Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 05.05.2015, 07:32   #1
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Hallo,
seit einiger Zeit öffnen sich zu den Websiten by Chrome und Firefox zusätzlich auch Werbeseiten, entweder als neuer Tab oder direkt im Vordergrund. Meistens steht an der Seite "powered by Flashbeat". Wie es hier empfohlen wurde, habe ich FRST heruntergeladen und einen Scan gemacht.
Schnelle Hilfe wäre echt toll!
Danke schon mal


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by ViMa (administrator) on SPIELEPC on 05-05-2015 07:46:35
Running from C:\Users\ViMa\Downloads
Loaded Profiles: ViMa (Available profiles: ViMa & Marvin)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
() C:\ProgramData\NetEngine\bin\D7\netengine.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe
() C:\ProgramData\FlashBeat\FlashBeat.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\Mobogenie\MgAssist.exe
(Term Tutor) C:\Program Files (x86)\TermTutor\Service\ttsvc.exe
() C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancerService.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Great Apps) C:\ProgramData\GSwkHYjPE\EKxPYY.exe
(PriceMeter) C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Gambali OEM Software) C:\ProgramData\FlashBeat\Gambali.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Simplygen) C:\Program Files (x86)\Protected Search\ProtectedSearch.exe
() C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancer.exe
() C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\ProgramData\NetEngine\bin\D7\netengine.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
Failed to access process -> HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2012-10-25] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-20] (IDT, Inc.)
HKLM-x32\...\Run: [APSDaemon] => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM-x32\...\Run: [PSUAMain] => "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe" /LaunchSysTray
HKLM-x32\...\Run: [Panda Security URL Filtering] => C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe [235072 2013-09-26] (Visicom Media Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter Search Scope Monitor] => C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [42536 2013-03-28] (MindSpark)
HKLM-x32\...\Run: [IminentMessenger] => C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [748736 2014-04-08] ()
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\SysWOW64\userinit.exe,
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-06-14] (Electronic Arts)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [OneMoreGame] => C:\Users\ViMa\AppData\Roaming\OneMoreGame\OMG.exe
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Super Optimizer] => C:\Program Files (x86)\Super Optimizer\SupOptLauncher.exe [676968 2014-11-04] (SUPER PC TOOLS LIMITED)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Boost] => C:\Program Files (x86)\Boost\Boost.exe [406232 2014-11-19] (Boost Shopping)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [263952 2015-03-16] (Client Connect LTD)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [223504 2015-03-16] (Client Connect LTD)
Startup: C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-03-23]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:64237;https=127.0.0.1:64237
ProxyEnable: [S-1-5-21-130668294-1935915265-711181056-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-130668294-1935915265-711181056-1001] => http=127.0.0.1:64237;https=127.0.0.1:64237
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = 
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&ts=1381483682&type=default&q={searchTerms}
SearchScopes: HKLM -> {601378E2-9B03-4BFF-9464-15CB05450964} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325155&octid=EB_ORIGINAL_CTID&ISID=M783FC972-AFB4-41C0-8913-6B835DFEFD55&SearchSource=58&CUI=&UM=8&UP=SP245EFFC9-4F12-44DD-AA14-0060A1913BE7&q={searchTerms}&D=032315&SSPV=
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://www.mystart.com/results.php?gen=ms&pr=vmn&id=mystarttb&v=5_4&ent=ch_5108&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
BHO: 1ClickMovie-Download V9.0 -> {11111111-1111-1111-1111-110511131182} -> C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-bho64.dll [2014-03-02] (installdaddy)
BHO: Boost -> {2299856A-6506-42E3-A34F-CD35A47C1B19} -> C:\Program Files (x86)\Boost\64Boost.dll [2014-12-30] (Boost)
BHO: Shopping Helper SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: TermTutor -> {6CB99040-7828-4C37-AC01-F15758F43E4D} -> C:\Program Files\TermTutor\IE\TermTutorClientIE.dll [2014-09-04] (Term Tutor)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: IMinent WebBooster (BHO) -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} -> C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll [2014-02-13] ()
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: No Name -> {11111111-1111-1111-1111-110511131182} ->  No File
BHO-x32: CertifiedToolbar -> {198c4e47-6cde-4716-9975-3a92fd1322c0} -> C:\Users\ViMa\AppData\Roaming\CertifiedToolbar\CertifiedToolbar.dll [2013-02-17] (Simplytech Ltd.)
BHO-x32: Boost -> {2299856A-6506-42E3-A34F-CD35A47C1B19} -> C:\Program Files (x86)\Boost\Boost.dll [2014-12-30] (Boost)
BHO-x32: Shopping Helper SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\WINDOWS\SysWOW64\mscoree.dll [2013-08-22] (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll [2014-08-31] (Thinknice Co. Limited)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: TermTutor -> {6CB99040-7828-4C37-AC01-F15758F43E4D} -> C:\Program Files (x86)\TermTutor\IE\TermTutorClientIE.dll [2014-09-04] (Term Tutor)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} ->  No File
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: No Name -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} ->  No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Panda Security Toolbar -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2013-10-01] ()
BHO-x32: Search Assistant BHO -> {c547c6c2-561b-4169-a2a5-20ba771ca93b} -> C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll [2013-03-28] (MindSpark)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
Toolbar: HKLM-x32 - CertifiedToolbar - {198c4e47-6cde-4716-9975-3a92fd1322c0} - C:\Users\ViMa\AppData\Roaming\CertifiedToolbar\CertifiedToolbar.dll [2013-02-17] (Simplytech Ltd.)
Toolbar: HKLM-x32 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2013-10-01] ()
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\WINDOWS\SysWOW64\mscoree.dll [2013-08-22] (Microsoft Corporation)
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 15 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 15 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll [2013-10-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll [2013-10-09] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-03-30] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-28] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-10-31] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=3 -> C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll [2014-04-30] (PriceMeter)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=9 -> C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll [2014-04-30] (PriceMeter)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin -> C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Extension: 1ClickMovie-Download V9.0 - C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\Extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com [2015-04-12]
FF HKLM-x32\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
FF Extension: VideoDownloadConverter - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin [2013-03-28]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-09]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_9cc478a794064cd3958fba97c101aeae_39_1006_20131117_DE_cr_sp_
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-16]
CHR Extension: (Google Drive) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-16]
CHR Extension: (CertifiedToolbar) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebhknkijfbnnlpfoakhhcmfemajbhfe [2014-03-16]
CHR Extension: (Kaspersky Protection) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-08-31]
CHR Extension: (YouTube) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-16]
CHR Extension: (Google Search) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-16]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-08-31]
CHR Extension: (Bookmark Manager) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-07]
CHR Extension: (1ClickMovie-Download V9.0) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm [2014-03-16]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-16]
CHR Extension: (Quick start) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-31]
CHR Extension: (Gmail) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-16]
CHR Extension: (Anti-Banner) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-08-31]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bebhknkijfbnnlpfoakhhcmfemajbhfe] - C:\Program Files (x86)\CertifiedToolbar\chrome\CertifiedToolbar.crx [2013-03-28]
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [dghncoeocefmhkhiphdgikkamjeglbfh] - C:\Program Files (x86)\mystarttb\chrome-newtab-search.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - "C:\Program Files (x86)\Iminent\Iminent.crx" [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2014-05-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3251472 2015-03-16] (Client Connect LTD)
R2 EKxPYY; C:\ProgramData\GSwkHYjPE\EKxPYY.exe [2729944 2015-04-06] (Great Apps)
R2 EZ Software Updater; C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe [221696 2015-02-17] () [File not signed] <==== ATTENTION
R2 FlashBeat; C:\ProgramData\FlashBeat\FlashBeat.exe [358912 2015-04-10] () [File not signed]
R2 Gambali; C:\ProgramData\FlashBeat\Gambali.exe [1916456 2015-03-31] (Gambali OEM Software) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 MgAssistService; C:\Program Files (x86)\Mobogenie\MgAssist.exe [105664 2014-09-06] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-23] (Electronic Arts)
S2 pricemeterliveUpdate; C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [150504 2014-04-30] (PriceMeter)
S3 pricemeterliveUpdatem; C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [150504 2014-04-30] (PriceMeter)
S2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe [3209024 2014-07-20] () [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-11-20] (IDT, Inc.) [File not signed]
R2 ttsvc; C:\Program Files (x86)\TermTutor\Service\ttsvc.exe [276048 2014-09-04] (Term Tutor)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-02] (Microsoft Corporation)
R2 WaNetworkEnhance Service; C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancerService.exe [686592 2015-03-31] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S4 WinkHandler; C:\Program Files (x86)\Iminent\WinkHandler.exe [425792 2014-02-25] () [File not signed]
S4 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2014-01-02] () [File not signed]
S2 NanoServiceMain; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe" [X]
S2 PSUAService; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe" [X]
S4 VideoDownloadConverter_4zService; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-05-28] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-05-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-05-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [91368 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [122088 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [109288 2013-05-29] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [95464 2013-05-29] (Panda Security, S.L.)
S4 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [69864 2013-05-29] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [119016 2013-05-29] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [305896 2013-05-29] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [118504 2013-05-29] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [246504 2013-05-29] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [106216 2013-05-29] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [169192 2013-10-17] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [122600 2013-10-11] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [206056 2013-10-11] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124648 2013-10-11] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [137960 2013-10-11] (Panda Security, S.L.)
S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [105704 2013-10-11] (Panda Security, S.L.)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [58808 2013-04-29] (Panda Security, S.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S1 ttnfd; system32\drivers\ttnfd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 07:46 - 2015-05-05 07:47 - 00037178 _____ () C:\Users\ViMa\Downloads\FRST.txt
2015-05-05 07:45 - 2015-05-05 07:46 - 00000000 ____D () C:\FRST
2015-05-05 07:44 - 2015-05-05 07:44 - 02101248 _____ (Farbar) C:\Users\ViMa\Downloads\FRST64.exe
2015-05-03 11:11 - 2015-05-03 11:12 - 00000000 ____D () C:\Users\ViMa\Documents\3 Bücher Mai 2015 von Antje
2015-04-28 15:06 - 2015-04-28 15:06 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\de.klett.vokabeltrainer.fairway1
2015-04-28 14:40 - 2015-04-28 14:53 - 00000000 ____D () C:\Users\ViMa\Documents\4 eBooks April 2015 von Alexa
2015-04-27 15:26 - 2015-04-27 15:26 - 00000000 ____D () C:\ProgramData\Radio
2015-04-27 15:19 - 2015-04-27 15:19 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-27 14:53 - 2015-04-27 14:53 - 00000000 ___RD () C:\Users\ViMa\AppData\Roaming\Brother
2015-04-21 20:21 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-21 20:21 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-21 20:19 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-21 20:19 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-21 20:19 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-21 20:19 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-21 20:19 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-21 20:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-21 20:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-21 20:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-21 20:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-21 20:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-21 20:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-21 20:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-21 20:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-21 20:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-21 20:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-21 20:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-21 20:18 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-21 20:18 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-21 20:18 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-21 20:18 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-21 20:18 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-21 20:18 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-21 20:18 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-21 20:18 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-21 20:18 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-21 20:18 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-21 20:18 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-21 20:18 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-21 20:18 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-21 20:18 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-21 20:17 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-21 20:17 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-16 17:26 - 2015-04-16 17:26 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\ViMa\Downloads\SpyHunter-installer.exe
2015-04-16 17:20 - 2015-04-16 17:20 - 01124544 _____ (Adobe Systems Incorporated) C:\Users\ViMa\Downloads\flashplayer17_ha_install.exe
2015-04-16 17:19 - 2015-04-16 17:19 - 00859088 _____ (Installer Internet ) C:\Users\ViMa\Downloads\adobe_flash_setup.exe
2015-04-16 17:19 - 2015-04-16 17:19 - 00859088 _____ (Installer Internet ) C:\Users\ViMa\Downloads\adobe_flash_setup(1).exe
2015-04-16 17:02 - 2015-04-16 17:02 - 00004012 _____ () C:\WINDOWS\System32\Tasks\LaunchSignup
2015-04-13 19:13 - 2015-04-13 19:14 - 01055936 _____ (Adobe) C:\Users\ViMa\Downloads\install_flashplayer17x32_mssd_aaa_aih.exe
2015-04-13 18:29 - 2015-04-13 18:29 - 00003080 _____ () C:\WINDOWS\System32\Tasks\{3A837A3D-F1C7-40E3-BA35-24BB805104C6}
2015-04-13 18:21 - 2015-04-13 18:21 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Macromedia
2015-04-13 10:58 - 2015-04-13 10:58 - 00002138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-04-13 08:28 - 2015-04-13 08:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\vlc
2015-04-12 11:33 - 2015-04-12 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaNetworkEnhance
2015-04-12 11:33 - 2015-04-12 11:33 - 00000000 ____D () C:\Program Files (x86)\WaNetworkEnhance
2015-04-12 11:33 - 2015-04-12 11:33 - 00000000 ____D () C:\Program Files (x86)\Wajam
2015-04-10 20:09 - 2015-04-27 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-10 20:09 - 2015-04-10 20:09 - 00001133 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00001121 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\ProgramData\Mozilla
2015-04-10 20:04 - 2015-04-10 20:05 - 00000000 ____D () C:\SMCLpav
2015-04-10 19:42 - 2015-04-10 19:42 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Boost
2015-04-10 19:36 - 2015-04-10 19:38 - 00000000 ____D () C:\Users\Marvin\AppData\Local\WebBar
2015-04-10 19:31 - 2015-04-13 09:37 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694270-78A7-5658-952CB992DEA7
2015-04-10 19:31 - 2015-04-10 19:35 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694289-78A7-5658-952CB992DEA7
2015-04-10 19:30 - 2015-05-04 08:12 - 00009048 _____ () C:\WINDOWS\SysWOW64\GambaliOff.ini
2015-04-10 19:30 - 2015-05-04 08:12 - 00009048 _____ () C:\WINDOWS\system32\GambaliOff.ini
2015-04-10 19:30 - 2015-04-13 10:35 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2015-04-10 19:30 - 2015-04-13 10:31 - 00000000 ____D () C:\ProgramData\4af3ee1bd8a5465f9237a5be8ea89eb9
2015-04-10 19:30 - 2015-04-10 19:30 - 00002083 _____ () C:\WINDOWS\patsearch.bin
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\ProgramData\FlashBeat
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\ProgramData\64115d5071b54724a8d5f67e50237428
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\Program Files (x86)\Boost
2015-04-10 19:30 - 2015-03-31 15:18 - 00408424 _____ (Gambali OEM Software) C:\WINDOWS\system32\Gambali64.dll
2015-04-10 19:30 - 2015-03-31 15:18 - 00340944 _____ (Gambali OEM Software) C:\WINDOWS\SysWOW64\Gambali.dll
2015-04-10 19:27 - 2015-04-27 15:41 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\9A71C85D-1428686857-78A7-5658-952CB992DEA7
2015-04-10 19:27 - 2015-04-10 19:27 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2015-04-10 19:27 - 2015-04-10 19:27 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\ASPackage
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD489.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD45A.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD44B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD42B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD41C.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3FD.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3ED.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3BE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3AE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD38F.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD370.tmp
2015-04-10 19:24 - 2015-04-10 19:24 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (3).exe
2015-04-10 19:24 - 2015-04-10 19:24 - 00000000 ____D () C:\bbc1dd1a-6d91-49f5-8f3a-4cdb431f7251
2015-04-10 19:22 - 2015-04-10 19:22 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (2).exe
2015-04-10 14:41 - 2015-04-10 14:42 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-10 14:41 - 2015-04-10 14:41 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-09 17:36 - 2015-04-09 17:36 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Steam
2015-04-09 15:57 - 2015-04-09 15:57 - 00001875 _____ () C:\Users\Marvin\Desktop\Brother DCP-J4110DW Printer - Verknüpfung.lnk
2015-04-09 15:50 - 2015-04-09 15:50 - 00000000 ___RD () C:\Users\Marvin\AppData\Roaming\Brother
2015-04-08 17:59 - 2015-04-08 17:59 - 00381059 _____ () C:\Users\ViMa\Downloads\Lind, Hera - Himmel und Hoelle.epub
2015-04-08 16:43 - 2015-04-08 16:43 - 00000000 ____D () C:\Users\ViMa\AppData\Local\calibre-cache
2015-04-08 16:42 - 2015-05-03 11:19 - 00000000 ____D () C:\Users\ViMa\Documents\Calibre-Bibliothek
2015-04-08 16:42 - 2015-04-08 17:59 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\calibre
2015-04-08 16:42 - 2015-04-08 16:42 - 00000934 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\ProgramData\Browser
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2015-04-08 16:40 - 2015-04-08 16:41 - 64266240 _____ () C:\Users\ViMa\Downloads\calibre-2.23.0.msi
2015-04-08 15:56 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-04-08 15:56 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-04-08 11:24 - 2015-04-08 13:56 - 00001426 _____ () C:\Users\Marvin\Desktop\Registry kostenlos entrümpeln!.lnk
2015-04-07 17:39 - 2015-04-07 17:39 - 00000000 ____D () C:\CrimeWatch
2015-04-07 17:26 - 2015-04-07 17:28 - 00000000 ____D () C:\Users\ViMa\AppData\Local\CrimeWatch
2015-04-07 17:19 - 2015-05-03 10:06 - 00003436 _____ () C:\WINDOWS\System32\Tasks\NetEngine
2015-04-07 17:19 - 2015-04-07 17:29 - 00000000 ____D () C:\ProgramData\T122078ED
2015-04-07 17:19 - 2015-04-07 17:19 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Steam
2015-04-07 17:19 - 2015-04-07 17:19 - 00000000 ____D () C:\ProgramData\NetEngine
2015-04-07 16:50 - 2015-04-07 16:50 - 00000000 ____D () C:\Users\Marvin\AppData\Local\CrimeWatch
2015-04-07 16:17 - 2015-04-07 16:17 - 00000000 ____D () C:\Users\Marvin\AppData\Local\SearchProtect
2015-04-06 20:30 - 2015-04-27 15:21 - 00000000 ____D () C:\Program Files (x86)\Super Optimizer
2015-04-06 20:30 - 2015-04-06 20:30 - 11236528 _____ (Adobe Systems, Inc.) C:\Users\ViMa\Downloads\flashplayer15_sa_win_32.exe
2015-04-06 20:30 - 2015-04-06 20:30 - 00001625 _____ () C:\Users\ViMa\Desktop\Install Flash Player Update.lnk
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\GSwkHYjPE
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\CrimeWatch
2015-04-06 20:29 - 2015-04-06 20:29 - 00000000 ____D () C:\Users\ViMa\AppData\Local\TNT2

