7134ec6d36ec8ba908757bf44a957],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{847462C7-A608-4219-8B86-9B35EC67A122}, , [a4c2e9787e1b1125df6b7c62db28e11f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84D4C989-50A1-4B08-8D79-283BACCA5267}, , [7fe75a076e2b48eee1699e4017ec3cc4],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8749671A-2451-4E06-B538-C8B174F72B76}, , [c89e38297e1bd75f1734c915877c6f91],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8786BC4F-925C-47AE-B316-BAEE49A2F5A9}, , [3036e081722740f64ffc6b73877c0df3],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8838EC69-E414-4E7F-ABFA-BB2C97918026}, , [5610520f8d0c50e6a9a15d81dc27669a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{885449E6-A6A5-4125-BA5A-3C63F133D67B}, , [8adc65fca0f9f2446ae032ac5ba8ff01],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{896A4427-26F0-4B3F-9DFA-55A1FCDF9B47}, , [5f07f36ed0c9ba7c2e1dffdfb44fe31d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89CAF5E9-CDCB-4DA7-9FE9-19FC3F8A9225}, , [a8be21404d4cdc5a5deede008c7727d9],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C015AEF-3D83-4505-8129-7975D41D6393}, , [0d5970f1b2e771c5db70a8369073a759],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C22F977-D1D8-4282-8EE8-8E504B22E1F8}, , [9ec8baa73960e74fe5660ad4da2939c7],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8EBC428A-7348-4B6E-9299-42414026D02E}, , [155171f081184bebde6cc21c59aac63a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F5EDAEC-CBAA-42DD-8BE5-50D2C8621D40}, , [a8be1849594052e427236975a55e8080],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8FFB7F70-CB77-40FF-9A6F-C5F8A17216E1}, , [4c1a79e89603c96dbf8b548aae55e21e],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90930BC4-F65C-4073-A0A8-264413F8F287}, , [3b2b0b56217869cdac9fc11d0af9fa06],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{92E358BA-1268-448C-9C13-267EC43C445F}, , [73f31948148531050249d10d6e958080],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96558392-C0A3-47E9-973E-AD25B5364A59}, , [0a5c4918e9b048eeeb60419d897aaf51],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97D5261A-7B76-47B5-BD43-D133FA9A17D1}, , [b5b1f869c6d337ffe763bb23a360bb45],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B3058EB-15FB-4F5C-B99B-8D971C5869B4}, , [fa6c2140e3b6c3733417e8f653b03ac6],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9E6D79D2-6731-4B85-BDC3-661B73CE7913}, , [f57192cffb9ee84e66e56c7237cc8c74],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9ED43CD7-B4F5-472E-9553-212D92362D60}, , [d88e89d86f2ab97d3714cd111ee503fd],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9FA35E06-DD56-4C08-A2FB-78DA2DCA8E5F}, , [70f6bba64a4f90a64703a23c7b8839c7],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3AC944A-E6AB-493D-B549-141F25BFD8FA}, , [2f37283994053cfa59f1f5e93fc47888],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4DA50C3-68D4-4C35-8B3E-EF37E429E169}, , [92d464fd1089989e5cee736b24df13ed],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A5F091BA-8573-4B87-A3BD-D62089409427}, , [e581065b0d8c56e0f456c61853b01ee2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A80AB118-F985-4DE9-8E58-CF3DB483EFF1}, , [e97dea77f1a844f254f6d10d659e26da],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ABFAC3D3-FDDF-4E5E-BAB6-98D19EDE2921}, , [4f17fa67b5e40333b79425b916edfe02],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC12E656-A7C1-493B-892F-B5815A4B4B9D}, , [eb7b164b7623082ed4776d7130d3c838],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD51BB6B-D071-4772-A3A7-735CEC10CFA0}, , [e97d5d04a8f17db94901449a60a32dd3],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE54B278-AB06-4112-BB15-DEDDE019622D}, , [b1b5372a58411a1c61e9dfff8d7621df],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE88D546-72AA-45C1-BA57-49DD2B41B65A}, , [20462b363f5a1d1992b821bdcf3420e0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEF5DEBB-2B59-410E-9887-E12DFB5751DE}, , [e97d421fefaa79bda1aad40aed16fd03],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B026C802-B815-4C43-9EF8-81D1772E94C1}, , [5214f76a6d2c2e08d27922bcd62dd32d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2FB693D-A980-4246-BA1C-DED1CAE9BD95}, , [afb7f36e91086ccaff4bba24c3407e82],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B73E97C5-EE6F-4604-9BA0-A9325033A45C}, , [81e5154c9cfd4aec96b5dd0117ecff01],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B77096AD-F183-4351-BE52-F4F27446CAB6}, , [7ee829382d6c3ff7e06a39a546bd54ac],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B96EAA2E-97A7-4CEB-B094-E85B3CDFE9C2}, , [3036df8282173df91d2ed20cfb08c040],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B9E1A92F-7E1C-4A50-B345-11F72821E1CF}, , [7de98bd6049588ae0b406e70c3406a96],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BB478940-CDD0-4F8A-AD5F-40F89D7A7D2D}, , [ec7a8ad72c6d2511fb4fd509de25a65a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BB824D0E-9C55-4A5E-A15F-FCCD59DFB0EA}, , [cb9bca9746535fd7c2889549768d12ee],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BBEC03E9-A978-4C45-B3A9-705DE0FFCFBF}, , [2442045da2f78caa72d8bc220ef5768a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0F056D0-3A18-44F0-9E2A-B18A1F2AB5E6}, , [88deeb760891ed49311a7a64e81bff01],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2DCF4C8-4440-41FC-BC49-CFF050CDEB45}, , [0066ed745d3c0f27b398518dc73c01ff],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C312D50D-6954-4D7A-A484-EE653A46E223}, , [a6c064fd3b5e171f94b7647a05fed030],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3A843B0-9C47-4654-A247-50FE5A48DCC6}, , [cb9b0c55fc9d1c1afa51e2fcdb2860a0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C596C201-E01A-4B9D-87F6-C46B7D5583C2}, , [9cca6bf67227fa3c64e7d80621e26f91],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB1D05EE-2FBB-4371-8076-183BCE8C930E}, , [ce98bea3b6e37fb7272229b515ee1ae6],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D17D783F-A268-4A8B-A52D-8527FCFB6128}, , [273ffe63f5a40a2cb694b7273ec58977],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D5731DB3-CBB1-4A07-9D13-A7FAE9FA7755}, , [1a4cf869b5e4ae887fccb7277390dc24],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D659C046-E54C-4F16-A77D-5F397534B0CC}, , [9dc99ac7ddbc989e2a203aa4689b48b8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D88D8E0B-CAAF-403A-B825-703B8EEF1A5E}, , [590d501127727db9f852e8f607fcd729],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DE61084B-EA55-46C2-8E90-D3907B659EAF}, , [b1b5025f792015212a218e502cd720e0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DEFDEFD8-D2F1-48BF-8F8B-623DF5B3E4AB}, , [fc6aacb51e7ba19551f9f6e8c83b09f7],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E034C4C0-A8AD-40BA-8349-C2E04742BC67}, , [fb6bc89991080a2c1d2d2cb21de62fd1],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1A8F853-E0C2-4887-B29F-E395E77B73A6}, , [df875110217810260b3f8757669db44c],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8A6E1B0-8497-4B14-AAD4-4E5A96E6282C}, , [a4c2baa789107cba94b7e9f5679c1fe1],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA3545F0-E0D6-4472-8FA6-C11D6F56B97C}, , [085eeb763d5c88aeee5d31ad9271c53b],
     