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 07:45 - 2013-12-18 21:13 - 00000000 __RDO () C:\Users\ViMa\SkyDrive
2015-05-05 07:41 - 2013-12-18 21:14 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{08C945B7-41E2-4286-95D2-206B129645C8}
2015-05-05 07:41 - 2013-12-18 19:51 - 01281193 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-05 07:39 - 2014-06-09 10:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-05-05 07:39 - 2014-04-30 16:09 - 00000976 _____ () C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job
2015-05-05 07:39 - 2014-03-02 16:21 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00003164 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-chromeinstaller.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00002504 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-firefoxinstaller.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00001608 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-updater.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00001554 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-codedownloader.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00001442 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-enabler.job
2015-05-05 07:39 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-04 08:26 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-05-04 08:16 - 2013-12-18 21:25 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1001
2015-05-04 08:15 - 2014-09-10 17:15 - 00000306 _____ () C:\WINDOWS\Tasks\WSE_Astromenda.job
2015-05-04 08:14 - 2014-04-30 16:09 - 00000980 _____ () C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job
2015-05-04 08:10 - 2014-03-02 16:21 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-04 08:10 - 2014-02-28 15:10 - 00000314 _____ () C:\WINDOWS\Tasks\SaveSense.job
2015-05-04 08:09 - 2014-02-28 15:09 - 00000314 _____ () C:\WINDOWS\Tasks\Digital Sites.job
2015-05-04 07:54 - 2015-03-16 18:27 - 00003158 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForViMa
2015-05-04 07:54 - 2015-03-16 18:27 - 00000346 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForViMa.job
2015-05-03 11:35 - 2013-03-23 12:59 - 00000787 _____ () C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Daten und Verträge.website
2015-05-03 11:32 - 2015-03-15 12:13 - 00000000 ____D () C:\Users\ViMa\Documents\Klett
2015-05-03 11:30 - 2013-10-09 11:37 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-03 11:27 - 2013-10-11 11:27 - 00000306 _____ () C:\WINDOWS\Tasks\DigitalSite.job
2015-05-03 10:58 - 2015-03-23 19:44 - 00026120 _____ () C:\WINDOWS\BRRBCOM.INI
2015-05-03 10:16 - 2014-03-02 16:21 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-03 10:01 - 2015-03-23 20:15 - 00049152 ___SH () C:\Users\ViMa\Desktop\Thumbs.db
2015-05-03 10:01 - 2013-12-18 19:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-03 10:01 - 2013-08-22 16:46 - 00352892 _____ () C:\WINDOWS\setupact.log
2015-05-03 10:01 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-03 10:00 - 2013-11-14 00:18 - 00167234 _____ () C:\WINDOWS\PFRO.log
2015-05-03 10:00 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-03 09:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-28 14:46 - 2013-11-14 09:27 - 01980934 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-28 14:46 - 2013-11-14 09:11 - 00841326 _____ () C:\WINDOWS\system32\perfh007.dat
2015-04-28 14:46 - 2013-11-14 09:11 - 00191558 _____ () C:\WINDOWS\system32\perfc007.dat
2015-04-28 14:38 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-28 14:36 - 2013-12-18 19:56 - 00000000 ____D () C:\Users\ViMa
2015-04-27 17:33 - 2014-04-30 16:08 - 00000000 ____D () C:\Users\ViMa\AppData\Local\LPT
2015-04-27 17:33 - 2013-03-28 12:08 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Yontoo
2015-04-27 16:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-04-27 16:37 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-27 16:37 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\Iminent
2015-04-27 16:35 - 2014-03-02 12:20 - 00000000 ____D () C:\Program Files (x86)\1ClickMovie-Download V9.0
2015-04-27 16:34 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-27 15:19 - 2015-02-27 15:44 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-27 14:31 - 2015-03-23 17:54 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-27 14:31 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-27 14:30 - 2013-08-02 15:08 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-27 14:24 - 2013-03-28 13:53 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-21 20:17 - 2013-05-22 16:54 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2015-04-16 17:04 - 2013-10-11 11:33 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2015-04-16 17:02 - 2014-06-08 10:29 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-16 17:02 - 2013-03-26 10:06 - 00000000 ____D () C:\ProgramData\Origin
2015-04-14 01:24 - 2015-02-23 17:51 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2015-02-23 17:51 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 10:58 - 2014-03-02 16:21 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-13 10:31 - 2013-03-23 18:51 - 00000000 ____D () C:\Users\ViMa\Documents\Euro Truck Simulator 2
2015-04-13 09:13 - 2013-03-23 12:41 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Packages
2015-04-13 07:57 - 2013-11-17 17:02 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-13 07:56 - 2013-11-17 17:00 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-04-13 07:56 - 2013-11-17 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-13 07:56 - 2013-05-20 17:17 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-12 11:30 - 2015-03-23 19:29 - 00000000 ____D () C:\Users\ViMa\AppData\Local\avaavxvyex
2015-04-12 10:29 - 2013-11-21 18:08 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1004
2015-04-12 08:18 - 2013-12-20 08:52 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{52F99032-B66B-452D-B6AA-618F42C9A45F}
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2015-04-10 19:25 - 2014-08-31 11:19 - 00000000 ____D () C:\Program Files (x86)\EZ Software Updater
2015-04-10 14:18 - 2014-09-10 16:53 - 00259300 _____ () C:\WINDOWS\system32\ScanResults.xml
2015-04-10 13:45 - 2014-09-10 16:48 - 00000464 _____ () C:\WINDOWS\system32\ScannerSettings
2015-04-09 17:59 - 2013-03-23 18:53 - 00000000 ____D () C:\Users\Marvin\Documents\Euro Truck Simulator 2
2015-04-08 18:23 - 2013-12-28 10:11 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-08 15:06 - 2014-08-31 11:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\OneMoreGame
2015-04-08 14:32 - 2013-10-11 11:27 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Systweak
2015-04-07 17:38 - 2015-03-15 11:55 - 00000000 ____D () C:\Program Files (x86)\mystarttb
2015-04-07 17:37 - 2013-10-11 11:28 - 00000000 ____D () C:\ProgramData\Systweak
2015-04-07 17:13 - 2013-02-18 15:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-07 17:12 - 2014-08-31 11:21 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\istartsurf
2015-04-07 17:11 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2015-04-07 17:10 - 2013-10-31 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2015-04-07 17:10 - 2013-10-31 16:32 - 00000000 ____D () C:\Nexon
2015-04-07 17:09 - 2013-02-18 15:29 - 00000000 ____D () C:\ProgramData\Apple
2015-04-06 20:08 - 2013-08-22 16:44 - 00469296 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2013-10-11 12:27 - 2013-11-10 18:27 - 0000099 _____ () C:\Users\ViMa\AppData\Roaming\WB.CFG
2013-10-11 12:27 - 2013-11-10 18:27 - 0000006 _____ () C:\Users\ViMa\AppData\Roaming\WBPU-TTL.DAT
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Input.xml
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Settings.xml
2013-12-15 17:53 - 2013-12-15 17:53 - 0000000 _____ () C:\ProgramData\0x0304A000.sfl
2013-03-23 12:42 - 2013-03-23 12:42 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1296.dll


Some content of TEMP:
====================
C:\Users\Marvin\AppData\Local\Temp\NGMSetup.exe
C:\Users\ViMa\AppData\Local\Temp\6_Offer_11.exe
C:\Users\ViMa\AppData\Local\Temp\A27CD679-6AF1-04B0-581E-51828C046082.exe
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.dll
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.exe
C:\Users\ViMa\AppData\Local\Temp\eFixProPackage.exe
C:\Users\ViMa\AppData\Local\Temp\instrac.exe
C:\Users\ViMa\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\ViMa\AppData\Local\Temp\NGMDll.dll
C:\Users\ViMa\AppData\Local\Temp\NGMResource.dll
C:\Users\ViMa\AppData\Local\Temp\ReimagePackage.exe
C:\Users\ViMa\AppData\Local\Temp\sp64126.exe
C:\Users\ViMa\AppData\Local\Temp\unicows.dll
C:\Users\ViMa\AppData\Local\Temp\Uninstall.exe
C:\Users\ViMa\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-03 09:58

==================== End Of Log ============================
         
--- --- ---


Die Addition-Datei wäre für diesen Beitrag zu lang - ich schicke sie extra, wenn jemand glaubt, dass er mir helfen kann

Alt 05.05.2015, 07:41   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 05.05.2015, 07:45   #3
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Okay, danke, es war nur zu lang, um alles auf einmal zu senden.
Also hier erst mal das eine:


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by ViMa (administrator) on SPIELEPC on 05-05-2015 07:46:35
Running from C:\Users\ViMa\Downloads
Loaded Profiles: ViMa (Available profiles: ViMa & Marvin)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
() C:\ProgramData\NetEngine\bin\D7\netengine.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe
() C:\ProgramData\FlashBeat\FlashBeat.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files (x86)\Mobogenie\MgAssist.exe
(Term Tutor) C:\Program Files (x86)\TermTutor\Service\ttsvc.exe
() C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancerService.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Great Apps) C:\ProgramData\GSwkHYjPE\EKxPYY.exe
(PriceMeter) C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Gambali OEM Software) C:\ProgramData\FlashBeat\Gambali.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Simplygen) C:\Program Files (x86)\Protected Search\ProtectedSearch.exe
() C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancer.exe
() C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\ProgramData\NetEngine\bin\D7\netengine.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
Failed to access process -> HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2012-10-25] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-20] (IDT, Inc.)
HKLM-x32\...\Run: [APSDaemon] => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM-x32\...\Run: [PSUAMain] => "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe" /LaunchSysTray
HKLM-x32\...\Run: [Panda Security URL Filtering] => C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe [235072 2013-09-26] (Visicom Media Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter Search Scope Monitor] => C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [42536 2013-03-28] (MindSpark)
HKLM-x32\...\Run: [IminentMessenger] => C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe [748736 2014-04-08] ()
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\SysWOW64\userinit.exe,
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-06-14] (Electronic Arts)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [OneMoreGame] => C:\Users\ViMa\AppData\Roaming\OneMoreGame\OMG.exe
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Super Optimizer] => C:\Program Files (x86)\Super Optimizer\SupOptLauncher.exe [676968 2014-11-04] (SUPER PC TOOLS LIMITED)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Boost] => C:\Program Files (x86)\Boost\Boost.exe [406232 2014-11-19] (Boost Shopping)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [263952 2015-03-16] (Client Connect LTD)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [223504 2015-03-16] (Client Connect LTD)
Startup: C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-03-23]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:64237;https=127.0.0.1:64237
ProxyEnable: [S-1-5-21-130668294-1935915265-711181056-1001] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-130668294-1935915265-711181056-1001] => http=127.0.0.1:64237;https=127.0.0.1:64237
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = 
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&ts=1381483682&type=default&q={searchTerms}
SearchScopes: HKLM -> {601378E2-9B03-4BFF-9464-15CB05450964} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325155&octid=EB_ORIGINAL_CTID&ISID=M783FC972-AFB4-41C0-8913-6B835DFEFD55&SearchSource=58&CUI=&UM=8&UP=SP245EFFC9-4F12-44DD-AA14-0060A1913BE7&q={searchTerms}&D=032315&SSPV=
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://www.mystart.com/results.php?gen=ms&pr=vmn&id=mystarttb&v=5_4&ent=ch_5108&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
BHO: 1ClickMovie-Download V9.0 -> {11111111-1111-1111-1111-110511131182} -> C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-bho64.dll [2014-03-02] (installdaddy)
BHO: Boost -> {2299856A-6506-42E3-A34F-CD35A47C1B19} -> C:\Program Files (x86)\Boost\64Boost.dll [2014-12-30] (Boost)
BHO: Shopping Helper SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: TermTutor -> {6CB99040-7828-4C37-AC01-F15758F43E4D} -> C:\Program Files\TermTutor\IE\TermTutorClientIE.dll [2014-09-04] (Term Tutor)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: IMinent WebBooster (BHO) -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} -> C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll [2014-02-13] ()
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: No Name -> {11111111-1111-1111-1111-110511131182} ->  No File
BHO-x32: CertifiedToolbar -> {198c4e47-6cde-4716-9975-3a92fd1322c0} -> C:\Users\ViMa\AppData\Roaming\CertifiedToolbar\CertifiedToolbar.dll [2013-02-17] (Simplytech Ltd.)
BHO-x32: Boost -> {2299856A-6506-42E3-A34F-CD35A47C1B19} -> C:\Program Files (x86)\Boost\Boost.dll [2014-12-30] (Boost)
BHO-x32: Shopping Helper SmartbarEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\WINDOWS\SysWOW64\mscoree.dll [2013-08-22] (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll [2014-08-31] (Thinknice Co. Limited)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: TermTutor -> {6CB99040-7828-4C37-AC01-F15758F43E4D} -> C:\Program Files (x86)\TermTutor\IE\TermTutorClientIE.dll [2014-09-04] (Term Tutor)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: No Name -> {84FF7BD6-B47F-46F8-9130-01B2696B36CB} ->  No File
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: No Name -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} ->  No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Panda Security Toolbar -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2013-10-01] ()
BHO-x32: Search Assistant BHO -> {c547c6c2-561b-4169-a2a5-20ba771ca93b} -> C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll [2013-03-28] (MindSpark)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\WINDOWS\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
Toolbar: HKLM-x32 - CertifiedToolbar - {198c4e47-6cde-4716-9975-3a92fd1322c0} - C:\Users\ViMa\AppData\Roaming\CertifiedToolbar\CertifiedToolbar.dll [2013-02-17] (Simplytech Ltd.)
Toolbar: HKLM-x32 - Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll [2013-10-01] ()
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\WINDOWS\SysWOW64\mscoree.dll [2013-08-22] (Microsoft Corporation)
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9 15 C:\WINDOWS\SysWOW64\Gambali.dll [340944 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Winsock: Catalog9-x64 15 C:\WINDOWS\system32\Gambali64.dll [408424 2015-04-10] (Gambali OEM Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll [2013-10-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll [2013-10-09] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-03-30] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-28] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-10-31] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=3 -> C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll [2014-04-30] (PriceMeter)
FF Plugin-x32: @tools.updatepm.com/PriceMeterLiveUpdate Update;version=9 -> C:\Program Files (x86)\PriceMeterLiveUpdate\Update\1.3.23.0\npGoogleUpdate3.dll [2014-04-30] (PriceMeter)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin -> C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Extension: 1ClickMovie-Download V9.0 - C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\Extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com [2015-04-12]
FF HKLM-x32\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
FF Extension: VideoDownloadConverter - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin [2013-03-28]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-09]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_9cc478a794064cd3958fba97c101aeae_39_1006_20131117_DE_cr_sp_
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-16]
CHR Extension: (Google Drive) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-16]
CHR Extension: (CertifiedToolbar) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bebhknkijfbnnlpfoakhhcmfemajbhfe [2014-03-16]
CHR Extension: (Kaspersky Protection) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-08-31]
CHR Extension: (YouTube) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-16]
CHR Extension: (Google Search) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-16]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-08-31]
CHR Extension: (Bookmark Manager) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-07]
CHR Extension: (1ClickMovie-Download V9.0) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm [2014-03-16]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-16]
CHR Extension: (Quick start) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-31]
CHR Extension: (Gmail) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-16]
CHR Extension: (Anti-Banner) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-08-31]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bebhknkijfbnnlpfoakhhcmfemajbhfe] - C:\Program Files (x86)\CertifiedToolbar\chrome\CertifiedToolbar.crx [2013-03-28]
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [dghncoeocefmhkhiphdgikkamjeglbfh] - C:\Program Files (x86)\mystarttb\chrome-newtab-search.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - "C:\Program Files (x86)\Iminent\Iminent.crx" [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [pfkfdlcdbajamklbneflfbcmfgddmpae] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2014-05-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3251472 2015-03-16] (Client Connect LTD)
R2 EKxPYY; C:\ProgramData\GSwkHYjPE\EKxPYY.exe [2729944 2015-04-06] (Great Apps)
R2 EZ Software Updater; C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe [221696 2015-02-17] () [File not signed] <==== ATTENTION
R2 FlashBeat; C:\ProgramData\FlashBeat\FlashBeat.exe [358912 2015-04-10] () [File not signed]
R2 Gambali; C:\ProgramData\FlashBeat\Gambali.exe [1916456 2015-03-31] (Gambali OEM Software) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 MgAssistService; C:\Program Files (x86)\Mobogenie\MgAssist.exe [105664 2014-09-06] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-23] (Electronic Arts)
S2 pricemeterliveUpdate; C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [150504 2014-04-30] (PriceMeter)
S3 pricemeterliveUpdatem; C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [150504 2014-04-30] (PriceMeter)
S2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe [3209024 2014-07-20] () [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-11-20] (IDT, Inc.) [File not signed]
R2 ttsvc; C:\Program Files (x86)\TermTutor\Service\ttsvc.exe [276048 2014-09-04] (Term Tutor)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-02] (Microsoft Corporation)
R2 WaNetworkEnhance Service; C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancerService.exe [686592 2015-03-31] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S4 WinkHandler; C:\Program Files (x86)\Iminent\WinkHandler.exe [425792 2014-02-25] () [File not signed]
S4 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [499856 2014-01-02] () [File not signed]
S2 NanoServiceMain; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe" [X]
S2 PSUAService; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe" [X]
S4 VideoDownloadConverter_4zService; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-05-28] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-05-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-05-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [91368 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [122088 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [109288 2013-05-29] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [95464 2013-05-29] (Panda Security, S.L.)
S4 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [69864 2013-05-29] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [119016 2013-05-29] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [305896 2013-05-29] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [118504 2013-05-29] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [246504 2013-05-29] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [106216 2013-05-29] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [169192 2013-10-17] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [122600 2013-10-11] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [206056 2013-10-11] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124648 2013-10-11] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [137960 2013-10-11] (Panda Security, S.L.)
S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [105704 2013-10-11] (Panda Security, S.L.)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [58808 2013-04-29] (Panda Security, S.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S1 ttnfd; system32\drivers\ttnfd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 07:46 - 2015-05-05 07:47 - 00037178 _____ () C:\Users\ViMa\Downloads\FRST.txt
2015-05-05 07:45 - 2015-05-05 07:46 - 00000000 ____D () C:\FRST
2015-05-05 07:44 - 2015-05-05 07:44 - 02101248 _____ (Farbar) C:\Users\ViMa\Downloads\FRST64.exe
2015-05-03 11:11 - 2015-05-03 11:12 - 00000000 ____D () C:\Users\ViMa\Documents\3 Bücher Mai 2015 von Antje
2015-04-28 15:06 - 2015-04-28 15:06 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\de.klett.vokabeltrainer.fairway1
2015-04-28 14:40 - 2015-04-28 14:53 - 00000000 ____D () C:\Users\ViMa\Documents\4 eBooks April 2015 von Alexa
2015-04-27 15:26 - 2015-04-27 15:26 - 00000000 ____D () C:\ProgramData\Radio
2015-04-27 15:19 - 2015-04-27 15:19 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-27 14:53 - 2015-04-27 14:53 - 00000000 ___RD () C:\Users\ViMa\AppData\Roaming\Brother
2015-04-21 20:21 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-21 20:21 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-21 20:19 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-21 20:19 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-21 20:19 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-21 20:19 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-21 20:19 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-21 20:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-21 20:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-21 20:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-21 20:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-21 20:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-21 20:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-21 20:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-21 20:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-21 20:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-21 20:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-21 20:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-21 20:18 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-21 20:18 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-21 20:18 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-21 20:18 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-21 20:18 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-21 20:18 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-21 20:18 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-21 20:18 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-21 20:18 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-21 20:18 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-21 20:18 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-21 20:18 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-21 20:18 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-21 20:18 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-21 20:17 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-21 20:17 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-16 17:26 - 2015-04-16 17:26 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\ViMa\Downloads\SpyHunter-installer.exe
2015-04-16 17:20 - 2015-04-16 17:20 - 01124544 _____ (Adobe Systems Incorporated) C:\Users\ViMa\Downloads\flashplayer17_ha_install.exe
2015-04-16 17:19 - 2015-04-16 17:19 - 00859088 _____ (Installer Internet ) C:\Users\ViMa\Downloads\adobe_flash_setup.exe
2015-04-16 17:19 - 2015-04-16 17:19 - 00859088 _____ (Installer Internet ) C:\Users\ViMa\Downloads\adobe_flash_setup(1).exe
2015-04-16 17:02 - 2015-04-16 17:02 - 00004012 _____ () C:\WINDOWS\System32\Tasks\LaunchSignup
2015-04-13 19:13 - 2015-04-13 19:14 - 01055936 _____ (Adobe) C:\Users\ViMa\Downloads\install_flashplayer17x32_mssd_aaa_aih.exe
2015-04-13 18:29 - 2015-04-13 18:29 - 00003080 _____ () C:\WINDOWS\System32\Tasks\{3A837A3D-F1C7-40E3-BA35-24BB805104C6}
2015-04-13 18:21 - 2015-04-13 18:21 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Macromedia
2015-04-13 10:58 - 2015-04-13 10:58 - 00002138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-04-13 08:28 - 2015-04-13 08:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\vlc
2015-04-12 11:33 - 2015-04-12 11:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaNetworkEnhance
2015-04-12 11:33 - 2015-04-12 11:33 - 00000000 ____D () C:\Program Files (x86)\WaNetworkEnhance
2015-04-12 11:33 - 2015-04-12 11:33 - 00000000 ____D () C:\Program Files (x86)\Wajam
2015-04-10 20:09 - 2015-04-27 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-10 20:09 - 2015-04-10 20:09 - 00001133 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00001121 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\ProgramData\Mozilla
2015-04-10 20:04 - 2015-04-10 20:05 - 00000000 ____D () C:\SMCLpav
2015-04-10 19:42 - 2015-04-10 19:42 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Boost
2015-04-10 19:36 - 2015-04-10 19:38 - 00000000 ____D () C:\Users\Marvin\AppData\Local\WebBar
2015-04-10 19:31 - 2015-04-13 09:37 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694270-78A7-5658-952CB992DEA7
2015-04-10 19:31 - 2015-04-10 19:35 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694289-78A7-5658-952CB992DEA7
2015-04-10 19:30 - 2015-05-04 08:12 - 00009048 _____ () C:\WINDOWS\SysWOW64\GambaliOff.ini
2015-04-10 19:30 - 2015-05-04 08:12 - 00009048 _____ () C:\WINDOWS\system32\GambaliOff.ini
2015-04-10 19:30 - 2015-04-13 10:35 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2015-04-10 19:30 - 2015-04-13 10:31 - 00000000 ____D () C:\ProgramData\4af3ee1bd8a5465f9237a5be8ea89eb9
2015-04-10 19:30 - 2015-04-10 19:30 - 00002083 _____ () C:\WINDOWS\patsearch.bin
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\ProgramData\FlashBeat
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\ProgramData\64115d5071b54724a8d5f67e50237428
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\Program Files (x86)\Boost
2015-04-10 19:30 - 2015-03-31 15:18 - 00408424 _____ (Gambali OEM Software) C:\WINDOWS\system32\Gambali64.dll
2015-04-10 19:30 - 2015-03-31 15:18 - 00340944 _____ (Gambali OEM Software) C:\WINDOWS\SysWOW64\Gambali.dll
2015-04-10 19:27 - 2015-04-27 15:41 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\9A71C85D-1428686857-78A7-5658-952CB992DEA7
2015-04-10 19:27 - 2015-04-10 19:27 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2015-04-10 19:27 - 2015-04-10 19:27 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\ASPackage
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD489.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD45A.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD44B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD42B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD41C.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3FD.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3ED.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3BE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3AE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD38F.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD370.tmp
2015-04-10 19:24 - 2015-04-10 19:24 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (3).exe
2015-04-10 19:24 - 2015-04-10 19:24 - 00000000 ____D () C:\bbc1dd1a-6d91-49f5-8f3a-4cdb431f7251
2015-04-10 19:22 - 2015-04-10 19:22 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (2).exe
2015-04-10 14:41 - 2015-04-10 14:42 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-10 14:41 - 2015-04-10 14:41 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-09 17:36 - 2015-04-09 17:36 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Steam
2015-04-09 15:57 - 2015-04-09 15:57 - 00001875 _____ () C:\Users\Marvin\Desktop\Brother DCP-J4110DW Printer - Verknüpfung.lnk
2015-04-09 15:50 - 2015-04-09 15:50 - 00000000 ___RD () C:\Users\Marvin\AppData\Roaming\Brother
2015-04-08 17:59 - 2015-04-08 17:59 - 00381059 _____ () C:\Users\ViMa\Downloads\Lind, Hera - Himmel und Hoelle.epub
2015-04-08 16:43 - 2015-04-08 16:43 - 00000000 ____D () C:\Users\ViMa\AppData\Local\calibre-cache
2015-04-08 16:42 - 2015-05-03 11:19 - 00000000 ____D () C:\Users\ViMa\Documents\Calibre-Bibliothek
2015-04-08 16:42 - 2015-04-08 17:59 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\calibre
2015-04-08 16:42 - 2015-04-08 16:42 - 00000934 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\ProgramData\Browser
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2015-04-08 16:40 - 2015-04-08 16:41 - 64266240 _____ () C:\Users\ViMa\Downloads\calibre-2.23.0.msi
2015-04-08 15:56 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-04-08 15:56 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-04-08 11:24 - 2015-04-08 13:56 - 00001426 _____ () C:\Users\Marvin\Desktop\Registry kostenlos entrümpeln!.lnk
2015-04-07 17:39 - 2015-04-07 17:39 - 00000000 ____D () C:\CrimeWatch
2015-04-07 17:26 - 2015-04-07 17:28 - 00000000 ____D () C:\Users\ViMa\AppData\Local\CrimeWatch
2015-04-07 17:19 - 2015-05-03 10:06 - 00003436 _____ () C:\WINDOWS\System32\Tasks\NetEngine
2015-04-07 17:19 - 2015-04-07 17:29 - 00000000 ____D () C:\ProgramData\T122078ED
2015-04-07 17:19 - 2015-04-07 17:19 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Steam
2015-04-07 17:19 - 2015-04-07 17:19 - 00000000 ____D () C:\ProgramData\NetEngine
2015-04-07 16:50 - 2015-04-07 16:50 - 00000000 ____D () C:\Users\Marvin\AppData\Local\CrimeWatch
2015-04-07 16:17 - 2015-04-07 16:17 - 00000000 ____D () C:\Users\Marvin\AppData\Local\SearchProtect
2015-04-06 20:30 - 2015-04-27 15:21 - 00000000 ____D () C:\Program Files (x86)\Super Optimizer
2015-04-06 20:30 - 2015-04-06 20:30 - 11236528 _____ (Adobe Systems, Inc.) C:\Users\ViMa\Downloads\flashplayer15_sa_win_32.exe
2015-04-06 20:30 - 2015-04-06 20:30 - 00001625 _____ () C:\Users\ViMa\Desktop\Install Flash Player Update.lnk
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Optimizer
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\GSwkHYjPE
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\CrimeWatch
2015-04-06 20:29 - 2015-04-06 20:29 - 00000000 ____D () C:\Users\ViMa\AppData\Local\TNT2