    JusticeNY,
    #8
  10. 2016/05/15
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EBD01E19-DA20-43E1-BAF6-8E2391CDEB39}, , [61059cc5b1e8b383c982657927dcbb45],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC60A1F4-9712-4563-859B-263A5A5A337B}, , [b1b595cc5b3e0e2861e99648a95a31cf],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED30D3A9-4003-48EC-90F6-458AD1DE6B87}, , [c1a548197b1eb284fb4f8d51659ebe42],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ED5CB631-4BBE-4FD7-AC5E-AFCAD7D92576}, , [ec7a73eea3f6b48267e36e70f60ddf21],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F31C46A4-5DC6-4DF0-ABD3-563CBB33A2E1}, , [05615b06fd9c55e19fab6f6fb94ae11f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F801F8EC-D9BD-418F-926A-157DB99E8048}, , [5d09441da2f761d5e16a5886847f59a7],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9705EA4-BAE2-4499-ABB6-7F791A928B72}, , [f6703a27aeeb2511c58626b8768d9a66],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9ABF1EB-2B90-4595-B1AF-FA81C1676752}, , [70f6f66b2b6e6acc7ad0875734cf3fc1],
    PUP.Optional.SevereWeatherAlerts, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SevereWeatherAlerts.exe, , [462021401881f6405655c23f4aba26da],
    PUP.Optional.WordExtra, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\WORDEXTRA, , [9ccae27f752474c29afe2fe08183ff01],
    PUP.Optional.APNToolBar.Gen, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\AskPartnerNetwork, , [73f394cd6237152149a016e69171bd43],
    PUP.Optional.PCFixSpeed, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\PCFixSpeed, , [d88eca972d6cf24485f4832e19eab54b],
    PUP.Optional.TelevisionFanatic, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\TelevisionFanatic, , [30361051cccd280e127fcc3c4bb96d93],
    PUP.Optional.MindSpark, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\APPDATALOW\SOFTWARE\TelevisionFanatic, , [2a3c451c9702ce68d53f12e0897a51af],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13D83274-EB9D-40C7-96A1-969AC236F415}, , [ca9c035e8910e650f15a8b5352b1de22],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{14AA25B6-EB26-47AC-8695-4D218F786DCC}, , [a2c438293168ce6874d6607e47bc56aa],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A6430CF-3B22-489D-A210-FA9CF3CD92E1}, , [580e0e53e8b1d462de6dd20c1be846ba],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1BE79E30-697E-4568-BEE4-28793DAB4140}, , [8dd9f66b039636000c3e8b53c24153ad],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E803EF3-B18B-4926-8FBF-34E79DD5417B}, , [1e48f170b6e37abce16af2ec01028a76],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{24E6AF48-1FCA-450B-A169-A9526C5F98A4}, , [0b5bcd9432674ee8ea60d905f90a5da3],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25733CB0-DE9B-426E-AC27-51DF933840D5}, , [bea898c9495045f1a2a86a7463a05aa6],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26F3EBF1-7628-48F5-AFF2-A7F5C3E050DF}, , [5412fd64504970c699b21ac40df6b24e],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A1E9E8A-1C6A-422E-BA79-90FF38458273}, , [293d4f12158459dd64e7ab33976cdf21],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B1078DD-ABBC-47B6-A16C-D317D6A4963F}, , [90d67ee314858caa3714b32ba65dca36],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BC8CEB3-FED8-4C34-8B9E-B0B082B4BC9A}, , [bea859083366cd69a5a5bc224cb751af],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2E562F34-7185-472C-88FE-A0B61AADCEAD}, , [0264421f3d5c42f414367a6445be0ef2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3100B798-FD66-40E6-9481-30A4AE5F5EEC}, , [fe6885dc0f8a33035feb39a5e41fc43c],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{31BEDC86-2AF7-4F09-BD56-38237A4B3B79}, , [5214d28f3366f244c58531adb84bb848],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32C356F6-E85C-42E1-AB66-47C34FE3BB9F}, , [fb6bacb55049dc5a50faab335da6c43c],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{336DC3AF-1698-4BD8-A0FB-18BB10E13E5B}, , [c3a382df3a5ffe3889c28e50c43f50b0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3483658F-11B6-4AB5-9553-456662747F1C}, , [93d32c35a0f99c9a5af0ca1438cb9e62],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A81FF57-C9AE-49ED-8E3C-4AC59AF52572}, , [5115b6ab1980fa3c6cde7f5f2ad922de],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3ADCE15C-2605-48B5-89DB-10EE97C6F8C9}, , [9accc69b1c7dca6c19317a6457acd12f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3B4E6076-3287-409B-8B1F-A21ACF94874D}, , [bbab154cc6d38caaf258fee017ecef11],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3BF582DE-91B7-4F7C-A2F7-10AFDAFA67F9}, , [570f1c45e1b8e452f754da0433d0b64a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C761B32-C683-48B5-963F-EAE669A39751}, , [7ee875ec138661d568e2647ac2418977],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D6B3B01-A43E-4041-B6C1-B7ED6FE95A3D}, , [9dc999c84c4dd75fa6a423bbd42fbe42],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{41A78387-9C0E-4967-BA28-FA8398717FDD}, , [e383a5bcf3a6082eb7944c9281821ce4],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{42205BDF-E6EC-4F61-8CD7-24BE52A36CEE}, , [a7bfc29fcfca092dcf7cfbe3996ad62a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{42F94D99-B37C-4BCB-9122-6AE417C72AB7}, , [b3b3c899e1b8ed49f853a43a0af9fa06],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43D6F603-891F-460A-AE6E-2D1C6079BB71}, , [4b1bd38e5445d660cd7d5886a85b9868],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43FD914C-410D-451B-876F-B0732B1D41A1}, , [4d1969f8049543f360ea2fafc34007f9],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4507B353-1739-418D-A1E3-57D9F7621DC3}, , [0b5b134ed7c2b1851f2b7b6340c336ca],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C042609-7068-4B41-BCDB-8498E2FCE250}, , [5b0b76ebaaefa492f555e6f8aa598a76],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CD38D21-87FB-42E0-BF1F-11A621C9187D}, , [df8761003d5ce254420813cb35ce8b75],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F247864-F367-465A-B132-D0D2AC2E35E1}, , [f274a6bb6c2d96a070da4995c53e0ef2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FD207DF-8488-4B0A-9456-6B919FDDE598}, , [f96d431e6d2cd2645cef34aae02301ff],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{50BB4C09-CC45-4922-9A67-7BE229A7478D}, , [1d4920414c4d67cf4a00bf1fd42fe818],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{530F0BA9-B6C3-4A1A-A87F-E732BB569770}, , [13533f22a0f940f60d3e9a4480834db3],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{55421A6E-9B28-4FDE-ACAA-153B27516050}, , [6600243d782195a1c18ad30b1ae97d83],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{567B064D-E946-4C34-94AE-AC5976D4FD2B}, , [c0a62a378c0d0333a0aa1ec044bfe61a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{57C1831E-E8E9-469D-9728-9A8C6D85389E}, , [87dfe978a7f2a88ebb8f7b6334cf837d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5812A8A0-1F41-4C35-A7D0-F45EE265693B}, , [89dde978e2b738fe2c1e12ccde25f10f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A08A29A-F030-4949-BD7F-183CBD2B94A7}, , [80e674ede4b5b482bf8cffdffe057987],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F0D3612-CE60-4766-B85E-71C3DB467F55}, , [4d19035e2c6d44f24cfe1fbf6d962fd1],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F39FC11-4221-4121-A6BB-D6EE85FA723F}, , [c4a2bea3683180b61f2ce7f73ec5f010],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5FFE52C0-CFA9-4667-8C78-26807F35E193}, , [471f035ee8b156e074d617c7e71c28d8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60A204F6-EF6E-4381-9C36-4E9986A5B9F4}, , [5a0cbda47d1cba7c7cceba24c43f9a66],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60C54C41-C4CE-4BB5-913D-6B14F0DBB77D}, , [3b2b80e13e5b092dfa50b925000351af],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6274A070-AFCB-4366-8CEE-69863094ABE9}, , [98ce66fbaaef00363f0b20be689b8977],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{656434DB-31B5-442E-AD48-4B1F67C6C534}, , [c5a128398a0fe74faf9cc11d7192b34d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{67123B09-9E73-4138-A85C-EB64FB78A13C}, , [81e5e978b6e352e4fe4cf8e6d52e8878],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{690D8834-3B7C-459C-A119-7995F551744E}, , [dd891a47089180b6cb80ae30798a6e92],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F278011-68FA-415E-A25B-8259CA77BBB7}, , [3b2ba0c1257483b351faac32ca39e31d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F6E2975-BECE-40E6-8B12-589EBDD748E7}, , [7fe7aeb3dabf89ad25250ad48083cd33],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7018F6FE-81B0-4FC8-A5E2-52546D527357}, , [5e082d3451489f9786c49846c3400ef2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{70F60DEC-F688-4106-86C6-72C5395D5035}, , [7beb5f023465ae88c4878a54f60d619f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72251EA9-6255-4002-9BAA-D42F7D86122F}, , [0d59f071e7b27eb8b6942bb3ad5660a0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{730490BD-314C-4662-A85A-5E3ED1EE92FE}, , [c5a199c81c7db28479d2954962a1e917],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{780A492B-B209-40A3-BC60-B72D1811C8F8}, , [1f477be62a6fbe782921815d6e95ca36],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{78F581DC-5001-40AE-BF6B-B62FD85E6CB1}, , [67ffc49ddebb67cf3d0e23bb946f9b65],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7BC7C333-AE4C-4380-9F2B-D0A969C0E9B6}, , [92d41051e1b80b2be268409e649f9a66],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D7250B4-CAF9-4ACB-904E-9F94C68894A6}, , [ec7a0c55c7d2c96d14379747778c0af6],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F27C688-6D40-4244-ACFE-3DE5E8A642D5}, , [8ed8ca97bddc3cfadd6e12ccc1428e72],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8097D7AC-DD98-433B-BF91-C1FFD4D2FE8F}, , [cd99d38efa9f81b53f0ca23c21e2d12f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{810D0DF1-F1C4-4A91-9A91-2DDFFF34C118}, , [a4c262ff3d5c79bdb695ad317b88768a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{819F7D01-9FA8-48DD-B577-2573AA72C814}, , [fd6979e89dfce15598b23ea046bdfa06],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84E9D640-8491-4F9A-8750-DD298737CC67}, , [82e4ff62badfbe7827236777f90a9d63],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{85C72A54-52D4-45C5-A245-55B179DFDAD0}, , [dc8ae879fb9ee6501e2c37a7c14243bd],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8832A003-92E7-47F7-87DC-E745F8792667}, , [3630c69bc6d3c57189c17f5fe3205ea2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89D2A302-BC72-49EC-A793-5FD39D6EE488}, , [77efdc85d6c3d95de8624797a45f32ce],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C1D67BE-3E26-4C5A-8242-82DFC85B7E51}, , [75f14c15c6d3ba7c89c18856cf34a15f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C4B0392-4647-435E-92D1-971DB1E844A8}, , [3f27c1a00b8e0c2aa8a39747a2616997],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8CC6343B-5817-491E-8435-7CE4B4AA6AB1}, , [3b2bc899afeaf73f70da7569b152c13f],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93569B46-C13A-4E11-BEBC-EB6DAA4DF8B7}, , [0d5994cd7b1eda5cf159b12dcf348f71],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94AB06CC-947E-4E05-8FFD-1C848FC15713}, , [dc8ace939cfd3006f1594896b25138c8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97D5261A-7B76-47B5-BD43-D133FA9A17D1}, , [2541342da2f7122493b737a79e65c23e],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9F278F6C-2ED3-436E-B867-254EAF16F8DF}, , [4a1ca8b931680036c189e3fb4fb4cd33],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A35A73D5-D135-4F61-ACE0-7D3CAE1C3763}, , [71f5c29fe5b454e2c4868d51649f50b0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A485B601-A41A-4D94-926B-C0D5AD595828}, , [c2a4a7bad1c8f442a4a7528cff04ed13],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A5DEDD81-9073-444A-B5B2-9A338FC4D4EA}, , [78ee70f1633681b5a6a5b02ece354db3],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A676D8D1-5496-4995-B68C-9A361BED3B98}, , [91d5fd642d6c4de9fb50c816d82b31cf],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A8C9B734-733D-4D13-86B5-D1FE906E9B2D}, , [d98d2f32f0a9d462e664c21c808337c9],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AAADE378-9B6C-4BF4-8C70-8875E54EC95C}, , [d78f85dce4b592a4ba909747818237c9],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ABFAC3D3-FDDF-4E5E-BAB6-98D19EDE2921}, , [c0a6b2af584152e4e368af2fff04df21],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD21166F-495D-4D65-845C-C4B693D5D05F}, , [bbab89d8a7f204326cde08d65aa9a35d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEBCB1DD-224B-4069-A930-38432077E3D0}, , [e680fe630b8e46f0b596716dad5608f8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B063A693-AB30-4BB2-A6D3-89FAB738F8A5}, , [ea7c91d042570a2c7bd0c31bf70ca65a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2114ABA-E184-4D00-9F26-3FB487489635}, , [363066fb811887af0a4038a6b84b5ba5],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B6C84A40-EA6D-48E4-9356-6E8A9EC1D22F}, , [70f6a2bf861347ef83c7d10d1be807f9],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B939204B-700D-48DF-B7F3-7DCB80C17616}, , [d591da875f3a12240b4013cb768d39c7],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B9A07354-F07D-4F8F-823D-B1154E8E33D5}, , [96d08ad72a6f3df96fdb29b593705da3],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BBEC03E9-A978-4C45-B3A9-705DE0FFCFBF}, , [5313a5bc4059f6404efc8658689bf30d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCB25589-6EF1-4ED8-B7CE-89FAFEC69B41}, , [6600441df8a190a6b19a9d41a0631fe1],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDDD433D-CE6F-4744-96FE-A661AAD1CEB2}, , [ee78c69b8316d85e55f56c72f50e44bc],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BF6CF7B1-9C1B-472D-A087-CAD53A341E21}, , [79eddb862f6af640a7a4f7e743c053ad],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFDA5B3E-9F94-47DD-8A36-B47DC7C98EC1}, , [bda90b56188191a5de6dfde1ed1638c8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C14BD87A-879C-4846-873E-D8EB69B578A1}, , [0c5a2e33cecbf5412724a03e39ca867a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2570EE7-4E87-48BE-AE6E-E85B3EC264C1}, , [d88e92cf7b1e76c087c322bcb3507c84],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2713153-5302-412A-A667-933E325832D7}, , [4b1b4a17c0d9fc3ade6d0fcfa55e4eb2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C373319E-E5D7-4B52-AB6B-F659363C519F}, , [e87e1a478118a393e6657f5f51b2a957],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C48C1932-3C90-402F-B634-951A1A546676}, , [095dabb6f0a9aa8c0d3d7c62ef142ed2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C56E2FAA-3003-4802-B468-8C2B39F94DAC}, , [bea80061b4e5f93d004a6f6f1de6b34d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C6AD1B0F-546E-4171-B3F1-1384328E3CA1}, , [2640adb492070e2879d2fae4887bb24e],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD0D0A72-D414-4197-8C7B-A720A19898FA}, , [e581e87977222c0a92b9a737b350966a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD6BCF5C-6B59-4F50-9A44-28E6DA452864}, , [4a1c10518a0f71c5f853fce21fe4ab55],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CEB25C27-6168-4F96-8E88-B485903ADD65}, , [5214c49d80199c9a54f78c5282811ee2],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CF043E87-EC77-44C2-8F8A-1212BF7D9F97}, , [095d283929702115bf8b895549baed13],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D01A5D16-240B-449C-ADCD-703B4E8078FC}, , [0d59f46d95040630ca80ac321de68d73],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D093A96F-86B3-4030-87FA-F675FCA2911F}, , [90d687dac7d2b482cf7c7965917240c0],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3817B0C-7E6C-46B2-AEA8-C744785128EA}, , [ea7c1f42e5b4e65019313ba3e61d7c84],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D5AC9775-5150-4B2B-90E7-AB222E16D391}, , [7cea451cc9d09a9cef5b18c64db6fe02],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D5F3BC69-B2D5-4A98-89E2-62A47C74DB7C}, , [0c5aee7316837abc8bc002dce51e669a],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D761339C-8300-4157-B348-9D48DE1C8C3E}, , [1551d28f0990320499b2a7371be8f30d],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DAADAB59-5644-4A2B-953D-2AEC5CC95FE9}, , [3630b8a9cdcc013580ca57879e65d52b],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB934327-B8FB-40EF-A36A-75B21C967ADC}, , [056160019efb0e2835164b93986b02fe],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E64A2CFA-4634-40A2-96FE-F2B7E2FFBD30}, , [6ef8243dbedb320476d5b02ec43fa957],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8ABD75E-8AF6-4C6A-BDA7-806FCF82CB55}, , [f175421f30691e183d0db42a7f8408f8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8F79D98-CF17-44CF-A6BD-83364E782B6F}, , [94d24c15e2b70c2a0d3de4facd36df21],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EACD0ED7-3A61-4E33-888D-A2935D2E1F79}, , [2541d48d9702d95d4803c717fb0858a8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EE4B4D65-E224-482B-8BAB-6DA42EFBD392}, , [d98d38296b2ec47276d478664ab9649c],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F281FC0A-54F1-4663-AA35-31E122B8781D}, , [afb762ffa6f3350150fac21c29da22de],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5666CCC-6DF0-480F-8C16-EC8F88D9D1FA}, , [3432a9b84851ad89ce7d45996b98ec14],
    PUP.Optional.MyWebSearch, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{47053881-2311-4862-8D59-B3FBF8433D8C}, , [b3b31051fd9c181ed5d73eb770938878],
    PUP.Optional.W3i, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9C5F4D55-F70A-42CD-9B80-79B3140D62CE}, , [93d3ee73c9d0092d12b12ae205ffe51b],
    PUP.Optional.MyWebSearch, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A5B9C0F5-5616-47CD-A95F-E43B488FACCF}, , [ec7a4918425759dd119b9560d330ca36],
    PUP.Optional.Inbox, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C04B7D22-5AEC-4561-8F49-27F6269208F6}, , [075f98c9bbde46f09baba05662a035cb],
    PUP.Optional.SevereWeatherAlerts, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SevereWeatherAlerts.exe, , [0e5809589bfe9e9804a7ca370202d42c],
    PUP.Optional.BetterBrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311551110}, , [5e08e57c2a6f1f17eeaf87655ba908f8],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311551110}, , [5e08e57c2a6f1f17eeaf87655ba908f8],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344554410}, , [5e08e57c2a6f1f17eeaf87655ba908f8],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355555510}, , [5e08e57c2a6f1f17eeaf87655ba908f8],
    PUP.Optional.CrossRider, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366556610}, , [5e08e57c2a6f1f17eeaf87655ba908f8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110311551110}, , [5e08e57c2a6f1f17eeaf87655ba908f8],
    PUP.Optional.CrossRider, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110311551110}, , [5e08e57c2a6f1f17eeaf87655ba908f8],
     
    JusticeNY,
    #9
  11. 2016/05/15
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    Registry Data: 8
    Hijack.StartPage, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, Inbox Toolbar, Good: (www.google.com), Bad: (Inbox Toolbar),,[412598c996033600d4c214d1e91bb050]
    Hijack.Searchbar, HKU\S-1-5-21-3249766445-722992797-2274620919-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, Inbox Toolbar, Good: (www.google.com/), Bad: (Inbox Toolbar),,[a5c1342dbadf48ee5919bb2ff80caa56]
    Hijack.StartPage, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, Inbox Toolbar, Good: (www.google.com), Bad: (Inbox Toolbar),,[df875809980166d0474fae370df7b34d]
    Hijack.Searchbar, HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, Inbox Toolbar, Good: (www.google.com/), Bad: (Inbox Toolbar),,[273fe67b6534da5cb5bdc822a85cc33d]
    Hijack.StartPage, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, Inbox Toolbar, Good: (www.google.com), Bad: (Inbox Toolbar),,[87df90d1cfca58de4a4c7d687094a35d]
    Hijack.Searchbar, HKU\S-1-5-21-3249766445-722992797-2274620919-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, Inbox Toolbar, Good: (www.google.com/), Bad: (Inbox Toolbar),,[bda94e13316883b3d89a2dbde71d2fd1]
    Broken.OpenCommand, HKCR\scrfile\shell\open\command, NOTEPAD.EXE "Good: ( "Bad: (NOTEPAD.EXE "%1 "),,[ffffffffffffffffffffffffffffffff]" /S) ", %4, %5
    Broken.OpenCommand, HKCR\regfile\shell\open\command, NOTEPAD.EXE "Good: (regedit.exe "Bad: (NOTEPAD.EXE "%1 "),,[ffffffffffffffffffffffffffffffff] ") ", %4, %5