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 07:45 - 2013-12-18 21:13 - 00000000 __RDO () C:\Users\ViMa\SkyDrive
2015-05-05 07:41 - 2013-12-18 21:14 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{08C945B7-41E2-4286-95D2-206B129645C8}
2015-05-05 07:41 - 2013-12-18 19:51 - 01281193 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-05 07:39 - 2014-06-09 10:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-05-05 07:39 - 2014-04-30 16:09 - 00000976 _____ () C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job
2015-05-05 07:39 - 2014-03-02 16:21 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00003164 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-chromeinstaller.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00002504 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-firefoxinstaller.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00001608 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-updater.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00001554 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-codedownloader.job
2015-05-05 07:39 - 2014-03-02 12:20 - 00001442 _____ () C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-enabler.job
2015-05-05 07:39 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-04 08:26 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-05-04 08:16 - 2013-12-18 21:25 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1001
2015-05-04 08:15 - 2014-09-10 17:15 - 00000306 _____ () C:\WINDOWS\Tasks\WSE_Astromenda.job
2015-05-04 08:14 - 2014-04-30 16:09 - 00000980 _____ () C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job
2015-05-04 08:10 - 2014-03-02 16:21 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-04 08:10 - 2014-02-28 15:10 - 00000314 _____ () C:\WINDOWS\Tasks\SaveSense.job
2015-05-04 08:09 - 2014-02-28 15:09 - 00000314 _____ () C:\WINDOWS\Tasks\Digital Sites.job
2015-05-04 07:54 - 2015-03-16 18:27 - 00003158 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForViMa
2015-05-04 07:54 - 2015-03-16 18:27 - 00000346 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForViMa.job
2015-05-03 11:35 - 2013-03-23 12:59 - 00000787 _____ () C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Daten und Verträge.website
2015-05-03 11:32 - 2015-03-15 12:13 - 00000000 ____D () C:\Users\ViMa\Documents\Klett
2015-05-03 11:30 - 2013-10-09 11:37 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-03 11:27 - 2013-10-11 11:27 - 00000306 _____ () C:\WINDOWS\Tasks\DigitalSite.job
2015-05-03 10:58 - 2015-03-23 19:44 - 00026120 _____ () C:\WINDOWS\BRRBCOM.INI
2015-05-03 10:16 - 2014-03-02 16:21 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-03 10:01 - 2015-03-23 20:15 - 00049152 ___SH () C:\Users\ViMa\Desktop\Thumbs.db
2015-05-03 10:01 - 2013-12-18 19:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-03 10:01 - 2013-08-22 16:46 - 00352892 _____ () C:\WINDOWS\setupact.log
2015-05-03 10:01 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-03 10:00 - 2013-11-14 00:18 - 00167234 _____ () C:\WINDOWS\PFRO.log
2015-05-03 10:00 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-03 09:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-28 14:46 - 2013-11-14 09:27 - 01980934 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-28 14:46 - 2013-11-14 09:11 - 00841326 _____ () C:\WINDOWS\system32\perfh007.dat
2015-04-28 14:46 - 2013-11-14 09:11 - 00191558 _____ () C:\WINDOWS\system32\perfc007.dat
2015-04-28 14:38 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-28 14:36 - 2013-12-18 19:56 - 00000000 ____D () C:\Users\ViMa
2015-04-27 17:33 - 2014-04-30 16:08 - 00000000 ____D () C:\Users\ViMa\AppData\Local\LPT
2015-04-27 17:33 - 2013-03-28 12:08 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Yontoo
2015-04-27 16:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-04-27 16:37 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-27 16:37 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\Iminent
2015-04-27 16:35 - 2014-03-02 12:20 - 00000000 ____D () C:\Program Files (x86)\1ClickMovie-Download V9.0
2015-04-27 16:34 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-27 15:19 - 2015-02-27 15:44 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-27 14:31 - 2015-03-23 17:54 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-27 14:31 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-27 14:30 - 2013-08-02 15:08 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-27 14:24 - 2013-03-28 13:53 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-21 20:17 - 2013-05-22 16:54 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2015-04-16 17:04 - 2013-10-11 11:33 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2015-04-16 17:02 - 2014-06-08 10:29 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-16 17:02 - 2013-03-26 10:06 - 00000000 ____D () C:\ProgramData\Origin
2015-04-14 01:24 - 2015-02-23 17:51 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2015-02-23 17:51 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 10:58 - 2014-03-02 16:21 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-13 10:31 - 2013-03-23 18:51 - 00000000 ____D () C:\Users\ViMa\Documents\Euro Truck Simulator 2
2015-04-13 09:13 - 2013-03-23 12:41 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Packages
2015-04-13 07:57 - 2013-11-17 17:02 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-13 07:56 - 2013-11-17 17:00 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-04-13 07:56 - 2013-11-17 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-13 07:56 - 2013-05-20 17:17 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-12 11:30 - 2015-03-23 19:29 - 00000000 ____D () C:\Users\ViMa\AppData\Local\avaavxvyex
2015-04-12 10:29 - 2013-11-21 18:08 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1004
2015-04-12 08:18 - 2013-12-20 08:52 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{52F99032-B66B-452D-B6AA-618F42C9A45F}
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2015-04-10 19:25 - 2014-08-31 11:19 - 00000000 ____D () C:\Program Files (x86)\EZ Software Updater
2015-04-10 14:18 - 2014-09-10 16:53 - 00259300 _____ () C:\WINDOWS\system32\ScanResults.xml
2015-04-10 13:45 - 2014-09-10 16:48 - 00000464 _____ () C:\WINDOWS\system32\ScannerSettings
2015-04-09 17:59 - 2013-03-23 18:53 - 00000000 ____D () C:\Users\Marvin\Documents\Euro Truck Simulator 2
2015-04-08 18:23 - 2013-12-28 10:11 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-08 15:06 - 2014-08-31 11:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\OneMoreGame
2015-04-08 14:32 - 2013-10-11 11:27 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Systweak
2015-04-07 17:38 - 2015-03-15 11:55 - 00000000 ____D () C:\Program Files (x86)\mystarttb
2015-04-07 17:37 - 2013-10-11 11:28 - 00000000 ____D () C:\ProgramData\Systweak
2015-04-07 17:13 - 2013-02-18 15:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-07 17:12 - 2014-08-31 11:21 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\istartsurf
2015-04-07 17:11 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2015-04-07 17:10 - 2013-10-31 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2015-04-07 17:10 - 2013-10-31 16:32 - 00000000 ____D () C:\Nexon
2015-04-07 17:09 - 2013-02-18 15:29 - 00000000 ____D () C:\ProgramData\Apple
2015-04-06 20:08 - 2013-08-22 16:44 - 00469296 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2013-10-11 12:27 - 2013-11-10 18:27 - 0000099 _____ () C:\Users\ViMa\AppData\Roaming\WB.CFG
2013-10-11 12:27 - 2013-11-10 18:27 - 0000006 _____ () C:\Users\ViMa\AppData\Roaming\WBPU-TTL.DAT
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Input.xml
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Settings.xml
2013-12-15 17:53 - 2013-12-15 17:53 - 0000000 _____ () C:\ProgramData\0x0304A000.sfl
2013-03-23 12:42 - 2013-03-23 12:42 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1296.dll


Some content of TEMP:
====================
C:\Users\Marvin\AppData\Local\Temp\NGMSetup.exe
C:\Users\ViMa\AppData\Local\Temp\6_Offer_11.exe
C:\Users\ViMa\AppData\Local\Temp\A27CD679-6AF1-04B0-581E-51828C046082.exe
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.dll
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.exe
C:\Users\ViMa\AppData\Local\Temp\eFixProPackage.exe
C:\Users\ViMa\AppData\Local\Temp\instrac.exe
C:\Users\ViMa\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\ViMa\AppData\Local\Temp\NGMDll.dll
C:\Users\ViMa\AppData\Local\Temp\NGMResource.dll
C:\Users\ViMa\AppData\Local\Temp\ReimagePackage.exe
C:\Users\ViMa\AppData\Local\Temp\sp64126.exe
C:\Users\ViMa\AppData\Local\Temp\unicows.dll
C:\Users\ViMa\AppData\Local\Temp\Uninstall.exe
C:\Users\ViMa\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-03 09:58

==================== End Of Log ============================
         
--- --- ---

--- --- ---
__________________

Alt 05.05.2015, 07:46   #4
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Und die Addition-Datei

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2015
Ran by ViMa at 2015-05-05 07:47:22
Running from C:\Users\ViMa\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-130668294-1935915265-711181056-500 - Administrator - Disabled)
Gast (S-1-5-21-130668294-1935915265-711181056-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-130668294-1935915265-711181056-1007 - Limited - Enabled)
Marvin (S-1-5-21-130668294-1935915265-711181056-1004 - Limited - Enabled) => C:\Users\Marvin
UpdatusUser (S-1-5-21-130668294-1935915265-711181056-1005 - Limited - Enabled)
ViMa (S-1-5-21-130668294-1935915265-711181056-1001 - Administrator - Enabled) => C:\Users\ViMa

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Out of date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

1ClickMovie-Download V9.0 (HKLM-x32\...\1ClickMovie-Download V9.0) (Version: 1.34.2.13 - installdaddy) <==== ATTENTION
ABC-Schutz-Simulator Version 1.0 (HKLM-x32\...\{0B0ADD81-270D-44C7-8AA9-882A42F2EC22}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.144 - Adobe Systems Incorporated)
Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0 - Adobe Systems Incorporated)
Adobe Digital Editions Packages (HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Adobe Digital Editions Packages) (Version:  - ) <==== ATTENTION
Adobe Flash Player 11 Plugin (HKLM-x32\...\{42C336AF-2C66-4591-BC6D-F67F2C424E6F}) (Version: 11.5.502.146 - Adobe Systems Incorporated)
Alarm für Cobra 11 - Undercover (HKLM-x32\...\Alarm für Cobra 11 - Undercover_is1) (Version:  - dtp)
AnySend (HKLM-x32\...\ASPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION!
Boost (HKLM-x32\...\Boost) (Version: 3.0.0.27 - Boost Shopping)
Bus-Simulator 2012 (HKLM-x32\...\Bus-Simulator 2012_is1) (Version:  - astragon)
calibre (HKLM-x32\...\{4CBCF501-B5FC-4165-87CA-140B41905497}) (Version: 2.23.0 - Kovid Goyal)
Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version:  - )
CertifiedToolbar 2.4 (HKLM-x32\...\{32ee3985-8708-4412-b83a-da429bfb6baf}_is1) (Version: 2.4 - CertifiedToolbar) <==== ATTENTION
Cobra 11 - Crash Time (remove only) (HKLM-x32\...\CrashTime) (Version:  - )
Codec Package Packages (HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Codec Package Packages) (Version:  - ) <==== ATTENTION
CrimeWatch (HKLM-x32\...\CrimeWatch) (Version: 3.0.50 - Great Apps)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2.5630 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.2.2114 - CyberLink Corp.)
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2.3317 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.2.2126 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.2.2126 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.8.5511 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Einfach tierisch (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
Die Sims™ 3 Gib Gas-Accessoires (HKLM-x32\...\{ED436EA8-4145-4703-AE5D-4D09DD24AF5A}) (Version: 5.0.44 - Electronic Arts)
Die Sims™ 3 Inselparadies (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
Die Sims™ 3 Into the Future (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)
Die Sims™ 3 Jahreszeiten (HKLM-x32\...\{3DE92282-CB49-434F-81BF-94E5B380E889}) (Version: 16.0.136 - Electronic Arts)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts)
Die Sims™ 3 Reiseabenteuer (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
Die Sims™ 3 Showtime (HKLM-x32\...\{3BBFD444-5FAB-49F6-98B1-A1954E831399}) (Version: 12.0.273 - Electronic Arts)
Die Sims™ 3 Traumkarrieren (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
Die Sims™ 3 Wildes Studentenleben (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.1.1 - SCS Software)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
EZ Software Updater version 1.2.0.4 (HKLM-x32\...\EZ Software Updater_is1) (Version: 1.2.0.4 - www.ezupdater.com)
Fairway 1 Vokabeltrainer (HKLM-x32\...\{3C3F2D7C-C2E7-1680-7778-DC62E0A6D626}) (Version: 1.0 - Ernst Klett Sprachen GmbH)
Firefighters 2014 (HKLM-x32\...\Steam App 291910) (Version:  - VIS - Visual Imagination Software)
FlashBeat (HKLM-x32\...\FlashBeat) (Version:  - ) <==== ATTENTION!
Flatbed Scanner CD-RW (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Flatbed Scanner CD-RW)
Flughafen-Feuerwehr-Simulator 2013 Version 1.0 (HKLM-x32\...\{86D596F4-CB90-4F4B-B752-8A55D0C62664}_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Earth (HKLM-x32\...\{1A295C25-6E02-49FB-826B-F0D2C56FFA4E}) (Version: 7.1.4.1529 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1218 - Hewlett-Packard)
HP Quick Start (HKLM-x32\...\{BB27C290-AB30-4D9E-A5D1-88745AAE42E9}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{C2E428EB-116E-41C0-9E84-B22DE9CCA42F}) (Version: 1.1.6232.4245 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6429.0 - IDT)
Iminent (HKLM-x32\...\IMBoosterARP) (Version: 7.5.3.1 - Iminent) <==== ATTENTION
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
istartsurf uninstall (HKLM-x32\...\istartsurf uninstall) (Version:  - istartsurf) <==== ATTENTION
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
KW Track Test (HKLM-x32\...\{DA52FAEA-8FA7-42C2-B1B9-207A62880001-KW Track Test}_is1) (Version:  - SimBin Studios AB)
Landwirtschafts Simulator 2011 (HKLM-x32\...\FarmingSimulator2011DE_is1) (Version: 1.0 - GIANTS Software)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\SkyDriveSetup.exe) (Version: 17.0.2006.0314 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mobogenie (HKLM-x32\...\Mobogenie) (Version:  - Mobogenie.com) <==== ATTENTION
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie2KDownloader (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - Movie2KDownloader.com) <==== ATTENTION
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
NVIDIA 3D Vision Treiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.23.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.23.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.15.109 - Electronic Arts, Inc.)
Panda Cloud Antivirus (Version: 6.06.00.0000 - Panda Security) Hidden
PowerDVD (x32 Version: 10.00.0000 - CyberLink Corp.) Hidden
Price Meter (remove only) (HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Price Meter) (Version: 1.0.5.8 - Price Meter) <==== ATTENTION
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
Protected Search 1.1 (HKLM-x32\...\Protected Search_is1) (Version:  - Protected Search) <==== ATTENTION
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Ralink RT5390R 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.5.0 - Ralink)
Recovery Manager (x32 Version: 5.5.0.5826 - CyberLink Corp.) Hidden
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.0.160 - Client Connect LTD) <==== ATTENTION
Series Text Wrap (HKLM-x32\...\ConvertAd) (Version: 1.0.0.0 - Series Text Wrap) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Shopping Helper Smartbar (HKLM-x32\...\{B2A302E7-8FA4-4585-AB7F-12C4DEBC0D32}) (Version: 11.44.63.16736 - ReSoft Ltd.) <==== ATTENTION
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 1.0.0.0 - Electronic Arts)
simfy (HKLM-x32\...\Simfy) (Version: 1.7.5 - simfy AG)
simfy (x32 Version: 1.7.5 - simfy AG) Hidden
Skiregion Simulator 2012 (HKLM-x32\...\SkiRegionSimulator2012DE_is1) (Version: 1.0 - GIANTS Software)
Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Optimizer v3.2 (HKLM-x32\...\Super Optimizer_is1) (Version: 3.2.0.1 - Super PC Tools ltd) <==== ATTENTION
Term Tutor (HKLM-x32\...\TermTutor) (Version: 1.9.0.8 - Term Tutor) <==== ATTENTION!
Torq 2.0.1 (HKLM-x32\...\{0194F916-7E00-4EBE-A024-65A63B4C7D92}) (Version: 2.01.14302 - Avid Technology)
Torq 2.0.1 (x32 Version: 2.01.14302 - Avid Technology) Hidden
Update for Codec Package (HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\DigitalSite) (Version:  - ) <==== ATTENTION
Video Download Converter version 1.0.0.0 (HKLM-x32\...\VDC_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
VideoDownloadConverter Toolbar (HKLM-x32\...\VideoDownloadConverter_4zbar Uninstall) (Version:  - Mindspark Interactive Network) <==== ATTENTION
Visual C++ Redistributables (HKLM-x32\...\InstallShield_{C2AF7B2D-7018-414B-9B8B-D3C9F3BED04F}) (Version: 1.00.0000 - PACE Anti-Piracy, Inc.)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Wajam (HKLM-x32\...\WaNetworkEnhance) (Version: 2.29.2.16 (i2.6) - WaNetworkEnhance) <==== ATTENTION
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
WindowsMangerProtect20.0.0.722 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ATTENTION
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
WPM17.8.0.3297 (HKLM-x32\...\WPM) (Version: 17.8.0.3297 - Cherished Technololgy LIMITED) <==== ATTENTION
WSE_Astromenda (HKLM-x32\...\WSE_Astromenda) (Version:  - WSE_Astromenda) <==== ATTENTION!
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-130668294-1935915265-711181056-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\ViMa\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-130668294-1935915265-711181056-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\ViMa\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-130668294-1935915265-711181056-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\ViMa\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-130668294-1935915265-711181056-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\ViMa\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-130668294-1935915265-711181056-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\ViMa\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

13-04-2015 09:24:49 Windows Update
27-04-2015 14:17:44 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0D00722F-CC81-4632-B3E7-761E49D8B903} - System32\Tasks\HPCeeScheduleForViMa => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {1E28CF74-8550-45B9-963B-40634487E3ED} - System32\Tasks\1ClickMovie-Download V9.0-firefoxinstaller => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-firefoxinstaller.exe [2014-03-02] (installdaddy)
Task: {266CA4CB-0F6C-4B2D-9256-09C62F6F48E9} - System32\Tasks\ProtectedSearch\Protected Search => C:\Program Files (x86)\Protected Search\ProtectedSearch.exe [2013-01-14] (Simplygen) <==== ATTENTION
Task: {326138B3-8B64-48B1-8296-FA0E650F4C61} - \UUPTNVBNDW No Task File <==== ATTENTION
Task: {365CA7A0-20AA-4456-86C2-866F1D8C7B0B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {3AFABF31-4800-4976-B25C-764960193343} - \CLMLSvc_P2G8 No Task File <==== ATTENTION
Task: {503D6529-2C77-4234-A06C-B4DC4259FCEF} - \CLVDLauncher No Task File <==== ATTENTION
Task: {6272D425-4819-47F8-9E10-FE9C8EC7DBF7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {73A0FA7A-AF50-4207-A246-D4B3E3C4A8CD} - System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [2014-04-30] (PriceMeter) <==== ATTENTION
Task: {7851150A-6662-4AC3-8713-5CA42633E1DE} - System32\Tasks\{3A837A3D-F1C7-40E3-BA35-24BB805104C6} => pcalua.exe -a "C:\Program Files (x86)\Wajam\uninstall.exe"
Task: {78D45EA8-E79B-460F-9CE5-24A57EEFD026} - \WSE_Astromenda No Task File <==== ATTENTION
Task: {79F20FB2-904C-44D9-AACD-E3EC7CB0C6BE} - \1ClickMovie-Download V9.0-chromeinstaller No Task File <==== ATTENTION
Task: {7CF5017B-D7FA-4EDE-9CF0-2832E2177780} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)
Task: {8476A2C9-1F53-4A8E-A976-5B096CD0E107} - System32\Tasks\avaavxvyex => C:\Users\ViMa\AppData\Local\avaavxvyex\avaavxvyex.exe [2015-03-16] () <==== ATTENTION
Task: {868E0A47-476A-40EC-B64B-214C5A804DF1} - System32\Tasks\NetEngine => C:\ProgramData\NetEngine\bin\D9\netengine.exe [2015-05-03] () <==== ATTENTION
Task: {8A29AD88-3579-432E-83A4-2151010EFAFE} - \1ClickMovie-Download V9.0-codedownloader No Task File <==== ATTENTION
Task: {8FC7BE54-9D57-42E9-B005-7D11FC47C465} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {9C3F7E3F-0457-402A-8784-4B442D38BEFD} - \Adobe Flash Player Updater No Task File <==== ATTENTION
Task: {AC0584A5-215B-486F-9F5F-6982E9916969} - \SaveSense No Task File <==== ATTENTION
Task: {B14F57D3-0858-434A-9A5F-9505C6BEF3B2} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {B6342B5D-6757-46E9-B034-6FFB499B73CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-02] (Google Inc.)
Task: {BA1F041C-7C09-4A98-8E73-2285793ADF03} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {C94C62C8-1A2D-49B4-AAD9-CFC40B48D6D8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-04-14] (Hewlett-Packard)
Task: {C993E735-F513-4B13-8A6E-21EABDB72B87} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {D13CE694-DF9C-44C1-9737-7E45F1B656FB} - \DigitalSite No Task File <==== ATTENTION
Task: {D17FBAB7-4050-4382-B643-900C39867F0A} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {DC629F93-607B-4FDC-8882-C0E6A6F1ED0C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-02] (Google Inc.)
Task: {E061F29D-A044-42F7-8D19-97EA40C2793B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {E20F8C34-4BC5-4AA4-B203-A324BB21AC96} - \1ClickMovie-Download V9.0-enabler No Task File <==== ATTENTION
Task: {E452DF1E-AECC-4A1C-97D2-7C9801103FC2} - System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe [2014-04-30] (PriceMeter) <==== ATTENTION
Task: {E8AD5F0B-A6A6-406C-AAE8-A81C38BD80E0} - \1ClickMovie-Download V9.0-updater No Task File <==== ATTENTION
Task: {E95E2846-13E8-4D6D-9BC5-6089094B125B} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {F210294C-3A93-4D32-BFBA-22177D76DBED} - \Digital Sites No Task File <==== ATTENTION
Task: {F614F745-C4F0-4B36-ACC2-D1551DD0B02E} - System32\Tasks\pricemeterdownloader => C:\Users\ViMa\AppData\Local\PriceMeter\pricemeterd.exe [2014-03-13] (PriceMeter) <==== ATTENTION
Task: {FE8019C6-EDE7-4C2A-BDD8-9D2FE8130FC6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-04-27] (Microsoft Corporation)
Task: C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-chromeinstaller.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-chromeinstaller.exe
Task: C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-codedownloader.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-codedownloader.exe>/reinstallapp /runfrom=task /agentregpath='1ClickMovie-Download V9.0' /appid=51382 /srcid='001058' /subid='0' /zdata='0' /bic=7526BBB709E549449A370AF88F7C60D3IE /verifier=9ac395c91166122fd8efbe18256b32f4 /installerversion=1_34_2_13 /installerfullversion=1.34.2.13 /installationtime=1393755631 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /codedownloaddomain=http:/cr.install-daddy.com /defbro=ie /allusers /autoupdateulr='http:/update.srvstatsdata.com/ie_code_agent_updates/{CAMP_ID}/update.jso
Task: C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-enabler.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-enabler.exe
/enablebho /agentregpath='1ClickMovie-Download V9.0' /appid=51382 /srcid='001058' /subid='0' /zdata='0' /bic=7526BBB709E549449A370AF88F7C60D3IE /verifier=9ac395c91166122fd8efbe18256b32f4 /installerversion=1_34_2_13 /installationtime=1393755631 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /bhoguid=11111111-1111-1111-1111-110511131182 /defbro=ie /allusers /autoupdateulr='http:/update.srvstatsdata.com/ie_enable_agent_updates/{CAMP_ID}/update.jso
Task: C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-firefoxinstaller.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-firefoxinstaller.exe/installxpi /agentregpath='1ClickMovie-Download V9.0' /extensionfilepath C:\Program Files (x86)\1ClickMovie-Download V9.0\51382.xpi' /appid=51382 /srcid='001058' /subid='0' /zdata='0' /bic=7526BBB709E549449A370AF88F7C60D3IE /verifier=9ac395c91166122fd8efbe18256b32f4 /installerversion=1_34_2_13 /installerfullversion=1.34.2.13 /installationtime=1393755631 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com /extensionversion=0.93 /prefsbranch=a0f1ebb0b873c4137a5f19b9ca22849971152da4e8ec5417f9a4b8c7bbf9cb4a4com51382 /updateurl=https:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/51382.rdf /extensionname='1ClickMovie-Download V9.0' /extensiondesc='1ClickMovie Downloader - download files 5 times faster!' /publishername='installdaddy' /defbro=ie /allusers /allprofiles /checkfflist /autoupdateulr='http:/update.srvstatsdata.com/ff_agent_updates/{CAMP_ID}/update.jso
Task: C:\WINDOWS\Tasks\1ClickMovie-Download V9.0-updater.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-updater.exeb/runupdater /agentregpath='1ClickMovie-Download V9.0' /appid=51382 /srcid='001058' /subid='0' /zdata='0' /bic=7526BBB709E549449A370AF88F7C60D3IE /verifier=9ac395c91166122fd8efbe18256b32f4 /installerversion=1_34_2_13 /installationtime=1393755631 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /geoserviceurl=http:/ipgeoapi.com/ /updatejsondomain=http:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http:/stats.mstatsserv.com /autoupdateulr='http:/update.srvstatsdata.com/updater_agent_updates/{CAMP_ID}/update.jso
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\Digital Sites.job => C:\Users\Marvin\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS\Tasks\DigitalSite.job => C:\Users\ViMa\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForViMa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\SaveSense.job => C:\Users\Marvin\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\WINDOWS\Tasks\WSE_Astromenda.job => C:\Users\ViMa\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2015-04-16 17:14 - 2015-04-16 17:14 - 00076288 _____ () C:\ProgramData\NetEngine\bin\D7\netengine.exe
2014-08-31 11:19 - 2015-02-17 17:02 - 00221696 _____ () C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe
2015-04-10 19:30 - 2015-04-10 15:29 - 00358912 _____ () C:\ProgramData\FlashBeat\FlashBeat.exe
2014-04-30 16:08 - 2014-09-06 10:02 - 00105664 _____ () C:\Program Files (x86)\Mobogenie\MgAssist.exe
2015-03-31 20:19 - 2015-03-31 20:19 - 00686592 _____ () C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancerService.exe
2012-10-12 19:22 - 2012-10-12 19:22 - 00120224 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesModule.dll
2012-10-12 19:22 - 2012-10-12 19:22 - 00048544 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesProxy.dll
2012-10-12 19:22 - 2012-10-12 19:22 - 00180224 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\zxing.dll
2015-03-31 20:19 - 2015-03-31 20:19 - 00275968 _____ () C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancer.exe
2014-04-30 16:08 - 2014-04-08 05:41 - 00748736 _____ () C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
2013-12-18 21:11 - 2013-12-18 21:11 - 00120224 _____ () C:\Users\ViMa\AppData\Local\assembly\dl3\RK87N1LO.ZZO\9ZTL5O90.WL8\c54c35b6\00b31c1a_9ea8cd01\HPItunesModule.DLL
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-02-18 15:23 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-04-30 16:08 - 2014-04-30 16:08 - 00904704 _____ () C:\WINDOWS\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
2013-03-28 12:09 - 2013-02-15 02:25 - 00074240 _____ () C:\Program Files (x86)\Protected Search\InstallHelper.dll
2015-03-31 20:19 - 2015-03-31 20:19 - 00011776 _____ () C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\ApiHandlr.dll
2014-04-30 16:08 - 2014-04-08 05:41 - 00065728 _____ () C:\Program Files (x86)\Mobogenie\Device.dll
2014-04-30 16:08 - 2014-04-08 05:41 - 00474816 _____ () C:\Program Files (x86)\Mobogenie\DCR.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Marvin\Cookies:mYyBVwd9xm186X0JkJwhd
AlternateDataStreams: C:\Users\Marvin\AppData\Local\Temp:rh1TubvgB0R5MkNzi0sLa1G7
AlternateDataStreams: C:\Users\Marvin\AppData\Local\Temp:tj8lTtCbvchTYXdgJA3DxcDYg9nIJ
AlternateDataStreams: C:\Users\ViMa\Cookies:mYyBVwd9xm186X0JkJwhd
AlternateDataStreams: C:\Users\ViMa\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\ViMa\AppData\Local\Temp:rh1TubvgB0R5MkNzi0sLa1G7
AlternateDataStreams: C:\Users\ViMa\AppData\Local\Temp:tj8lTtCbvchTYXdgJA3DxcDYg9nIJ