    Folders: 120
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Buttons, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Plugins, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Update, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.PCFixSpeed, C:\Program Files\PCFixSpeed, , [3531a3be4a4fec4a6511f5bc13f0837d],
    PUP.Optional.PCFixSpeed, C:\Program Files\PCFixSpeed\Update, , [3531a3be4a4fec4a6511f5bc13f0837d],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\0301114558, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\0408181259, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Severe Weather Alerts, , [f2744f12afead56196119f13828145bb],
    PUP.Optional.PCFixSpeed, C:\Users\House\AppData\Roaming\PCFixSpeed, , [650194cdf8a18fa70ce445736b987888],
    PUP.Optional.PCFixSpeed, C:\Users\House\AppData\Roaming\PCFixSpeed\News, , [650194cdf8a18fa70ce445736b987888],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\News, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\Startup, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults\preferences, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\locale, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\locale\en-US, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults\preferences, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.RebateInformer, C:\Users\sixlove\AppData\Roaming\RebateInformer, , [96d0c29fb0e9082e32ab21dbf310aa56],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\chrome, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\ThirdPartyInstallers, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\Main, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\Main\bin, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\Main\rep, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\SearchProtect, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\SearchProtect\bin, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\bubble, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\libs, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\protection, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\protectionDS, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\settings, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\uninstall, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\rep, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\Weather_Notifications,_LL, , [94d21f426f2a7bbb250034858e74dd23],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\Weather_Notifications,_LL\SevereWeatherAlerts.exe_Url_vzfqmyrxoyrgztuxattekvwhpj0rn4t1, , [94d21f426f2a7bbb250034858e74dd23],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\Weather_Notifications,_LL\SevereWeatherAlerts.exe_Url_vzfqmyrxoyrgztuxattekvwhpj0rn4t1\1.21.0.0, , [94d21f426f2a7bbb250034858e74dd23],
    PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo, , [eb7b7ee3cdcc7db93653308d20e28f71],
    PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate, , [eb7b7ee3cdcc7db93653308d20e28f71],
    PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, , [f076c49d079267cff0c53d80a959fe02],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\chrome, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\chrome\content, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\skin, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Local\ArcadeParlor, , [93d3ec75a6f3320488c9b70c0df5f60a],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\plugins, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\TEMP, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\defaults, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\defaults\preferences, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\userCode, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\locale, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\locale\en-US, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\defaults, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\defaults\preferences, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\userCode, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\locale, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\locale\en-US, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.iWebar, C:\Users\House\AppData\Local\iWebar, , [2244e8797524e84e1de9f3e4cb374ab6],
    PUP.Optional.iWebar, C:\Users\sixlove\AppData\Local\iWebar, , [81e5ff62fa9f3bfbcd393c9b917123dd],
    PUP.Optional.iWebar, C:\Program Files\iWebar, , [1353a6bb5841b1852ed994439a68a15f],
    PUP.Optional.MindSpark, C:\Users\House\AppData\Roaming\TelevisionFanatic, , [70f6b2afcfca8bab0c814792867c6b95],
    PUP.Optional.MindSpark, C:\Users\House\AppData\Roaming\TelevisionFanatic\bar, , [70f6b2afcfca8bab0c814792867c6b95],
    PUP.Optional.MindSpark, C:\Users\House\AppData\Roaming\TelevisionFanatic\bar\Settings, , [70f6b2afcfca8bab0c814792867c6b95],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic, , [f274e87945548fa7e3d55a806a98c33d],
    PUP.Optional.NextLive, C:\Users\sixlove\AppData\Roaming\newnext.me, , [4323baa7dfbae74f9e133ca0cd35e917],
    PUP.Optional.NextLive, C:\Users\sixlove\AppData\Roaming\newnext.me\cache, , [4323baa7dfbae74f9e133ca0cd35e917],
    PUP.Optional.ShopperPro, C:\Users\Public\Documents\ShopperPro, , [f175da873f5a1b1b594e14ce03ff0ef2],
    PUP.Optional.ShopperPro, C:\Users\Public\Documents\ShopperPro\JsDriver, , [f175da873f5a1b1b594e14ce03ff0ef2],
    PUP.Optional.WeDownload, C:\Program Files\The weDownload Manager, , [ca9cabb6abeea09669486880ac56fe02],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\FireFox, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\FireFox\content, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver\1.35.1.155, , [78ee6001a2f7b284bb9471a17e87926e],

    Files: 446
    PUP.Optional.NextLive, C:\Users\sixlove\AppData\Roaming\newnext.me\nengine.dll, , [8adc70f19ffa9c9a41f356e59b661fe1],
    PUP.Optional.Conduit, C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe, , [0561bfa230691c1a891f5fd83ac77789],
    PUP.Optional.ObjectBrowser, C:\Program Files\Object Browser\Object Browser-bho.dll, , [d690223f6d2c4cea112880bb679a23dd],
    PUP.Optional.Goobzo, C:\ProgramData\ShopperPro\ShopperPro.dll, , [de88bea31e7bd75fd2782e2670908c74],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Local\ArcadeParlor\Arcadeparlor.dll, , [7ceabca5cacf9c9a80296f2ad13115eb],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64bar.dll, , [3f2787da237655e1cd75dfbffe04c937],
    PUP.Optional.Sambreel, C:\Program Files\BetterBrowse\BetterBrowse.FirstRun.exe, , [99cd263b584185b158c048f4bf42946c],
    PUP.Optional.BrowseFox, C:\Program Files\BetterBrowse\BetterBrowseUninstall.exe, , [5214c0a14e4b60d69f21f71a18e9d62a],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\updateBetterBrowse.exe, , [89dd38291e7bf343f255c5461bea8977],
    PUP.Optional.CrossRider, C:\Program Files\iWebar\iWebar-buttonutil.dll, , [7beb9ac79603b2849c0f46ee1de416ea],
    PUP.Optional.iWebar, C:\Program Files\iWebar\iWebar-buttonutil.exe, , [5b0b0b56dabf4ee8e86f1c1e5ba616ea],
    PUP.Optional.iWebar, C:\Program Files\iWebar\iWebar-codedownloader.exe, , [0561fe63c9d083b3c196aa9053aec937],
    PUP.Optional.iWebar, C:\Program Files\iWebar\iWebar-enabler.exe, , [481e9fc2a8f1d660ce898eac1ee3b848],
    PUP.Optional.iWebar, C:\Program Files\iWebar\iWebar-firefoxinstaller.exe, , [e185b3ae82179a9cb3a4d46655ac23dd],
    PUP.Optional.CrossRider, C:\Program Files\iWebar\iWebar-helper.exe, , [7cea0859debb56e0eac288ac7f823fc1],
    PUP.Optional.iWebar, C:\Program Files\iWebar\iWebar-updater.exe, , [8ed889d85a3fe94d8fc85cde877a7090],
    PUP.Optional.ObjectBrowser, C:\Program Files\Object Browser\Object Browser-bg.exe, , [521466fbfd9c7cbad66389b2eb1644bc],
    PUP.Optional.CrossRider, C:\Program Files\Object Browser\Object Browser-buttonutil.dll, , [87df134e584192a473381d17f40d7c84],
    PUP.Optional.ObjectBrowser, C:\Program Files\Object Browser\Object Browser-buttonutil.exe, , [254163fe5b3e70c6b2873308bd44b64a],
    PUP.Optional.ObjectBrowser, C:\Program Files\Object Browser\Object Browser-codedownloader.exe, , [13531c45346539fd1e1b3803f70ad927],
    PUP.Optional.ObjectBrowser, C:\Program Files\Object Browser\Object Browser-enabler.exe, , [6ef84d14cbcea3938eabb18a0ff28c74],
    PUP.Optional.ObjectBrowser, C:\Program Files\Object Browser\Object Browser-firefoxinstaller.exe, , [372f461b9dfc69cdba7f4cef48b93cc4],
    PUP.Optional.CrossRider, C:\Program Files\Object Browser\Object Browser-helper.exe, , [cd994e13a7f2fe386b41ae865fa252ae],
    PUP.Optional.ObjectBrowser, C:\Program Files\Object Browser\Object Browser-updater.exe, , [b4b25c0599008bab1d1c81ba7e8343bd],
    PUP.Optional.CrossRider, C:\Program Files\Object Browser\utils.exe, , [d4929ec3c1d881b58a5f191e47baf60a],
    PUP.Optional.RebateInformer, C:\Program Files\RebateInformer\RebateI.dll, , [273fce93237653e3d719af8c60a1659b],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Inbox.exe, , [7ee891d05247fd39af2caaf7c53b1ee2],
    PUP.Optional.Goobzo, C:\Program Files\ShopperPro\ShopperPro.dll, , [0e5879e8c3d60e2879d153015ca4ed13],
    PUP.Optional.Goobzo, C:\Program Files\ShopperPro\ShopperPro64.dll, , [73f362fff9a0ee4862e81b39916f7987],
    Adware.GoOffer, C:\Users\sixlove\AppData\Local\temp\afgytdrp_808604_setup.exe, , [aabcd38eff9aec4a3801c6e9b34d946c],
    PUP.Optional.AirInstaller, C:\Users\sixlove\Downloads\Setup.exe, , [cc9a70f1fe9b6bcb93b30a9d54acbb45],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe, , [8bdb233edabf6ec8beb23606ea176d93],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\uninstall.exe, , [7aecc1a018812c0ad8871df0718f8c74],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.ShopperPro, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf, , [70f6a3bea6f33105e547e01600029868],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\setupcfg.ini, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\FF_Install.cab, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Inbox.ini, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\unins000.dat, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\uninstall.ini, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Buttons\blue_orange_big.xml, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Buttons\fbnotifierex_plugin.xml, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Buttons\mail_plugin_big.xml, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Buttons\notifier_yahoo_big.xml, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Buttons\snt_myspace.xml, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Plugins\fbnotify.dll, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Plugins\fbnotifyex.dll, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Plugins\libeay32.dll, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.Inbox, C:\Program Files\Inbox Toolbar\Plugins\ssleay32.dll, , [b7af5908f6a35cda0083743b679c2ad6],
    PUP.Optional.PCFixSpeed, C:\Program Files\PCFixSpeed\PCFixSpeed.exe, , [3531a3be4a4fec4a6511f5bc13f0837d],
    PUP.Optional.PCFixSpeed, C:\Program Files\PCFixSpeed\PCFixTray.exe, , [3531a3be4a4fec4a6511f5bc13f0837d],
    PUP.Optional.PCFixSpeed, C:\Program Files\PCFixSpeed\unins000.dat, , [3531a3be4a4fec4a6511f5bc13f0837d],
    PUP.Optional.PCFixSpeed, C:\Program Files\PCFixSpeed\unins000.exe, , [3531a3be4a4fec4a6511f5bc13f0837d],
    PUP.Optional.PCFixSpeed, C:\Program Files\PCFixSpeed\unins000.msg, , [3531a3be4a4fec4a6511f5bc13f0837d],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\SevereWeatherAlerts.exe.config, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\ICSharpCode.SharpZipLib.dll, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsApp0.dat, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\SevereWeatherAlertsK.dat, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\SWAUpdater.exe, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\SevereWeatherAlerts\0408181259\mergetree, , [71f53928277294a223836e4412f19769],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Severe Weather Alerts\Severe Weather Alerts.lnk, , [f2744f12afead56196119f13828145bb],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Severe Weather Alerts App.lnk, , [d393530e9cfd32047236842e09fa5ca4],
    PUP.Optional.PCFixSpeed, C:\Users\House\AppData\Roaming\PCFixSpeed\faq.htm, , [650194cdf8a18fa70ce445736b987888],
    PUP.Optional.PCFixSpeed, C:\Users\House\AppData\Roaming\PCFixSpeed\News\PCFS_NEWS_promote_app_MLM_horizontal.png, , [650194cdf8a18fa70ce445736b987888],
    PUP.Optional.PCFixSpeed, C:\Users\House\AppData\Roaming\PCFixSpeed\News\PCFS_NEWS_promote_app_SO_horizontal.png, , [650194cdf8a18fa70ce445736b987888],
    PUP.Optional.PCFixSpeed, C:\Users\House\AppData\Roaming\PCFixSpeed\News\PCFS_NEWS_trialpay_tray_ads.png, , [650194cdf8a18fa70ce445736b987888],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\faq.htm, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\News\PCFS_NEWS_promote_app_MLM_horizontal.png, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\News\PCFS_NEWS_promote_app_SO_horizontal.png, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\News\PCFS_news_tech_offer.png, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\News\PCFS_NEWS_trialpay_tray_ads.png, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.PCFixSpeed, C:\Users\sixlove\AppData\Roaming\PCFixSpeed\News\PCFS_NEWS_uninstall_discount_offer.png, , [570f4918f7a28caa2ec2f9bf976c6799],
    PUP.Optional.Conduit, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\searchplugins\conduit-search.xml, , [1650065be6b3c2748e65a92f92719967],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\crossrider_statusbar.png, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button5.png, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon128.png, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon16.png, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon24.png, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\popup.html, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\skin.css, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\update.css, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\install.rdf, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\baseObject.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\browser.xul, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\main.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\options.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\search_dialog.xul, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\asyncDB.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\background.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\dbManager.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\dom_bg.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\firefoxNotifications.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\pageAction.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\tabs.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\addressBarChangeObserver.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\delegate.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\folderIOWrapper.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\httpObserver.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\IDBWrapper.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\installer.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\progressListenerObserver.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\reloadObserver.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\reports.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\requestObject.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\searchSettings.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\uninstallObserver.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\xhr.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\defaults\preferences\prefs.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins.json, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\102_dealply_m.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\13_CrossriderAppUtils.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\14_CrossriderUtils.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\16_FFAppAPIWrapper.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\177_crossriderDashboard.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\17_jQuery.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\182_openUrl.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\183_tabsWrapper.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\184_noproblemppc_m.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\1_base.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\207_dbWrapper.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\21_debug.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\223_imonomy_m.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\22_resources.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\242_price_gong_m.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\28_initializer.js, ,
     
    JusticeNY,
    #10
  12. 2016/05/15
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\47_resources_background.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\4_jquery_1_7_1.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\78_CrossriderInfo.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\7_hooks.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\91_monetizationLoader.js.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\93_superfish_no_coupons_m.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\98_omniCommands.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode\background.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode\extension.js, , [e08650117920d16522760dce63a08d73],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\crossrider_statusbar.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button2.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button3.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\button4.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon16.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon24.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\icon48.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\panelarrow-up.png, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\skin.css, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\skin\update.css, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome.manifest, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\install.rdf, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\background.html, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\browser.xul, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\dialog.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\main.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\options.xul, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\platformVersion.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\asyncDB.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\background.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\browserAction.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\dbManager.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\firefoxNotifications.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\firefoxOmnibox.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\pageAction.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\api\request.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\addressBarChangeObserver.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\delegate.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\folderIOWrapper.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\httpObserver.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\IDBWrapper.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\installer.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\logFile.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\progressListenerObserver.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\requestObject.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\uninstallObserver.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\utils.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\chrome\content\core\xhr.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\102.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\13.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\155.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\16.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\17.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\177.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\195.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\207.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\21.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\217.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\22.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\220.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\242.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\246.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\28.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\4.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\47.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\64.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\72.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\78.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\9.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\91.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\93.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\plugins\98.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode\background.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com\extensionData\userCode\extension.js, , [94d2a1c06138f6401a7e57849172966a],
    PUP.Optional.iWebar, C:\Windows\Tasks\iWebar-codedownloader.job, , [21450f520e8b69cd2625d715aa594db3],
    PUP.Optional.iWebar, C:\Windows\Tasks\iWebar-firefoxinstaller.job, , [5d093c25abee0e28ef5c08e414efc53b],
    PUP.Optional.iWebar, C:\Windows\Tasks\iWebar-updater.job, , [53137fe2732677bf9ab15f8d04ff45bb],
    PUP.Optional.ObjectBrowser, C:\Windows\Tasks\Object Browser-codedownloader.job, , [085ed28f8415fe38366944b21de67987],
    PUP.Optional.ObjectBrowser, C:\Windows\Tasks\Object Browser-enabler.job, , [4a1c63feff9ab77fc6d96096ed162dd3],
    PUP.Optional.ObjectBrowser, C:\Windows\Tasks\Object Browser-firefoxinstaller.job, , [83e3a1c03f5a56e0d1cef204f90a8080],
    PUP.Optional.ObjectBrowser, C:\Windows\Tasks\Object Browser-updater.job, , [6afc30312079e4527926599d7e854bb5],
    PUP.Optional.RebateInformer, C:\Users\sixlove\AppData\Roaming\RebateInformer\domaindb.dat, , [96d0c29fb0e9082e32ab21dbf310aa56],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\LOGO.BMP, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64auxstb.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64barsvc.exe, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64brmon.exe, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64brstub.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64dlghk.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64dyn.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64highin.exe, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64hkstub.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64httpct.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64ieovr.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64msg.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64Plugin.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\64skplay.exe, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\CHROME.MANIFEST, , [87df2b36e8b1d462dcb4819960a4748c],
     
    JusticeNY,
    #11
  13. 2016/05/15
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\CREXT.DLL, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\CrExtP64.exe, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\NP64Stub.dll, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\T8EXTEX.DLL, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\T8HTML.DLL, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\T8RES.DLL, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\T8TICKER.DLL, , [87df2b36e8b1d462dcb4819960a4748c],
    PUP.Optional.MindSpark, C:\Program Files\TelevisionFanatic\bar\1.bin\chrome\64ffxtbr.jar, , [87df2b36e8b1d462dcb4819960a4748c],
    Trojan.Agent.Trace, C:\Users\House\Desktop\.url, , [6ef88cd5f8a16cca2594a17eca3aa35d],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\EULA.txt, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\Main\bin\SPTool.dll, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32.dll, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\SearchProtect\bin\SPVC64.dll, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\SearchProtect\bin\SPVC64Loader.dll, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\settings.html, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\style.css, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\bubble\bubble.css, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\bubble\bubble.html, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\bubble\bubble.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\Apply-default.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\Apply-onclick.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\Apply-Rollover.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\bg-with-logo.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\bg.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\bgSettings.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\checkbox_def.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\close-win-def.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\gray-bg.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\hez-def.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\hez-selected.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\icon-win.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\menu-rollover.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\menu-selected.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\radio-button-def.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\radio-button-selected.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\radio-button.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\Images\Settings-icon.png, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\libs\dialogUtils.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\libs\json2.min.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\libs\main.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\libs\SPDialogAPI.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\protection\defaults.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\protection\protection.css, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\protection\protection.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\protectionDS\protectionDS.css, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\protectionDS\protectionDS.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\settings\defaults.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\settings\settings.css, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\settings\settings.js, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SearchProtect.AppFlsh, C:\Program Files\SearchProtect\UI\dialogs\uninstall\uninstall.html, , [0b5bc1a0b3e6f4428f7390bd11f34eb2],
    PUP.Optional.SevereWeatherAlerts, C:\Users\sixlove\AppData\Local\Weather_Notifications,_LL\SevereWeatherAlerts.exe_Url_vzfqmyrxoyrgztuxattekvwhpj0rn4t1\1.21.0.0\user.config, , [94d21f426f2a7bbb250034858e74dd23],
    PUP.Optional.Goobzo, C:\Program Files\Common Files\Goobzo\GBUpdate\sma.exe, , [eb7b7ee3cdcc7db93653308d20e28f71],
    PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\config.json, , [f076c49d079267cff0c53d80a959fe02],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\chrome.manifest, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\icon.png, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\install.rdf, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\chrome\content\arcadeparlor.js, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\chrome\content\browser.xul, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404}\skin\style.css, , [ea7c9bc6970263d3d877576c1ee4738d],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Local\ArcadeParlor\ap.config, , [93d3ec75a6f3320488c9b70c0df5f60a],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Local\ArcadeParlor\broker.exe, , [93d3ec75a6f3320488c9b70c0df5f60a],
    PUP.Optional.ArcadeParlor, C:\Users\sixlove\AppData\Local\ArcadeParlor\versioncheck.exe, , [93d3ec75a6f3320488c9b70c0df5f60a],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\BetterBrowse.ico, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\updateBetterBrowse.InstallState, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\7za.exe, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\BetterBrowseBA.dll, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\FilterApp_C.exe, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\plugins\BetterBrowse.BrowserAdapterS.dll, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\plugins\BetterBrowse.CompatibilityChecker.dll, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.BetterBrowse, C:\Program Files\BetterBrowse\bin\plugins\BetterBrowse.PurBrowse.dll, , [1056cc950990ff37f2ffd4eff90958a8],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\install.rdf, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\background.html, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\ffCoreFilesIndex.txt, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\options.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\options.xul, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\search_dialog.xul, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\browserAction.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\contextMenu.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\dom_bg.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\firefoxOmnibox.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\message.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\tabs.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\addressBarChangeObserver.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\consts.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\extensionDataStore.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\logFile.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\prefs.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\progressListenerObserver.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\reports.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\requestObject.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\updateManager.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\utils.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\xhr.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\defaults\preferences\prefs.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\manifest.xml, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins.json, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\223_imonomy_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\102_dealply_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\104_jollywallet_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\13_CrossriderAppUtils.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\16_FFAppAPIWrapper.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\177_crossriderDashboard.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\183_tabsWrapper.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\184_noproblemppc_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\191_ciuvo_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\207_dbWrapper.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\21_debug.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\226_set_campaign_id_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\244_engageya_inner_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\245_engageya_overlay_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\246_setup.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\28_initializer.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\47_resources_background.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\4_jquery_1_7_1.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\72_appApiValidation.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\78_CrossriderInfo.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\93_superfish_no_coupons_m.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\userCode\extension.js, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\locale\en-US\translations.dtd, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\button2.png, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\button3.png, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\button5.png, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\icon128.png, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\icon16.png, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\icon24.png, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\icon48.png, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\popup.html, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\House\AppData\Roaming\Mozilla\Firefox\Profiles\7g389v3f.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\skin.css, , [c89e065b76235bdb8026b910a55d4db3],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome.manifest, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\install.rdf, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\background.html, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\baseObject.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\browser.xul, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\dialog.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\ffCoreFilesIndex.txt, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\main.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\options.xul, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\asyncDB.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\background.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\contextMenu.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\dbManager.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\dom_bg.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\fileManager.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\firefox.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\firefoxNotifications.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\firefoxOmnibox.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\message.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\pageAction.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\request.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\api\windowsMessagingHandler.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\addressBarChangeObserver.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\console.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\consts.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\folderIOWrapper.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\installer.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\logFile.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\prefs.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\progressListenerObserver.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\registry.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\reloadObserver.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\searchSettings.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\uninstallObserver.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\chrome\content\core\xhr.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\defaults\preferences\prefs.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\manifest.xml, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\1.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\102.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\13.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\182.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\183.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\184.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\191.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\207.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\21.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\217.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\22.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\223.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\226.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\244.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\246.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\28.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\4.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\7.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\72.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\78.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\93.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\extensionData\plugins\98.js, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\button2.png, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\icon128.png, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\icon24.png, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\icon48.png, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\panelarrow-up.png, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\skin.css, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.CrossRider, C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com\skin\update.css, , [0066a4bd0f8aed497630c10840c2ed13],
    PUP.Optional.iWebar, C:\Program Files\iWebar\35510.xpi, , [1353a6bb5841b1852ed994439a68a15f],
    PUP.Optional.iWebar, C:\Program Files\iWebar\background.html, , [1353a6bb5841b1852ed994439a68a15f],
    PUP.Optional.iWebar, C:\Program Files\iWebar\iWebar.ico, , [1353a6bb5841b1852ed994439a68a15f],
    PUP.Optional.NextLive, C:\Users\sixlove\AppData\Roaming\newnext.me\nengine.cookie, , [4323baa7dfbae74f9e133ca0cd35e917],
    PUP.Optional.ShopperPro, C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml, , [f175da873f5a1b1b594e14ce03ff0ef2],
    PUP.Optional.WeDownload, C:\Program Files\The weDownload Manager\49074.xpi, , [ca9cabb6abeea09669486880ac56fe02],
    PUP.Optional.WeDownload, C:\Program Files\The weDownload Manager\The weDownload Manager-firefoxinstaller.exe, , [ca9cabb6abeea09669486880ac56fe02],
    PUP.Optional.WeDownload, C:\Program Files\The weDownload Manager\Uninstall.exe, , [ca9cabb6abeea09669486880ac56fe02],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\manifest.json, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\database1_0_0.json, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\ShopperPro.zip, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\SPRemove.exe, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\Updater.exe, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\FireFox\content\overlay.js, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\FireFox\content\overlay.xul, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\FireFox\content\shopperpro_128.png, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver\jsdrv.exe, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver\jsinst.exe, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver\jslsp.dll, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver\sporder.dll, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver\1.35.1.155\config.json, , [78ee6001a2f7b284bb9471a17e87926e],
    PUP.Optional.ShopperPro, C:\Program Files\ShopperPro\JSDriver\1.35.1.155\database1_0_0.json, , [78ee6001a2f7b284bb9471a17e87926e],

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
    JusticeNY,
    #12
  14. 2016/05/15
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please download ComboFix from Here, Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      If the connection is not there use restore point you created prior to running Combofix.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results ". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: Uninstall McAfee, Symantec & other antivirus software with AppRemover
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try the following...

    Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: Downloading RKill
    iExplore.exe (renamed rKill.exe): Downloading RKill

    Restart computer in safe mode

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    When the scan is done Notepad will open with rKill.txt log.
    NOTE. rKill.txt log will also be present on your desktop.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
     
    broni,
    #13
  15. 2016/05/17
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    combo fix isnt working ive run rkill and changed it to my name its giving me the message
    current date is 2016-06-17 combo fix has expired
    click yes to run in reduced functionality mode

    when i click yes it just closes and deleted the combofix file

    in the blue box its saying access denied administrator permission needed use an administrator command promt to complete these tasks

    i right clicked and press run as administrator and it continued to do the same thing
     
    JusticeNY,
    #14
  16. 2016/05/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You have some outdated Combofix version.
    Delete it and download fresh one.
     