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Gambali => ""="service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-130668294-1935915265-711181056-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\HP\HP_Svinoya_Norway_Sunset.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "VideoDownloadConverter Search Scope Monitor"
HKLM\...\StartupApproved\Run32: => "Panda Security URL Filtering"
HKLM\...\StartupApproved\Run32: => "mobilegeni daemon"
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\StartupApproved\Run: => "Boost"
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\StartupApproved\Run: => "Super Optimizer"

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{26CDE2E0-ED60-4381-95B6-33D5049523E1}C:\users\marvin\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\marvin\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{0D4FE392-9B84-4231-8347-E82211178DF3}C:\users\marvin\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\marvin\appdata\local\akamai\netsession_win.exe
FirewallRules: [{1141255E-5233-47A7-BEFF-2CCEC44DF0C7}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{9179AD35-3D4D-431E-AC27-2A52BE900DD5}] => (Allow) C:\Program Files (x86)\pandasecuritytb\dtUser.exe
FirewallRules: [{E0B3BDC3-7B8E-4F4D-AFB2-3F3849EC7CE7}] => (Allow) C:\Program Files (x86)\pandasecuritytb\dtUser.exe
FirewallRules: [UDP Query User{BFF4B36B-0908-4DF9-A6E6-2DB80141BD41}C:\users\marvin\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\marvin\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{431E40B3-3A4D-4DF8-968D-D2E45ED596C9}C:\users\marvin\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\marvin\appdata\local\akamai\netsession_win.exe
FirewallRules: [{8A6F87CD-AB6A-4060-8CA6-45B70CEB9069}] => (Allow) C:\Nexon\Combat Arms EU\NMService.exe
FirewallRules: [{9EB69123-7EB9-4C5F-91FA-D5808DA39C26}] => (Allow) C:\Nexon\Combat Arms EU\NMService.exe
FirewallRules: [{6D730168-2C41-4505-9298-81CED2194E96}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{BA2724CD-02FE-4D67-AAB8-797FBD47D411}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{D3487D35-F733-475C-BD22-DF0E2C9F477F}] => (Allow) C:\ProgramData\eSafe\eGdpSvc.exe
FirewallRules: [{A4BDD0DD-BE36-4502-AC0A-FF458EA58E42}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2011\game.exe
FirewallRules: [{D5ED1462-A00E-4553-9E87-058FF79388DC}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2011\game.exe
FirewallRules: [{B0039D52-CD0A-4000-9A96-AA039080F365}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2011\FarmingSimulator2011.exe
FirewallRules: [{ECF57324-DA7A-419C-B4B7-FDC90745753E}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2011\FarmingSimulator2011.exe
FirewallRules: [{1BD73801-10C5-4974-BF73-851BC4C191F6}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{6B5A6CC4-842B-43A0-93C9-3E5BB16313C2}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{A3F2E893-A539-4371-8217-3AE15B26F558}] => (Allow) C:\Program Files (x86)\Protected Search\ProtectedSearch.exe
FirewallRules: [{291D6651-4D7B-40F7-8B99-FDC1872B507D}] => (Allow) C:\Program Files (x86)\Protected Search\ProtectedSearch.exe
FirewallRules: [{F5744992-3FCF-4714-9EBF-4F2034B591A7}] => (Allow) C:\Program Files (x86)\Protected Search\ProtectedSearch.exe
FirewallRules: [{F2AD9257-232E-4581-BFB1-6A35D126EF63}] => (Allow) C:\Program Files (x86)\Protected Search\ProtectedSearch.exe
FirewallRules: [UDP Query User{B5DF783B-7D6C-43E7-B84F-FBE050FA668B}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [TCP Query User{052A6C47-E25D-4ECB-BFC7-ADBED8E8AF3E}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [UDP Query User{AD083F63-B054-420D-AC29-5C366BE8045F}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [TCP Query User{481B9E82-F7C5-4F64-8A7E-C388914ACD7A}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe
FirewallRules: [{69E379EE-3527-4CDF-9E5F-C7B3B7AF88D9}] => (Allow) LPort=1900
FirewallRules: [{F8EC9EB1-9774-4758-8E61-850D16353AE1}] => (Allow) LPort=2869
FirewallRules: [{EDAD0033-E3F2-4831-88D4-907E0F762981}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{6E0D68DE-869E-4693-BD55-A8CF2AE56821}] => (Allow) C:\Users\Administrator\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{DF925AE3-DFBB-4F3E-B22F-74E41992329D}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{BE84AD05-F90B-4894-95D1-19B1B82D647B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2B35B373-818A-4D87-8337-4B301EBBEFDA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B205796F-E7EF-46A5-89D9-4814615B52B5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1B6D48D2-4B77-4515-96B0-49ED3C28E3E6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7FA39FE1-CC37-47C9-9E01-A555662D13DF}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe
FirewallRules: [{3A74A67F-0793-469D-B403-47DF4EF1FA57}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe
FirewallRules: [{ED6FB140-2443-4EF0-A18E-EFD64A86FCDF}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\HPConnectedMusic.exe
FirewallRules: [{AD59FC45-7B93-4C41-B84F-407A4E07ECE3}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\HPConnectedMusic.exe
FirewallRules: [{4856A41E-2477-4C4B-9070-3ABDF5C59D57}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe
FirewallRules: [{7E964B24-120E-40BB-A7AF-DCFD4ABC0591}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe
FirewallRules: [{2785D1C2-2D63-460D-B27B-A1536F918CB2}] => (Allow) C:\Program Files (x86)\Skiregion Simulator 2012\SkiRegionSimulator2012.exe
FirewallRules: [{5284FF7B-4686-4F60-97A8-6CF8F6F7C96C}] => (Allow) C:\Program Files (x86)\Skiregion Simulator 2012\SkiRegionSimulator2012.exe
FirewallRules: [{E4F30B48-626D-4D61-AD33-336831629C06}] => (Allow) C:\Program Files (x86)\Skiregion Simulator 2012\SkiRegionSimulator2012Game.exe
FirewallRules: [{18F58287-28F5-4546-BD29-F4634AC22D5C}] => (Allow) C:\Program Files (x86)\Skiregion Simulator 2012\SkiRegionSimulator2012Game.exe
FirewallRules: [{DEC22DA4-271A-43FB-A356-440ECCEDC460}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B129C4D1-CADC-451A-99F6-B8D13862C7A5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0C0D1CEA-16F0-4F8A-8335-0E3A2CE99ED0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefighters 2014\Firefighters2014-x64.exe
FirewallRules: [{4D30AA7F-8760-4522-8E34-21330802BD17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefighters 2014\Firefighters2014-x64.exe
FirewallRules: [{7CEF3E02-3A9A-4BC0-A2D8-05835EA3FC49}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{39479537-7886-4AC6-80CF-CA27F7FD9EA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{167C537D-0030-438E-B658-E2272F47D52C}] => (Allow) C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe
FirewallRules: [{55E69E66-32DA-4702-AE80-5B90FD820015}] => (Allow) C:\Program Files (x86)\mystarttb\ToolbarCleaner.exe
FirewallRules: [{6CA6F709-50C9-491A-8DC6-11131FC93684}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE
FirewallRules: [{F2AFDD0E-9886-41C4-AD16-D0A508292B51}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTE.EXE
FirewallRules: [{42B8394D-FBC5-42E5-9B33-3577AC829EF2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{FE86CF45-A708-497C-B1D9-94DCA3E58583}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{6E835FF6-2043-420C-B223-C3FAEDE1B893}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{A4E3976C-62F7-4082-99BB-4E5B7FB2FFD9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{17433E68-3AF4-4911-9EA5-EFC8F4E9055B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{D51428A7-DC8D-4409-B1E6-88934F59DC8C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{8C3D20BA-D620-44C9-BFAB-430D9A526F59}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CCFC95FE-1901-44E9-AAC5-65583EA71647}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B8411CB2-BA9B-4DFE-98D7-AE6E819B391F}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [{832FBBC5-A108-4CFD-8900-C05A9334BA4D}] => (Allow) LPort=53000
FirewallRules: [{10822104-0FBE-498A-A2E1-413C1D52008D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{BBC11A08-7763-49FA-B344-4F79B118C5A8}] => (Allow) LPort=52000

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/05/2015 07:47:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPConnectedRemoteUser.exe, Version: 1.0.1218.0, Zeitstempel: 0x5078a5c4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000001e1fb56a
ID des fehlerhaften Prozesses: 0x1514
Startzeit der fehlerhaften Anwendung: 0xHPConnectedRemoteUser.exe0
Pfad der fehlerhaften Anwendung: HPConnectedRemoteUser.exe1
Pfad des fehlerhaften Moduls: HPConnectedRemoteUser.exe2
Berichtskennung: HPConnectedRemoteUser.exe3
Vollständiger Name des fehlerhaften Pakets: HPConnectedRemoteUser.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HPConnectedRemoteUser.exe5