    broni,
    #15
  17. 2016/05/19
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    ComboFix 16-05-18.01 - sixlove 05/19/2016 21:08:42.1.2 - x86
    Running from: c:\users\sixlove\Desktop\jame.exe
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\program files\SearchProtect
    c:\program files\SearchProtect\Main\bin\CltMngSvc.exe
    c:\program files\ShopperPro
    c:\program files\TelevisionFanatic
    c:\programdata\ShopperPro
    c:\users\House\AppData\Local\Microsoft\Windows\Temporary Internet Files\373595da-77d1-4656-96d5-7141920fdfe9.jpg
    c:\users\sixlove\AppData\Local\Microsoft\Windows\Temporary Internet Files\373595da-77d1-4656-96d5-7141920fdfe9.jpg
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    -------\Service_TelevisionFanaticService
    .
    .
    ((((((((((((((((((((((((( Files Created from 2016-04-20 to 2016-05-20 )))))))))))))))))))))))))))))))
    .
    .
    2016-05-20 01:16 . 2016-05-20 01:16 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
    2016-05-20 01:16 . 2016-05-20 01:16 -------- d-----w- c:\users\Public\AppData\Local\temp
    2016-05-20 01:16 . 2016-05-20 01:16 -------- d-----w- c:\users\IUSR_NMPR\AppData\Local\temp
    2016-05-20 01:16 . 2016-05-20 01:16 -------- d-----w- c:\users\House\AppData\Local\temp
    2016-05-20 01:16 . 2016-05-20 01:16 -------- d-----w- c:\users\Default\AppData\Local\temp
    2016-05-18 01:21 . 2016-05-18 01:43 -------- d-----w- C:\ComboFix
    2016-05-15 15:47 . 2016-05-15 21:33 -------- d-----w- c:\users\sixlove\AppData\Roaming\RebateInformer
    2016-05-15 15:46 . 2016-05-15 15:46 -------- d-----w- c:\users\sixlove\AppData\Local\iWebar
    2016-05-15 15:45 . 2016-05-15 21:33 -------- d-----w- c:\program files\RebateInformer
    2016-05-15 15:42 . 2016-05-15 15:42 -------- d-----w- c:\program files\Common Files\Goobzo
    2016-05-15 15:42 . 2016-05-15 15:44 -------- d-----w- c:\users\sixlove\AppData\Local\Weather_Notifications,_LL
    2016-05-15 15:42 . 2016-05-15 21:33 -------- d-----w- c:\program files\Object Browser
    2016-05-15 15:41 . 2016-05-15 15:41 -------- d-----w- c:\users\House\AppData\Local\iWebar
    2016-05-15 15:41 . 2016-05-15 21:33 -------- d-----w- c:\program files\The weDownload Manager
    2016-05-15 15:40 . 2016-05-15 21:33 -------- d-----w- c:\users\sixlove\AppData\Roaming\newnext.me
    2016-05-15 15:40 . 2016-05-15 21:33 -------- d-----w- c:\program files\iWebar
    2016-05-15 15:40 . 2016-05-15 21:33 -------- d-----w- c:\users\sixlove\AppData\Local\ArcadeParlor
    2016-05-15 15:39 . 2016-05-15 21:33 -------- d-----w- c:\program files\BetterBrowse
    2016-05-13 21:15 . 2016-05-13 21:57 -------- d-----w- C:\AdwCleaner
    2016-05-13 21:14 . 2016-05-13 21:14 -------- d-----w- c:\programdata\RogueKiller
    2016-04-29 00:30 . 2016-05-20 01:10 29168 ----a-w- c:\windows\system32\drivers\ccavsfi.dat
    2016-04-28 21:06 . 2016-04-28 21:06 -------- d-----w- c:\program files\COMODO
    2016-04-28 21:06 . 2016-04-28 21:07 -------- d-----w- c:\programdata\COMODO
    2016-04-27 01:44 . 2016-04-27 01:48 -------- d-----w- C:\FRST
    2016-04-22 17:21 . 2016-04-22 17:21 431792 ----a-w- c:\windows\system32\CcavGuard32.dll
    2016-04-22 17:20 . 2016-04-22 17:20 92832 ----a-w- c:\windows\system32\drivers\CmdCCAV.sys
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2016-05-20 01:04 . 2012-05-04 22:50 797376 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2016-05-20 01:04 . 2011-08-20 17:27 142528 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2016-05-15 21:59 . 2014-04-16 19:05 170200 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
    2016-03-29 20:30 . 2016-04-13 07:01 2070016 ----a-w- c:\windows\system32\win32k.sys
    2016-03-24 20:40 . 2016-04-12 19:30 1815552 ----a-w- c:\windows\system32\jscript9.dll
    2016-03-24 20:36 . 2016-04-12 19:30 367616 ----a-w- c:\windows\system32\html.iec
    2016-03-24 20:34 . 2016-04-12 19:30 1129984 ----a-w- c:\windows\system32\wininet.dll
    2016-03-24 20:33 . 2016-04-12 19:30 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
    2016-03-24 20:33 . 2016-04-12 19:30 424960 ----a-w- c:\windows\system32\vbscript.dll
    2016-03-24 20:33 . 2016-04-12 19:30 142848 ----a-w- c:\windows\system32\ieUnatt.exe
    2016-03-24 20:32 . 2016-04-12 19:30 11776 ----a-w- c:\windows\system32\mshta.exe
    2016-03-24 20:32 . 2016-04-12 19:30 2382848 ----a-w- c:\windows\system32\mshtml.tlb
    2016-03-21 22:57 . 2016-04-13 07:02 1208568 ----a-w- c:\windows\system32\ntdll.dll
    2016-03-18 17:10 . 2016-04-13 07:11 72704 ----a-w- c:\windows\system32\secur32.dll
    2016-03-18 17:10 . 2016-04-13 07:11 57344 ----a-w- c:\windows\system32\samlib.dll
    2016-03-18 17:10 . 2016-04-13 07:11 486912 ----a-w- c:\windows\system32\samsrv.dll
    2016-03-18 17:10 . 2016-04-13 07:02 1316864 ----a-w- c:\windows\system32\ole32.dll
    2016-03-18 17:10 . 2016-04-13 07:11 206336 ----a-w- c:\windows\system32\ncrypt.dll
    2016-03-18 17:09 . 2016-04-13 07:11 1259520 ----a-w- c:\windows\system32\lsasrv.dll
    2016-03-18 15:32 . 2016-04-13 07:10 2048 ----a-w- c:\windows\system32\tzres.dll
    2016-03-17 17:45 . 2016-04-13 07:01 105472 ----a-w- c:\windows\system32\mtxoci.dll
    2016-03-17 17:45 . 2016-04-13 07:01 180224 ----a-w- c:\windows\system32\msorcl32.dll
    2016-03-10 18:09 . 2014-04-16 19:05 53120 ----a-w- c:\windows\system32\drivers\mwac.sys
    2016-03-10 18:08 . 2014-04-16 19:05 126336 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
    2016-03-10 18:08 . 2014-04-16 19:03 24448 ----a-w- c:\windows\system32\drivers\mbam.sys
    2016-03-04 16:52 . 2016-04-13 07:11 1253376 ----a-w- c:\windows\system32\msxml3.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ehTray.exe "= "c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
    "iCloudServices "= "c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-10-31 59720]
    "WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CCUTRAYICON "= "c:\program files\Intel\IntelDH\CCU\CCU_TrayIcon.exe" [2007-06-27 215256]
    "AppleSyncNotifier "= "c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2012-02-23 59240]
    "APSDaemon "= "c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2015-03-20 60712]
    "WPCUMI "= "c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
    "FileAgent "= "c:\program files\FileCenter\Main\FileAgent.exe" [2013-08-17 5766800]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
    "HostManager "= "c:\program files\Common Files\AOL\1413747133\ee\AOLSoftware.exe" [2010-03-08 41800]
    "iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2015-04-07 157480]
    "QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2015-08-06 421888]
    "SigmatelSysTrayApp "= "c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-09-12 405504]
    "ccav "= "c:\program files\COMODO\COMODO Cloud Antivirus\ccavsrv.exe" [2016-04-22 5037392]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin "= 5 (0x5)
    "ConsentPromptBehaviorUser "= 3 (0x3)
    "EnableUIADesktopToggle "= 0 (0x0)
    "EnableSecureUIAPath "= 1 (0x1)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0???,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0system.
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
    @= "Driver "
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
    @= "Driver "
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
    @= "Service "
    .
    [HKLM\~\startupfolder\C:^Users^sixlove^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sprint media monitor.lnk]
    backup=c:\windows\pss\Sprint media monitor.lnk.Startup
    backupExtension=.Startup
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cdloader]
    2011-08-23 20:03 50592 ----a-w- c:\users\sixlove\AppData\Roaming\mjusbsp\cdloader2.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ECenter]
    2007-05-25 06:03 17920 ----a-w- c:\dell\E-Center\EULALauncher.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp]
    2007-09-12 08:40 405504 ----a-w- c:\program files\Sigmatel\C-Major Audio\WDM\sttray.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
    "DisableMonitoring "=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ
    WindowsMobile REG_MULTI_SZ wcescomm rapimgr
    LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
    2016-04-11 22:54 1106072 ----a-w- c:\program files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2016-05-20 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-04 01:04]
    .
    2016-05-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cfd6d931ad4500.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2012-08-07 00:31]
    .
    2016-05-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cfd6d9356718b0.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2012-08-07 00:31]
    .
    .
    ------- Supplementary Scan -------
    .
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
    Trusted Zone: dell.com
    TCP: DhcpNameServer = 192.168.1.1
    FF - ProfilePath - c:\users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\
    FF - prefs.js: browser.search.selectedEngine - AOL Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.aol.com/?mtmhp=hyplogusaolp00000093
    FF - prefs.js: network.proxy.type - 0
    FF - ExtSQL: !HIDDEN! 2012-11-06 12:44; 64ffxtbr@TelevisionFanatic.com; c:\program files\TelevisionFanatic\bar\1.bin
    FF - ExtSQL: !HIDDEN! 2014-02-22 23:54; korey@markus.me; c:\program files\Mozilla Firefox\browser\extensions\korey@markus.me
    .
    .
    ------- File Associations -------
    .
    JSEFile=NOTEPAD.EXE "%1 "
    .
    - - - - ORPHANS REMOVED - - - -
    .
    ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
    HKLM-Run-SunJavaUpdateSched - c:\program files\Java\jre1.8.0_31\bin\jusched.exe
    AddRemove-HiDef Media Player - c:\program files\HiDefMedia\HiDefMedia\uninstall.exe
    AddRemove-ShopAtHome.com Toolbar - c:\users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeToolbar\ShopAtHomeUn.exe
    AddRemove-WordExtra - c:\users\sixlove\AppData\Roaming\WordExtra\uninst.exe
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
    Rootkit scan 2016-05-19 21:20
    Windows 6.0.6002 Service Pack 2 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @= "FlashBroker "
    "LocalizedString "= "@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_21_0_0_242_ActiveX.exe,-101 "
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled "=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @= "c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_21_0_0_242_ActiveX.exe "
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @= "IFlashBroker6 "
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @= "{00020424-0000-0000-C000-000000000046} "
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
    "Version "= "1.0 "
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial "=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial "=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial "=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial "=dword:00000000
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    .
    - - - - - - - > 'Explorer.exe'(2552)
    c:\windows\system32\msi.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\atiesrxx.exe
    c:\windows\system32\atieclxx.exe
    c:\windows\System32\WUDFHost.exe
    c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
    c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\windows\system32\STacSV.exe
    c:\windows\System32\WUDFHost.exe
    c:\program files\XPSMiniViewGadget\XPSMiniViewGadget.exe
    c:\windows\ehome\ehmsas.exe
    c:\program files\iPod\bin\iPodService.exe
    .
    **************************************************************************
    .
    Completion time: 2016-05-19 21:37:18 - machine was rebooted
    ComboFix-quarantined-files.txt 2016-05-20 01:37
    .
    Pre-Run: 154,766,983,168 bytes free
    Post-Run: 154,840,567,808 bytes free
    .
    - - End Of File - - A54BCA59058AC6F86B3A4B00A3B39DCC
    5C616939100B85E558DA92B899A0FC36
     
    JusticeNY,
    #16
  18. 2016/05/19
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

    • Double click to run it.
    • Make sure you checkmark Addition.txt box.
    • Press Scan button.
    • Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.
     
    broni,
    #17
  19. 2016/05/20
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-04-2016
    Ran by sixlove (administrator) on SIXLOVE-PC (20-05-2016 18:21:22)
    Running from C:\Users\sixlove\Desktop
    Loaded Profiles: sixlove (Available Profiles: IUSR_NMPR & sixlove & House)
    Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Language: English (United States)
    Internet Explorer Version 9 (Default browser: IE)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (AMD) C:\Windows\System32\atiesrxx.exe
    (Microsoft Corporation) C:\Windows\System32\SLsvc.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (COMODO) C:\Program Files\COMODO\COMODO Cloud Antivirus\ccavsrv.exe
    (SigmaTel, Inc.) C:\Windows\System32\stacsv.exe
    (Microsoft Corporation) C:\Windows\System32\wpcumi.exe
    (AOL Inc.) C:\Program Files\Common Files\AOL\1413747133\ee\aolsoftware.exe
    (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
    (SigmaTel, Inc.) C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
    (Microsoft Corporation) C:\Windows\ehome\ehtray.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
    (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
    (Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 11.0\Reader\reader_sl.exe
    (Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
    () C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [CCUTRAYICON] => C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe [215256 2007-06-27] (Intel(R) Corporation)
    HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2012-02-23] (Apple Inc.)
    HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
    HKLM\...\Run: [WPCUMI] => C:\Windows\system32\WpcUmi.exe [176128 2006-11-02] (Microsoft Corporation)
    HKLM\...\Run: [FileAgent] => C:\Program Files\FileCenter\Main\FileAgent.exe [5766800 2013-08-16] (Lucion Technologies, LLC)
    HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
    HKLM\...\Run: [HostManager] => C:\Program Files\Common Files\AOL\1413747133\ee\AOLSoftware.exe [41800 2010-03-08] (AOL Inc.)
    HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-07] (Apple Inc.)
    HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
    HKLM\...\Run: [SigmatelSysTrayApp] => C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [405504 2007-09-12] (SigmaTel, Inc.)
    HKLM\...\Run: [ccav] => C:\Program Files\COMODO\COMODO Cloud Antivirus\ccavsrv.exe [5037392 2016-04-22] (COMODO)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-10-31] (Apple Inc.)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Policies\system: [LogonHoursAction] 2
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk [2007-12-14]
    ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2015-12-13]
    ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
    BootExecute: autocheck autochk * ???,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * ??,autocheck autochk * system.
    GroupPolicyUsers\S-1-5-21-3249766445-722992797-2274620919-1002\User: Restriction <======= ATTENTION
    CHR HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{6CC151F6-C8D3-4E5A-BB05-1495966C18CE}: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{DC925712-341B-4237-869B-2D59EA9F3FDF}: [DhcpNameServer] 172.20.10.1

    Internet Explorer:
    ==================
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-03-01] (Oracle Corporation)
    BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-03-01] (Oracle Corporation)
    Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
    Toolbar: HKU\S-1-5-21-3249766445-722992797-2274620919-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-18] (Google Inc.)
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
    DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [2001-01-22] (Microsoft Corporation)

    FireFox:
    ========
    FF ProfilePath: C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default
    FF DefaultSearchEngine: AOL Search
    FF SearchEngineOrder.1: Yahoo
    FF SearchEngineOrder.2:
    FF SelectedSearchEngine: AOL Search
    FF Homepage: hxxp://www.aol.com/?mtmhp=hyplogusaolp00000093
    FF NetworkProxy: "no_proxies_on ", "*.local "
    FF NetworkProxy: "type ", 0
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-07] ()
    FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
    FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-03-01] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-03-01] (Oracle Corporation)
    FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
    FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-19] (Google Inc.)
    FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-19] (Google Inc.)
    FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
    FF Extension: No Name - C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\extensions\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404} [not found]
    FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-12] [not signed]
    FF Extension: No Name - C:\Users\sixlove\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F32E7E42-9AFA-47CA-A0C4-D07EE651D404} [2016-05-15] [not signed]
    FF Extension: No Name - C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\Extensions\2eb528f3-950d-48a3-be4b-5d7de6c8331e@a41e199b-6ca4-4d23-ab87-73f2d1973314.com [2016-05-15] [not signed]
    FF Extension: No Name - C:\Users\sixlove\AppData\Roaming\Mozilla\Firefox\Profiles\td5n09eh.default\Extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [2016-05-15] [not signed]
    FF Extension: WordExtra - C:\Program Files\Mozilla Firefox\browser\extensions\korey@markus.me [2015-10-30] [not signed]
    FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

    Chrome:
    =======
    CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\49.0.2623.112\PepperFlash\pepflashplayer.dll ()
    CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll => No File
    CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\49.0.2623.112\ppGoogleNaClPluginChrome.dll => No File
    CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\49.0.2623.112\pdf.dll => No File
    CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 4.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll => No File
    CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll => No File
    CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
    CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
    CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
    CHR Profile: C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Chrome Web Store Payments) - C:\Users\sixlove\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-15]
    CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <not found>

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S4 AdobeActiveFileMonitor6.0; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832 2007-09-11] ()
    S4 AlertService; C:\Program Files\Intel\IntelDH\CCU\AlertService.exe [223448 2007-06-27] (Intel(R) Corporation)
    S3 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46184 2014-02-06] (AOL Inc.)
    R2 ccavsrv; C:\Program Files\COMODO\COMODO Cloud Antivirus\ccavsrv.exe [5037392 2016-04-22] (COMODO)
    S4 DHTRACE; C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe [39640 2007-06-27] (Intel(R) Corporation)
    S4 DQLWinService; C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe [208896 2007-02-12] () [File not signed]
    S4 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2007-12-14] (Macrovision Europe Ltd.) [File not signed]
    S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
    S4 ISSM; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe [59096 2007-06-27] (Intel(R) Corporation)
    S2 M1 Server; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe [268504 2007-06-27] ()
    S4 MCLServiceATL; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe [157912 2007-06-27] (Intel(R) Corporation)
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [File not signed]
    S4 NMSCore; C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe [317656 2007-06-27] (Intel(R) Corporation)
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [File not signed]
    S4 QualityManager; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe [272600 2007-06-27] (Intel(R) Corporation)
    S4 Remote UI Service; C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe [446680 2007-06-27] (Intel(R) Corporation)
    R2 STacSV; C:\Windows\system32\STacSV.exe [94208 2007-09-12] (SigmaTel, Inc.)
    S4 stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [69632 2007-07-11] (MicroVision Development, Inc.) [File not signed]
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-19] (Microsoft Corporation)
    S4 XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [386560 2006-08-04] (Conexant Systems, Inc.) [File not signed]

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R0 cmdccav; C:\Windows\System32\DRIVERS\CmdCCAV.sys [92832 2016-04-22] (COMODO)
    R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [26248 2012-08-02] (EldoS Corporation)
    R3 IntelDH; C:\Windows\System32\Drivers\IntelDH.sys [5632 2007-12-14] (Intel Corporation)
    R2 nmsunidr; C:\Windows\System32\DRIVERS\nmsunidr.sys [5376 2007-02-18] (Gteko Ltd.)
    S3 R300; C:\Windows\System32\DRIVERS\atikmdag.sys [8913920 2011-11-10] (Advanced Micro Devices, Inc.)
    S3 Ser2rs; C:\Windows\System32\DRIVERS\ser2rs.sys [76288 2007-06-25] (Prolific Technology Inc.)
    R3 STHDA; C:\Windows\System32\drivers\stwrt.sys [326656 2007-09-12] (SigmaTel, Inc.)
    S3 TSHWMDTCP; C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.sys [14552 2007-06-27] ()
    R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-29] (America Online, Inc.)
    U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation)
    S3 catchme; \??\C:\jame\catchme.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-05-19 21:37 - 2016-05-19 21:37 - 00015589 _____ C:\ComboFix.txt
    2016-05-19 21:05 - 2011-06-26 02:45 - 00256000 _____ C:\Windows\PEV.exe
    2016-05-19 21:05 - 2010-11-07 13:20 - 00208896 _____ C:\Windows\MBR.exe
    2016-05-19 21:05 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
    2016-05-19 21:05 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
    2016-05-19 21:05 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
    2016-05-19 21:05 - 2000-08-30 20:00 - 00098816 _____ C:\Windows\sed.exe
    2016-05-19 21:05 - 2000-08-30 20:00 - 00080412 _____ C:\Windows\grep.exe
    2016-05-19 21:05 - 2000-08-30 20:00 - 00068096 _____ C:\Windows\zip.exe
    2016-05-19 21:03 - 2016-05-19 21:03 - 05659526 ____R (Swearware) C:\Users\sixlove\Desktop\jame.exe
    2016-05-17 21:59 - 2016-05-17 21:59 - 00005102 _____ C:\Users\sixlove\Desktop\Rkill2.txt
    2016-05-17 21:55 - 2016-05-17 22:07 - 00005102 _____ C:\Users\sixlove\Desktop\Rkill.txt
    2016-05-17 21:53 - 2016-05-17 22:09 - 00146416 _____ C:\Windows\ntbtlog.txt
    2016-05-17 21:43 - 2016-05-17 21:48 - 00000000 ____D C:\james
    2016-05-17 21:21 - 2016-05-17 21:43 - 00000000 ____D C:\ComboFix
    2016-05-17 21:14 - 2016-05-19 21:37 - 00000000 ____D C:\Qoobox
    2016-05-17 21:09 - 2016-05-17 21:05 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\sixlove\Desktop\rkill.exe
    2016-05-15 17:04 - 2016-05-15 17:04 - 00000000 _____ C:\Users\sixlove\Desktop\New Text Document.txt
    2016-05-15 11:47 - 2016-05-15 17:33 - 00000000 ____D C:\Users\sixlove\AppData\Roaming\RebateInformer
    2016-05-15 11:46 - 2016-05-15 11:46 - 00000000 ____D C:\Users\sixlove\AppData\Local\iWebar
    2016-05-15 11:45 - 2016-05-15 17:33 - 00000000 ____D C:\Program Files\RebateInformer
    2016-05-15 11:44 - 2016-05-15 11:44 - 00000000 ____D C:\Users\Public\Documents\ShopperPro
    2016-05-15 11:42 - 2016-05-15 17:33 - 00000000 ____D C:\Program Files\Object Browser
    2016-05-15 11:42 - 2016-05-15 11:44 - 00000000 ____D C:\Users\sixlove\AppData\Local\Weather_Notifications,_LL
    2016-05-15 11:42 - 2016-05-15 11:42 - 00000000 ____D C:\Program Files\Common Files\Goobzo
    2016-05-15 11:41 - 2016-05-15 17:33 - 00000000 ____D C:\Program Files\The weDownload Manager
    2016-05-15 11:41 - 2016-05-15 11:41 - 00000000 ____D C:\Users\House\AppData\Local\iWebar
    2016-05-15 11:40 - 2016-05-15 17:33 - 00000000 ____D C:\Users\sixlove\AppData\Roaming\newnext.me
    2016-05-15 11:40 - 2016-05-15 17:33 - 00000000 ____D C:\Users\sixlove\AppData\Local\ArcadeParlor
    2016-05-15 11:40 - 2016-05-15 17:33 - 00000000 ____D C:\Program Files\iWebar
    2016-05-15 11:39 - 2016-05-15 17:33 - 00000000 ____D C:\Program Files\BetterBrowse
    2016-05-15 11:39 - 2016-05-15 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Fix Speed
    2016-05-13 19:49 - 2016-05-13 19:49 - 00028497 _____ C:\Users\sixlove\Desktop\AdwCleaner[C1].txt
    2016-05-13 17:15 - 2016-05-13 17:57 - 00000000 ____D C:\AdwCleaner
    2016-05-13 17:14 - 2016-05-13 17:14 - 00000000 ____D C:\ProgramData\RogueKiller
    2016-05-13 17:13 - 2016-05-13 17:14 - 00011381 _____ C:\Users\sixlove\Desktop\JRT.txt
    2016-05-12 22:26 - 2016-05-12 22:17 - 01610816 _____ (Malwarebytes) C:\Users\sixlove\Desktop\JRT.exe
    2016-05-12 22:26 - 2016-05-12 22:11 - 19837512 _____ C:\Users\sixlove\Desktop\RogueKiller.exe
    2016-04-28 20:30 - 2016-05-19 21:10 - 00029168 _____ C:\Windows\system32\Drivers\ccavsfi.dat
    2016-04-28 17:07 - 2016-04-28 17:07 - 00001942 _____ C:\Users\Public\Desktop\COMODO Cloud Antivirus.lnk
    2016-04-28 17:07 - 2016-04-28 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
    2016-04-28 17:06 - 2016-04-28 17:07 - 00000000 ____D C:\ProgramData\COMODO
    2016-04-28 17:06 - 2016-04-28 17:06 - 00000000 ____D C:\Program Files\COMODO
    2016-04-28 17:05 - 2016-04-28 16:38 - 05823752 _____ (COMODO) C:\Users\sixlove\Desktop\ccav_installer.exe
    2016-04-28 17:05 - 2016-04-28 16:37 - 22851472 _____ (Malwarebytes ) C:\Users\sixlove\Desktop\mbam-setup-2.2.1.1043.exe
    2016-04-28 17:05 - 2016-04-28 16:37 - 03581504 _____ C:\Users\sixlove\Desktop\adwcleaner_5.114.exe
    2016-04-28 17:05 - 2016-03-22 18:18 - 14243008 _____ (Microsoft Corporation) C:\Users\sixlove\Desktop\mseinstall.exe
    2016-04-26 21:46 - 2016-05-20 18:22 - 00017278 _____ C:\Users\sixlove\Desktop\FRST.txt
    2016-04-26 21:46 - 2016-04-26 21:48 - 00046005 _____ C:\Users\sixlove\Desktop\Addition.txt
    2016-04-26 21:44 - 2016-05-20 18:21 - 00000000 ____D C:\FRST
    2016-04-26 21:44 - 2016-04-25 15:57 - 01726976 _____ (Farbar) C:\Users\sixlove\Desktop\FRST.exe
    2016-04-23 12:19 - 2016-04-23 12:19 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (4).exe
    2016-04-23 12:18 - 2016-04-23 12:18 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (3).exe
    2016-04-23 12:17 - 2016-04-23 12:17 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue.exe
    2016-04-23 12:17 - 2016-04-23 12:17 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (2).exe
    2016-04-23 12:17 - 2016-04-23 12:17 - 01835048 _____ (LogMeIn, Inc.) C:\Users\sixlove\Downloads\Support-LogMeInRescue (1).exe
    2016-04-22 13:21 - 2016-04-22 13:21 - 00431792 _____ (COMODO) C:\Windows\system32\CcavGuard32.dll
    2016-04-22 13:20 - 2016-04-22 13:20 - 00092832 _____ (COMODO) C:\Windows\system32\Drivers\CmdCCAV.sys

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-05-20 18:20 - 2014-09-22 22:50 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfd6d931ad4500.job
    2016-05-20 18:20 - 2014-04-19 18:15 - 00000000 ____D C:\Users\sixlove\AppData\Local\CrashDumps
    2016-05-20 18:20 - 2013-09-09 18:58 - 00000000 ____D C:\ProgramData\FileCenter
    2016-05-20 18:19 - 2006-11-02 09:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2016-05-20 18:19 - 2006-11-02 08:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
    2016-05-20 18:19 - 2006-11-02 08:47 - 00003568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
    2016-05-19 21:39 - 2007-12-14 08:30 - 00000012 _____ C:\Windows\bthservsdp.dat
    2016-05-19 21:39 - 2006-11-02 09:01 - 00032556 _____ C:\Windows\Tasks\SCHEDLGU.TXT
    2016-05-19 21:37 - 2008-05-27 18:41 - 00000000 ____D C:\Users\sixlove\AppData\Local\Apps\2.0
    2016-05-19 21:26 - 2006-11-02 07:18 - 00000000 ____D C:\Windows\inf
    2016-05-19 21:26 - 2006-11-02 06:33 - 00759582 _____ C:\Windows\system32\PerfStringBackup.INI
    2016-05-19 21:20 - 2006-11-02 06:23 - 00000215 _____ C:\Windows\system.ini
    2016-05-19 21:18 - 2012-05-04 18:50 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
    2016-05-19 21:17 - 2014-04-19 18:56 - 00000000 ____D C:\Windows\erdnt
    2016-05-19 21:17 - 2006-11-02 06:22 - 55836672 _____ C:\Windows\system32\config\software.bak
    2016-05-19 21:17 - 2006-11-02 06:22 - 55312384 _____ C:\Windows\system32\config\COMPON~3.bak
    2016-05-19 21:17 - 2006-11-02 06:22 - 34340864 _____ C:\Windows\system32\config\system.bak
    2016-05-19 21:17 - 2006-11-02 06:22 - 00262144 _____ C:\Windows\system32\config\security.bak
    2016-05-19 21:17 - 2006-11-02 06:22 - 00262144 _____ C:\Windows\system32\config\sam.bak
    2016-05-19 21:17 - 2006-11-02 06:22 - 00262144 _____ C:\Windows\system32\config\default.bak
    2016-05-19 21:12 - 2014-09-22 22:51 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfd6d9356718b0.job
    2016-05-19 21:04 - 2012-05-04 18:50 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
    2016-05-19 21:04 - 2011-08-20 13:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
    2016-05-15 17:59 - 2014-04-16 15:05 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2016-05-13 19:50 - 2014-04-16 15:05 - 00000861 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2016-05-13 19:50 - 2014-04-16 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2016-05-13 19:50 - 2014-04-16 15:02 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
    2016-05-13 18:00 - 2014-02-23 15:13 - 00000000 ____D C:\Users\House\AppData\LocalLow\Yahoo!
    2016-05-13 18:00 - 2014-02-02 18:18 - 00000000 ____D C:\Users\sixlove\AppData\Roaming\Yahoo!
    2016-05-13 18:00 - 2014-02-02 18:18 - 00000000 ____D C:\Users\sixlove\AppData\LocalLow\Yahoo!
    2016-05-13 18:00 - 2012-08-22 19:13 - 00000947 _____ C:\Users\House\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2016-05-13 18:00 - 2009-04-19 21:09 - 00000947 _____ C:\Users\sixlove\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2016-05-13 18:00 - 2006-11-02 07:18 - 00000000 ____D C:\Program Files\Common Files\System
    2016-05-13 17:57 - 2008-12-15 23:47 - 00000000 ____D C:\Program Files\Yahoo!
    2016-04-23 12:19 - 2014-02-22 20:28 - 00000000 ____D C:\Users\sixlove\AppData\Local\LogMeIn Rescue Applet

    ==================== Files in the root of some directories =======

    2009-02-05 18:53 - 2009-02-05 18:53 - 0024064 _____ () C:\Users\sixlove\AppData\Roaming\UserTile.png
    2007-12-21 23:40 - 2007-12-21 23:40 - 0000000 _____ () C:\Users\sixlove\AppData\Roaming\wklnhst.dat
    2009-08-09 20:51 - 2009-08-09 20:57 - 0002950 _____ () C:\Users\sixlove\AppData\Local\.ipc_copyrecord
    2009-02-21 23:52 - 2009-02-21 23:52 - 0000048 _____ () C:\Users\sixlove\AppData\Local\84756-11986-27475-00TC1-94865
    2012-05-13 14:26 - 2013-10-07 02:58 - 0000680 _____ () C:\Users\sixlove\AppData\Local\d3d9caps.dat
    2007-12-20 00:49 - 2014-02-17 21:27 - 0044544 _____ () C:\Users\sixlove\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    2009-08-09 20:49 - 2009-08-09 20:49 - 0001232 _____ () C:\Users\sixlove\AppData\Local\iTunesPrefs
    2008-05-26 17:23 - 2014-04-16 15:17 - 0026396 _____ () C:\ProgramData\hpzinstall.log

    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-05-19 21:26

    ==================== End of FRST.txt ============================
     
    JusticeNY,
    #18
  20. 2016/05/20
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    Additional scan result of Farbar Recovery Scan Tool (x86) Version:25-04-2016
    Ran by sixlove (2016-05-20 18:22:17)
    Running from C:\Users\sixlove\Desktop
    Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) (2007-12-14 12:21:47)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-3249766445-722992797-2274620919-500 - Administrator - Disabled)
    Guest (S-1-5-21-3249766445-722992797-2274620919-501 - Limited - Disabled)
    House (S-1-5-21-3249766445-722992797-2274620919-1002 - Limited - Enabled) => C:\Users\House
    IUSR_NMPR (S-1-5-21-3249766445-722992797-2274620919-1000 - Limited - Enabled) => C:\Users\IUSR_NMPR
    sixlove (S-1-5-21-3249766445-722992797-2274620919-1001 - Administrator - Enabled) => C:\Users\sixlove

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: COMODO Cloud Antivirus (Disabled - Up to date) {D0CC7563-ABD2-DEBE-138E-FDD553335AF2}
    AS: COMODO Sandbox (Disabled - Up to date) {6BAD9487-8DE8-D130-293E-C6A728B4104F}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
    Adobe Acrobat 4.0 (HKLM\...\Adobe Acrobat 4.0) (Version: - )
    Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
    Adobe ExtendScript Toolkit 2 (HKLM\...\Adobe_3e054d2218e7aa282c2369d939e58ff) (Version: 2.0.2 - Adobe Systems Incorporated)
    Adobe Flash Player 21 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated)
    Adobe Flash Player 21 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
    Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0 - Adobe Systems Incorporated)
    Adobe Photoshop Elements 6.0 (HKLM\...\Adobe Photoshop Elements 6) (Version: 6.0 - Adobe Systems Inc.)
    Adobe Premiere Elements 4.0 (HKLM\...\PremElem40) (Version: 4.0 - Adobe Systems Incorporated)
    Adobe Premiere Elements 4.0 Templates (HKLM\...\PremElem40Templates) (Version: 4.0.0 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
    Adobe Soundbooth CS3 (HKLM\...\Adobe_19c4ee81f9cc4b3dffb9a17d9b648b2) (Version: 1 - Adobe Systems Incorporated)
    AOL Uninstaller (Choose which Products to Remove) (HKLM\...\AOL Uninstaller) (Version: - AOL Inc.)
    Apple Application Support (32-bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
    Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
    ATI Catalyst Control Center (HKLM\...\{055EE59D-217B-43A7-ABFF-507B966405D8}) (Version: 2.007.0731.2233 - )
    Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
    ccc-core-static (Version: 2007.0731.2234.38497 - ATI) Hidden
    Cisco Connect (HKLM\...\Cisco Connect) (Version: 1.3.11006.1 - Cisco Consumer Products LLC)
    COMODO Cloud Antivirus (HKLM\...\Comodo Cloud Antivirus_list_uninstall) (Version: 1.1.387596.183 - Comodo)
    COMODO Cloud Antivirus (Version: 1.1.183.0 - COMODO) Hidden
    Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6021.5000 - Microsoft Corporation)
    Dell DataSafe Online (HKLM\...\{2C6C74C2-042F-4D36-B7B0-0C538FCF01AB}) (Version: 1.0.15 - Dell, Inc.)
    Dell Getting Started Guide (HKLM\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
    Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell)
    Dell System Detect (HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\73f463568823ebbe) (Version: 6.5.0.6 - Dell)
    Digital Line Detect (HKLM\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc)
    ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
    FileCenter 8.0.0.23 (HKLM\...\{8BC914BF-F80D-47D9-BD1E-809EB6A7C23C}_is1) (Version: 8.0.0.23 - Lucion Technologies, LLC)
    Google Chrome (HKLM\...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)
    Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)
    Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
    Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (Version: 1.3.30.3 - Google Inc.) Hidden
    HP Photosmart Essential (HKLM\...\{EB21A812-671B-4D08-B974-2A347F0D8F70}) (Version: 1.12.0.46 - HP)
    HP Product Detection (HKLM\...\{8A9FC225-75F6-4B5D-911C-0ED230565643}) (Version: 11.15.0009 - HP)
    HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    HP_Network_UserGuide (Version: 1.00.0000 - Hewlett-Packard) Hidden
    HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
    HPSSupply (HKLM\...\{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}) (Version: 2.1.3.0000 - Hewlett Packard Development Company L.P.)
    iCloud (HKLM\...\{79BD66B2-4DAE-4C3B-B08E-DC72E507C163}) (Version: 2.1.3.25 - Apple Inc.)
    Intel(R) PRO Network Connections 12.1.12.4 (HKLM\...\PROSetDX) (Version: - Dell)
    Intel(R) Viiv(TM) Software (HKLM\...\Intel(R) Configuration Center) (Version: 1.7.512.0 - Intel Corporation)
    iPhone Configuration Utility (HKLM\...\{FA54AFB1-5745-4389-B8C1-9F7509672ED1}) (Version: 2.1.0.163 - Apple Inc.)
    iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.)
    Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
    magicJack (HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\magicJack) (Version: 2.0.6073.4252 - magicJack L.P.)
    Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
    Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft Office XP Professional (HKLM\...\{90110409-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.2627.01 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    MobileMe Control Panel (HKLM\...\{5A9AA2C0-972F-4239-AA41-E409434194D5}) (Version: 3.1.8.0 - Apple Inc.)
    Mozilla Firefox 41.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 41.0.2 (x86 en-US)) (Version: 41.0.2 - Mozilla)
    Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 41.0.2.5765 - Mozilla)
    MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    Music, Photos & Videos Launcher (HKLM\...\{D7769185-9A7C-48D4-8874-5388743A1DE2}) (Version: 1.00.0000 - Dell Inc.)
    PDF-XChange 4 (HKLM\...\{EA08048C-3823-4DC8-B169-1D5D11FFC19F}_is1) (Version: 4.0.201.0 - Tracker Software Products Ltd)
    PDF-XChange Lite 4 (HKLM\...\{B860298B-CE03-4DE2-B92E-422F2C20A2D8}_is1) (Version: 4.0.201.0 - Tracker Software Products Ltd)
    Product Documentation Launcher (HKLM\...\{89CEAE14-DD0F-448E-9554-15781EC9DB24}) (Version: 1.00.0000 - Dell Inc.)
    QuickTime 7 (HKLM\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
    Roxio Activation Module (HKLM\...\{07159635-9DFE-4105-BFC0-2817DB540C68}) (Version: 1.0 - Roxio)
    Roxio Creator Audio (HKLM\...\{83FFCFC7-88C6-41C6-8752-958A45325C82}) (Version: 3.5.0 - Roxio)
    Roxio Creator BDAV Plugin (HKLM\...\{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}) (Version: 3.5.0 - Roxio)
    Roxio Creator Copy (HKLM\...\{619CDD8A-14B6-43A1-AB6C-0F4EE48CE048}) (Version: 3.5.0 - Roxio)
    Roxio Creator Data (HKLM\...\{0D397393-9B50-4C52-84D5-77E344289F87}) (Version: 3.5.0 - Roxio)
    Roxio Creator Premier (HKLM\...\{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}) (Version: 3.5.0 - Roxio)
    Roxio Creator Tools (HKLM\...\{0394CDC8-FABD-4ED8-B104-03393876DFDF}) (Version: 3.5.0 - Roxio)
    Roxio EasyArchive (HKLM\...\{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}) (Version: 3.5.0 - Roxio)
    Roxio Express Labeler (HKLM\...\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}) (Version: 3.2 - Roxio)
    Roxio MyDVD Premier (HKLM\...\{AAC90D5F-B8B1-4A06-B888-F3A241124D0D}) (Version: 9.1.573 - Roxio)
    Roxio Update Manager (HKLM\...\{30465B6C-B53F-49A1-9EBA-A3F187AD502E}) (Version: 6.0.0 - Roxio)
    Safari (HKLM\...\{FA4C2D53-205F-4245-9717-F3761154824D}) (Version: 5.34.57.2 - Apple Inc.)
    Skins (Version: 2007.0731.2234.38497 - ATI) Hidden
    Sonic CinePlayer Decoder Pack (HKLM\...\{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}) (Version: 4.2.0 - Sonic Solutions)
    Sprint Desktop Sync (HKLM\...\{F818A41D-3535-4949-83BB-E41121697A97}) (Version: 2.00.0000 - Core Mobility, Inc.)
    TouchCopy 09 (HKLM\...\{8F3BE4DF-76F3-443A-A305-A14FC648010C}) (Version: 9.99 - Wide Angle Software)
    User's Guides (HKLM\...\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}) (Version: - )
    WinZip 11.1 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5}) (Version: 11.1.7466 - WinZip Computing, S.L. )
    Wizard101 (HKLM\...\{A9E27FF5-6294-46A8-B8FD-77B1DECA3021}) (Version: 1.0.0 - KingsIsle Entertainment, Inc.)
    XPS MiniView Gadget (HKLM\...\{A73BDB2A-E4A7-4FE8-960E-6A5C8BF76FCB}) (Version: 1.00.0000 - CompanionLink Software, Inc.)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{062D6B05-B83A-46DE-81AD-1750FB7C8DE5}\localserver32 -> "C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{32E26FD9-F435-4A20-A561-35D4B987CFDC}\InprocServer32 -> C:\ProgramData\WebEx\WebEx\T30_MC\atucfobj.dll (Cisco WebEx LLC)
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{82E5DF24-51E8-47CD-864A-F4BD5005AA73}\InprocServer32 -> C:\Users\sixlove\AppData\Local\MICROS~1\INTERN~1\DOWNLO~1\iCloud.ocx => No File
    CustomCLSID: HKU\S-1-5-21-3249766445-722992797-2274620919-1001_Classes\CLSID\{92B0265C-B929-4D42-BA54-75AA39C99198}\localserver32 -> "C:\Users\sixlove\AppData\Roaming\ShopAtHome\ShopAtHomeHelper\ShopAtHomeHelper.exe" => No File

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {3C0F8DB4-D59E-4246-98F0-15B08288EF39} - System32\Tasks\{E0FB1225-99DF-4A7E-91CC-1902632554AA} => pcalua.exe -a E:\SETUP.EXE -d E:\
    Task: {3C6FABCD-6B93-4959-B2B6-EDA250932275} - System32\Tasks\{0EB340C3-3EAC-4FA2-8967-1596DEB98B3A} => pcalua.exe -a "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" -d "C:\Program Files\HP\Digital Imaging\bin" -c -inst "#Hewlett-Packard#HP Photosmart 2600 series#1212094606" -d "HP Photosmart 2600 series" -testfax "yes "
    Task: {4D8B06DE-F363-4D53-B6A9-FE47962E662C} - System32\Tasks\{3C1801AC-C822-4A70-A718-80CFD89776B9} => pcalua.exe -a E:\setup.exe -d E:\
    Task: {51558F0E-867A-4609-8241-14C339588951} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-19] (Adobe Systems Incorporated)
    Task: {6EB6B50F-7D18-4A2A-886E-7AB792121068} - System32\Tasks\GoogleUpdateTaskMachineCore1cfd6d931ad4500 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {7901FEFB-5C46-45E1-99CB-B08A25C273CC} - System32\Tasks\Apple Diagnostics => C:\Program Files\Common Files\Apple\Internet Services\EReporter.exe [2013-10-31] (Apple Inc.)
    Task: {84B062A3-2827-4DEE-B99C-ECEC70625461} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
    Task: {B4F974E4-6DD0-4EC3-8918-054F185A9B07} - System32\Tasks\GoogleUpdateTaskMachineUA1cfd6d9356718b0 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {CCC67470-33E3-4ED4-9A90-7729829075C3} - System32\Tasks\{3301C434-394E-45C5-9BC8-11746E72A002} => pcalua.exe -a E:\setup.exe -d E:\

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfd6d931ad4500.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfd6d9356718b0.job => C:\Program Files\Google\Update\GoogleUpdate.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    ==================== Loaded Modules (Whitelisted) ==============

    2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
    2015-03-20 18:12 - 2015-03-20 18:12 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
    2011-11-10 03:11 - 2011-11-10 03:11 - 00037376 _____ () C:\Windows\system32\atitmpxx.dll
    2013-09-14 02:51 - 2013-09-14 02:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
    2013-09-14 02:50 - 2013-09-14 02:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
    2007-08-23 16:58 - 2007-08-23 16:58 - 02070000 _____ () C:\Program Files\XPSMiniViewGadget\XPSMiniViewGadget.exe

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)


    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LMIRescue_26b2270b-3700-4837-aad7-08c67032fc5b => " "= "Service "

    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-3249766445-722992797-2274620919-1001\...\dell.com -> dell.com

    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2006-11-02 06:23 - 2016-05-19 21:19 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

    127.0.0.1 localhost

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-3249766445-722992797-2274620919-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\Wallpaper\img24.jpg
    DNS Servers: Media is not connected to internet.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)

    MSCONFIG\Services: APNMCP => 2
    MSCONFIG\Services: FLEXnet Licensing Service => 3
    MSCONFIG\Services: STacSV => 2
    MSCONFIG\startupfolder: C:^Users^sixlove^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sprint media monitor.lnk => C:\Windows\pss\Sprint media monitor.lnk.Startup
    MSCONFIG\startupreg: cdloader => "C:\Users\sixlove\AppData\Roaming\mjusbsp\cdloader2.exe" MAGICJACK
    MSCONFIG\startupreg: ECenter => C:\Dell\E-Center\EULALauncher.exe
    MSCONFIG\startupreg: SigmatelSysTrayApp => C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
    FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
    FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
    FirewallRules: [{24E07C88-1FE0-4AD8-8D9C-49FD9CDD032C}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe
    FirewallRules: [{41AFDD03-4BD8-4B6F-AF7A-78C1AE97A699}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.exe
    FirewallRules: [{310710D4-3185-4B5C-AC06-01B6210B44E5}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
    FirewallRules: [{1F552DBD-598F-4204-885D-180B5A3E9786}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
    FirewallRules: [{91F757BA-309C-4CBF-84AB-ECA49C65D9C5}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
    FirewallRules: [{9AD5E102-C65B-4CDB-B00A-DECD8379F614}] => (Allow) C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
    FirewallRules: [{B249DE5D-1B7A-4F82-994E-3746C8E6EB6D}] => (Allow) LPort=9442
    FirewallRules: [{F35D4BF5-0C0E-47F2-90C4-EE4C1FAD3C0C}] => (Allow) LPort=1900
    FirewallRules: [{FDD55FE3-7A37-4D2D-8176-171259BFF538}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [{EAD8BC82-DD43-485D-9987-DEA0C609C683}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 6.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [{8A78A203-AB19-4601-BD70-0B8C77FF2531}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zS4010.tmp\setup\HPZnui01.exe
    FirewallRules: [{6F96998A-ECB5-4208-B58E-BD392DFE9D12}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zS4010.tmp\setup\HPZnui01.exe
    FirewallRules: [{FAA1BA8A-7F39-45ED-A637-93E7916AEAE0}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zSB4F2.tmp\setup\HPZnui01.exe
    FirewallRules: [{72302808-BCFB-4EA5-B25E-E22041625815}] => (Allow) C:\Users\sixlove\AppData\Local\Temp\7zSB4F2.tmp\setup\HPZnui01.exe
    FirewallRules: [{F06DCFB6-A927-4052-994C-55D5861E3F34}] => (Allow) LPort=80
    FirewallRules: [{D2EAD6F7-72E5-4B28-B7C0-9A4A72E4EFA8}] => (Allow) LPort=80
    FirewallRules: [{C2E0C213-9C05-43FB-BE0A-53BDE90B4A28}] => (Allow) LPort=80
    FirewallRules: [{1E9C3342-0932-41B4-A546-A9454D08CC87}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{370649EC-28C8-4A24-B518-467EA06668B8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{A0A5C2EC-DC82-4CF8-977D-69B434961388}] => (Allow) C:\Users\sixlove\Desktop\NOI.exe
    FirewallRules: [{B7357DB8-4502-4EA9-97F8-347129549142}] => (Allow) C:\Users\sixlove\Desktop\NOI.exe
    FirewallRules: [TCP Query User{C5EDDD49-A1BE-42C2-B731-BE16F33A5803}C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe] => (Allow) C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe
    FirewallRules: [UDP Query User{28B145DF-D6C9-4F4E-854A-8CFBCFA5D84B}C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe] => (Allow) C:\users\sixlove\appdata\local\xenocode\sandbox\n.o.i\1.3.0.0\2011.04.19t17.15\virtual\stubexe\8.0.1112\@desktop@\noi.exe
    FirewallRules: [TCP Query User{B5BB450C-BD91-491E-BE8A-756696F5DF06}C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe] => (Allow) C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe
    FirewallRules: [UDP Query User{AA3BA73B-A695-40D7-8D42-EFCA45AA4099}C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe] => (Allow) C:\users\sixlove\appdata\roaming\mjusbsp\magicjack.exe
    FirewallRules: [{049E5C54-3AC0-4FC3-AC66-2F28374F4EDC}] => (Allow) C:\Program Files\iolo\System Mechanic Professional\SysMech.exe
    FirewallRules: [{5092CAA6-77E1-473E-B143-201E4587445D}] => (Allow) C:\Program Files\iolo\System Mechanic Professional\SysMech.exe
    FirewallRules: [{2B194D6C-3B9C-419F-90C9-579D2F1F6281}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{D02EBA9E-0F79-4868-9A9C-37F476E03599}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [TCP Query User{6D596F79-BA79-4594-9227-4DCEE2A7280E}C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Block) C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
    FirewallRules: [UDP Query User{5370C081-FEC0-49A5-9F0B-E34A87E9B820}C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe] => (Block) C:\users\house\appdata\local\logmein rescue applet\lmir0001.tmp\lmi_rescue.exe
    FirewallRules: [{C0B46CCD-C51D-4DBE-AED5-052405F49F07}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
    FirewallRules: [{0289554A-83AB-4E3F-97E6-B19A87BA5290}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLDial.exe
    FirewallRules: [{A59473C7-903F-451D-B9F6-B7A0F94D83F2}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLDial.exe
    FirewallRules: [{BC7FEA3F-1763-4019-8C3C-6CE024EDD7EF}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLacsd.exe
    FirewallRules: [{46B47C58-D80E-4D7A-A62B-2A08E341CDEB}] => (Allow) C:\Program Files\Common Files\AOL\acs\AOLacsd.exe
    FirewallRules: [{CE7A8C2E-2A5A-4D11-B57A-1F23242AAEEA}] => (Allow) C:\Program Files\Common Files\AOL\1413747133\ee\aolsoftware.exe
    FirewallRules: [{330F4F61-6162-4A86-B77C-B01B3A125FB7}] => (Allow) C:\Program Files\Common Files\AOL\1413747133\ee\aolsoftware.exe
    FirewallRules: [{20F8CDC4-4900-4DA3-A7CB-65772AAAD891}] => (Allow) C:\Program Files\AOL Desktop 9.7\waol.exe
    FirewallRules: [{EB4815FA-02F1-4D47-BD93-4B7B998D7E60}] => (Allow) C:\Program Files\AOL Desktop 9.7\waol.exe
    FirewallRules: [{976994FB-03ED-4926-B08C-B039B159C010}] => (Allow) C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe
    FirewallRules: [{277D28D7-4875-4315-94BE-4BDA269C7BD4}] => (Allow) C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe
    FirewallRules: [{4BFC07C9-BC2D-471A-AF89-52E33DCA1E56}] => (Allow) C:\Program Files\Common Files\AOL\Loader\aolload.exe
    FirewallRules: [{E19B7698-0046-48D0-9F8F-1F4731378AED}] => (Allow) C:\Program Files\Common Files\AOL\Loader\aolload.exe
    FirewallRules: [{28B90287-A75D-4210-8A68-ECDAE51BDF68}] => (Allow) C:\Program Files\Common Files\AOL\System Information\sinf.exe
    FirewallRules: [{567D0C58-A6FB-4E8B-8F5F-13336BF4EC37}] => (Allow) C:\Program Files\Common Files\AOL\System Information\sinf.exe
    FirewallRules: [{D8CA5DA7-BB11-4E94-B4DF-3B6908DF10B5}] => (Allow) C:\Program Files\AOL Desktop 9.7\aolbrowser.exe
    FirewallRules: [{FEBC1544-E59B-4C89-947D-07AE6F39A10A}] => (Allow) C:\Program Files\AOL Desktop 9.7\aolbrowser.exe
    FirewallRules: [TCP Query User{6D312A6D-AF6E-4672-A96E-FF86D7E1916E}C:\program files\xbmc\xbmc.exe] => (Allow) C:\program files\xbmc\xbmc.exe
    FirewallRules: [UDP Query User{71995D42-EF64-464C-83DC-1484A811545F}C:\program files\xbmc\xbmc.exe] => (Allow) C:\program files\xbmc\xbmc.exe
    FirewallRules: [TCP Query User{81A44424-0AEF-4791-900D-5A694A0B3C7B}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
    FirewallRules: [UDP Query User{45DC5187-EB3A-4FEC-9C3B-71C81FD65D34}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
    FirewallRules: [{A76BC259-44AC-40B6-AD3B-511B84CF7538}] => (Allow) C:\Program Files\iTunes\iTunes.exe
    FirewallRules: [{162773E6-7479-4267-9567-8C9CB6307316}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
    FirewallRules: [{723BC2BD-F9DD-4212-A423-6128330B961F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
    FirewallRules: [{DD7DC078-028D-492B-B0C5-43DCC6762C26}] => (Allow) C:\Users\sixlove\AppData\Local\temp\7zS4599\HPDiagnosticCoreUI.exe
    FirewallRules: [{93E106E9-044E-42EC-84DD-24215F12E8B6}] => (Allow) C:\Users\sixlove\AppData\Local\temp\7zS4599\HPDiagnosticCoreUI.exe
    FirewallRules: [{EAA877FA-875C-4EC5-ABA9-B2BEA9B6FE89}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

    ==================== Restore Points =========================

    28-03-2016 00:00:00 Scheduled Checkpoint
    29-03-2016 00:00:00 Scheduled Checkpoint
    30-03-2016 00:00:04 Scheduled Checkpoint
    31-03-2016 00:00:00 Scheduled Checkpoint
    01-04-2016 00:00:01 Scheduled Checkpoint
    02-04-2016 00:00:01 Scheduled Checkpoint
    03-04-2016 00:00:01 Scheduled Checkpoint
    04-04-2016 00:00:01 Scheduled Checkpoint
    05-04-2016 00:00:01 Scheduled Checkpoint
    06-04-2016 00:00:04 Scheduled Checkpoint
    07-04-2016 00:00:01 Scheduled Checkpoint
    08-04-2016 00:00:03 Scheduled Checkpoint
    09-04-2016 00:00:03 Scheduled Checkpoint
    10-04-2016 23:13:08 Scheduled Checkpoint
    12-04-2016 00:00:01 Scheduled Checkpoint
    13-04-2016 00:00:01 Scheduled Checkpoint
    13-04-2016 03:00:12 Windows Update
    14-04-2016 00:00:00 Scheduled Checkpoint
    15-04-2016 00:00:00 Scheduled Checkpoint
    16-04-2016 00:00:01 Scheduled Checkpoint
    17-04-2016 00:00:01 Scheduled Checkpoint
    18-04-2016 00:00:01 Scheduled Checkpoint
    19-04-2016 00:00:01 Scheduled Checkpoint
    20-04-2016 15:02:26 Scheduled Checkpoint
    22-04-2016 00:00:01 Scheduled Checkpoint
    23-04-2016 00:00:01 Scheduled Checkpoint
    27-04-2016 19:00:35 Scheduled Checkpoint
    28-04-2016 17:06:33 Installed COMODO Cloud Antivirus
    13-05-2016 17:12:03 JRT Pre-Junkware Removal
    15-05-2016 12:08:02 Scheduled Checkpoint

    ==================== Faulty Device Manager Devices =============

    Name: Microsoft 6to4 Adapter
    Description: Microsoft 6to4 Adapter
    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
    Manufacturer: Microsoft
    Service: tunnel
    Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
    Resolution: Update the driver

    Name:
    Description:
    Class Guid:
    Manufacturer:
    Service: TelevisionFanaticService
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action ", and then click "Enable Device ". This starts the Enable Device wizard. Follow the instructions.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (05/20/2016 06:20:45 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, faulting module CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, exception code 0xc0000005, fault offset 0x00013190,
    process id 0xc58, application start time 0xCCU_Engine.exe0.

    Error: (05/19/2016 09:21:41 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, faulting module CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, exception code 0xc0000005, fault offset 0x00013190,
    process id 0x6cc, application start time 0xCCU_Engine.exe0.

    Error: (05/19/2016 09:03:19 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, faulting module CCU_Engine.exe, version 1.7.548.0, time stamp 0x46803fc5, exception code 0xc0000005, fault offset 0x00013190,
    process id 0xdb0, application start time 0xCCU_Engine.exe0.

    Error: (05/17/2016 10:14:44 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application Notepad.exe, version 6.0.6002.19438, time stamp 0x559e8472, faulting module gdiplus.dll_unloaded, version 0.0.0.0, time stamp 0x56fafc1b, exception code 0xc0000005, fault offset 0x73f1736a,
    process id 0x708, application start time 0xNotepad.exe0.

    Error: (05/17/2016 10:02:02 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application AcroRd32.exe, version 11.0.8.4, time stamp 0x53e10c55, faulting module comctl32.dll, version 6.10.6002.19373, time stamp 0x553a685b, exception code 0xc0000005, fault offset 0x000224ca,
    process id 0x4b8, application start time 0xAcroRd32.exe0.

    Error: (05/17/2016 10:01:00 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application AcroRd32.exe, version 11.0.8.4, time stamp 0x53e10c55, faulting module comctl32.dll, version 6.10.6002.19373, time stamp 0x553a685b, exception code 0xc0000005, fault offset 0x000224ca,
    process id 0x408, application start time 0xAcroRd32.exe0.

    Error: (05/17/2016 09:59:57 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application AcroRd32.exe, version 11.0.8.4, time stamp 0x53e10c55, faulting module comctl32.dll, version 6.10.6002.19373, time stamp 0x553a685b, exception code 0xc0000005, fault offset 0x000224ca,
    process id 0x794, application start time 0xAcroRd32.exe0.

    Error: (05/17/2016 09:58:55 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application AcroRd32.exe, version 11.0.8.4, time stamp 0x53e10c55, faulting module comctl32.dll, version 6.10.6002.19373, time stamp 0x553a685b, exception code 0xc0000005, fault offset 0x000224ca,
    process id 0x698, application start time 0xAcroRd32.exe0.

    Error: (05/17/2016 09:57:52 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application AcroRd32.exe, version 11.0.8.4, time stamp 0x53e10c55, faulting module comctl32.dll, version 6.10.6002.19373, time stamp 0x553a685b, exception code 0xc0000005, fault offset 0x000224ca,
    process id 0x2f8, application start time 0xAcroRd32.exe0.

    Error: (05/17/2016 09:56:48 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application AcroRd32.exe, version 11.0.8.4, time stamp 0x53e10c55, faulting module comctl32.dll, version 6.10.6002.19373, time stamp 0x553a685b, exception code 0xc0000005, fault offset 0x000224ca,
    process id 0x224, application start time 0xAcroRd32.exe0.


    System errors:
    =============
    Error: (05/20/2016 06:20:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058

    Error: (05/19/2016 09:25:23 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
    Description: Windows Update

    Error: (05/19/2016 09:19:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058

    Error: (05/19/2016 09:17:12 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: PEVSystemStart

    Error: (05/19/2016 09:16:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: PEVSystemStart

    Error: (05/19/2016 09:13:00 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: PEVSystemStart

    Error: (05/19/2016 09:08:29 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: PEVSystemStart

    Error: (05/19/2016 09:02:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: TelevisionFanaticService%%3

    Error: (05/19/2016 09:02:01 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: Intel(R) Viiv(TM) Media ServerIntel(R) Software Services Manager%%1058

    Error: (05/17/2016 09:55:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: PnP-X IP Bus EnumeratorFunction Discovery Provider Host%%1068


    CodeIntegrity:
    ===================================
    Date: 2016-05-20 18:19:30.681
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\CcavGuard32.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:18:34.720
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\CcavGuard32.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:48.010
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:47.683
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:47.339
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:47.012
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:46.637
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:46.279
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:45.935
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-19 21:09:45.592
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz
    Percentage of memory in use: 30%
    Total physical RAM: 3325.03 MB
    Available physical RAM: 2311.2 MB
    Total Virtual: 6843.05 MB
    Available Virtual: 5947.12 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:283.04 GB) (Free:144.18 GB) NTFS ==>[drive with boot components (obtained from BCD)]
    Drive d: (RECOVERY) (Fixed) (Total:15 GB) (Free:5.3 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 30000000)
    Partition 1: (Not Active) - (Size=55 MB) - (Type=DE)
    Partition 2: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
    Partition 3: (Active) - (Size=283 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================
     
    JusticeNY,
    #19
  21. 2016/05/20
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Download attached fixlist.txt file and save it to the Desktop.
    NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    Run FRST(FRST64) and press the Fix button just once and wait.
    The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
     

    Attached Files:

    broni,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...