Error: (05/05/2015 07:47:42 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:46:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPConnectedRemoteUser.exe, Version: 1.0.1218.0, Zeitstempel: 0x5078a5c4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000001dfcb56a
ID des fehlerhaften Prozesses: 0x2b1c
Startzeit der fehlerhaften Anwendung: 0xHPConnectedRemoteUser.exe0
Pfad der fehlerhaften Anwendung: HPConnectedRemoteUser.exe1
Pfad des fehlerhaften Moduls: HPConnectedRemoteUser.exe2
Berichtskennung: HPConnectedRemoteUser.exe3
Vollständiger Name des fehlerhaften Pakets: HPConnectedRemoteUser.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HPConnectedRemoteUser.exe5

Error: (05/05/2015 07:46:24 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:45:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPConnectedRemoteUser.exe, Version: 1.0.1218.0, Zeitstempel: 0x5078a5c4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000001e30b56a
ID des fehlerhaften Prozesses: 0x2100
Startzeit der fehlerhaften Anwendung: 0xHPConnectedRemoteUser.exe0
Pfad der fehlerhaften Anwendung: HPConnectedRemoteUser.exe1
Pfad des fehlerhaften Moduls: HPConnectedRemoteUser.exe2
Berichtskennung: HPConnectedRemoteUser.exe3
Vollständiger Name des fehlerhaften Pakets: HPConnectedRemoteUser.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HPConnectedRemoteUser.exe5

Error: (05/05/2015 07:45:32 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:44:49 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: cd8

Startzeit: 01d086f5e0d3ead1

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: d67491b2-f2e9-11e4-bed6-10604b7226a5

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (05/05/2015 07:44:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPConnectedRemoteUser.exe, Version: 1.0.1218.0, Zeitstempel: 0x5078a5c4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000001e42b56a
ID des fehlerhaften Prozesses: 0x928
Startzeit der fehlerhaften Anwendung: 0xHPConnectedRemoteUser.exe0
Pfad der fehlerhaften Anwendung: HPConnectedRemoteUser.exe1
Pfad des fehlerhaften Moduls: HPConnectedRemoteUser.exe2
Berichtskennung: HPConnectedRemoteUser.exe3
Vollständiger Name des fehlerhaften Pakets: HPConnectedRemoteUser.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HPConnectedRemoteUser.exe5

Error: (05/05/2015 07:44:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:43:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPConnectedRemoteUser.exe, Version: 1.0.1218.0, Zeitstempel: 0x5078a5c4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000001e33b56a
ID des fehlerhaften Prozesses: 0xb30
Startzeit der fehlerhaften Anwendung: 0xHPConnectedRemoteUser.exe0
Pfad der fehlerhaften Anwendung: HPConnectedRemoteUser.exe1
Pfad des fehlerhaften Moduls: HPConnectedRemoteUser.exe2
Berichtskennung: HPConnectedRemoteUser.exe3
Vollständiger Name des fehlerhaften Pakets: HPConnectedRemoteUser.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: HPConnectedRemoteUser.exe5


System errors:
=============
Error: (05/04/2015 08:16:32 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (05/04/2015 08:11:50 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Gambali" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert.

Error: (05/04/2015 08:08:59 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Gambali" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (05/04/2015 08:07:38 AM) (Source: DCOM) (EventID: 10005) (User: SPIELEPC)
Description: 1053Gambali-Service{8571AE44-354D-4446-86A2-B59B7BF672FD}

Error: (05/04/2015 08:07:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gambali" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/04/2015 08:07:38 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Gambali erreicht.

Error: (05/04/2015 08:07:38 AM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: 1053Gambali-Service{DF5FA8BB-0A0A-4D8D-9D00-C690E9B8DC31}

Error: (05/04/2015 08:07:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gambali" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/04/2015 08:07:38 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Gambali erreicht.

Error: (05/04/2015 08:07:38 AM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: 1053Gambali-Service{DF5FA8BB-0A0A-4D8D-9D00-C690E9B8DC31}


Microsoft Office Sessions:
=========================
Error: (05/05/2015 07:47:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPConnectedRemoteUser.exe1.0.1218.05078a5c4unknown0.0.0.000000000c0000005000000001e1fb56a151401d086f6fe9b32d9c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exeunknown3ec252a4-f2ea-11e4-bed6-10604b7226a5

Error: (05/05/2015 07:47:42 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:46:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPConnectedRemoteUser.exe1.0.1218.05078a5c4unknown0.0.0.000000000c0000005000000001dfcb56a2b1c01d086f6cfe02532c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exeunknown1007e458-f2ea-11e4-bed6-10604b7226a5

Error: (05/05/2015 07:46:24 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:45:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPConnectedRemoteUser.exe1.0.1218.05078a5c4unknown0.0.0.000000000c0000005000000001e30b56a210001d086f6b0c68aaec:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exeunknownf0e63181-f2e9-11e4-bed6-10604b7226a5

Error: (05/05/2015 07:45:32 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:44:49 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20689cd801d086f5e0d3ead14294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exed67491b2-f2e9-11e4-bed6-10604b7226a5microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (05/05/2015 07:44:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPConnectedRemoteUser.exe1.0.1218.05078a5c4unknown0.0.0.000000000c0000005000000001e42b56a92801d086f690ddc46bc:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exeunknownd1012b4f-f2e9-11e4-bed6-10604b7226a5

Error: (05/05/2015 07:44:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: HPConnectedRemoteUser.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.AccessViolationException
Stapel:
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.UnsafeNclNativeMethods.SetFileCompletionNotificationModes(System.Runtime.InteropServices.CriticalHandle, FileCompletionNotificationModes)
   bei System.Net.HttpListener.CreateRequestQueueHandle()
   bei System.Net.HttpListener.Start()
   bei System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()
   bei System.ServiceModel.Channels.TransportManager.Open(System.ServiceModel.Channels.TransportChannelListener)
   bei System.ServiceModel.Channels.TransportManagerContainer.Open(System.ServiceModel.Channels.SelectTransportManagersCallback)
   bei System.ServiceModel.Channels.HttpChannelListener`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei System.ServiceModel.ServiceHostBase.OnOpen(System.TimeSpan)
   bei System.ServiceModel.Channels.CommunicationObject.Open(System.TimeSpan)
   bei HP.Seeker.WCFServiceHostUtil.setupService(System.Type, Int32, System.String, Boolean)
   bei HP.Seeker.HPSeekerUserListener.Start()
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Threading.ThreadHelper.ThreadStart()

Error: (05/05/2015 07:43:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: HPConnectedRemoteUser.exe1.0.1218.05078a5c4unknown0.0.0.000000000c0000005000000001e33b56ab3001d086f6672b6240c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exeunknowna7615638-f2e9-11e4-bed6-10604b7226a5


CodeIntegrity Errors:
===================================
  Date: 2013-11-17 16:11:06.618
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.0.0.91_x86__v68kp9n051hdp\mmaMain.exe that did not meet the Store signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3350P CPU @ 3.10GHz
Percentage of memory in use: 17%
Total physical RAM: 12243.37 MB
Available physical RAM: 10107.68 MB
Total Pagefile: 14099.37 MB
Available Pagefile: 11149.88 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:918.05 GB) (Free:784.21 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery Image) (Fixed) (Total:11.64 GB) (Free:1.35 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 8D9475BC)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Alt 05.05.2015, 10:41   #5
schrauber
/// the machine
/// TB-Ausbilder
 

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    1ClickMovie-Download V9.0

    Adobe Digital Editions Packages (HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Adobe Digital Editions Packages) (Version: - ) <==== ATTENTION

    AnySend

    CertifiedToolbar 2.4

    Codec Package Packages

    FlashBeat

    Iminent

    istartsurf uninstall

    Mobogenie

    Movie2KDownloader

    Price Meter

    Protected Search 1.1

    Search Protect

    Series Text Wrap

    Shopping Helper Smartbar

    Super Optimizer v3.2

    Term Tutor

    Update for Codec Package

    Video Download Converter version 1.0.0.0 (HKLM-x32\...\VDC_is1) (Version: 1.0.0.0 - ) <==== ATTENTION

    VideoDownloadConverter Toolbar (HKLM-x32\...\VideoDownloadConverter_4zbar Uninstall) (Version: - Mindspark Interactive Network) <==== ATTENTION

    Wajam

    WindowsMangerProtect20.0.0.722 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.722 - WindowsProtect LIMITED) <==== ATTENTION

    WPM17.8.0.3297

    WSE_Astromenda


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 






Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.05.2015, 14:47   #6
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



So habe alle Anweisungen ausgeführt, und denke das Problem mit den Werbeseiten ist gelöst

Hier die neuen Dateien (getrennt, da sie zu lang sind):

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 05.05.2015
Suchlauf-Zeit: 14:23:56
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.05.05.02
Rootkit Datenbank: v2015.04.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: ViMa

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 491073
Verstrichene Zeit: 33 Min, 42 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 6
PUP.Optional.CrimeWatch.A, C:\ProgramData\GSwkHYjPE\EKxPYY.exe, 2244, , [dc2ac1cf1278bd7932419b958d75fb05]
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe, 1536, , [22e4fd938efcb383984a13d7699a9967]
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D10\netengine.exe, 5792, , [e32399f7305ae155a9855a08c441d12f]
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D9\netengine.exe, 1940, , [e32399f7305ae155a9855a08c441d12f]
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancerService.exe, 2104, , [8e780c8432588fa75210d6f8d42f51af]
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancer.exe, 1632, , [63a3abe5f8923bfbcf719534877c629e]

Module: 3
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\FiddlerCore.dll, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\ApiHandlr.dll, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\Newtonsoft.Json.dll, , [63a3abe5f8923bfbcf719534877c629e], 

Registrierungsschlüssel: 295
PUP.Optional.CrimeWatch.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EKxPYY, , [dc2ac1cf1278bd7932419b958d75fb05], 
PUP.Optional.Iminent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SProtection, , [0402751b96f4bc7a8bddce6c37ca9070], 
PUP.Optional.WpManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Wpm, , [0cfaaee2dab0310590e5097214eda45c], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\APPID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}, , [3accace46d1dbd797948236221e2ca36], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}, , [3accace46d1dbd797948236221e2ca36], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}, , [3accace46d1dbd797948236221e2ca36], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [a3635d33bdcd69cdec4054fd5ba820e0], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [a3635d33bdcd69cdec4054fd5ba820e0], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [a3635d33bdcd69cdec4054fd5ba820e0], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\CLSID\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{E860F65C-6645-411C-A662-E12E25FD3A93}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{41634761-D0BA-4C1A-9AC2-04AEE9511370}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{88C20E16-1EB7-40CE-820C-6CFCB41B1D2F}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{41634761-D0BA-4C1A-9AC2-04AEE9511370}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{88C20E16-1EB7-40CE-820C-6CFCB41B1D2F}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{41634761-D0BA-4C1A-9AC2-04AEE9511370}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{88C20E16-1EB7-40CE-820C-6CFCB41B1D2F}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E860F65C-6645-411C-A662-E12E25FD3A93}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E860F65C-6645-411C-A662-E12E25FD3A93}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\CLSID\{2299856A-6506-42E3-A34F-CD35A47C1B19}\INPROCSERVER32, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\Boost.BoostBho.1, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\Boost.BoostBho, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Boost.BoostBho, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Boost.BoostBho, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Boost.BoostBho.1, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Boost.BoostBho.1, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2299856A-6506-42E3-A34F-CD35A47C1B19}, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IESmartBar.BHO, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.QuickShare.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, , [5caad1bf7e0cc67013cab0d463a0f20e], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}\INPROCSERVER32, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject.1, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\IminentWebBooster.BrowserHelperObject, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.BrowserHelperObject, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IminentWebBooster.BrowserHelperObject.1, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IminentWebBooster.BrowserHelperObject.1, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.VMNToolBar.A, HKLM\SOFTWARE\CLASSES\CLSID\{ccb24e92-62c4-4c53-95d2-65f9eed476bc}, , [5fa7a6ea236790a6617f90f648bbe31d], 
PUP.Optional.VMNToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CCB24E92-62C4-4C53-95D2-65F9EED476BC}, , [5fa7a6ea236790a6617f90f648bbe31d], 
PUP.Optional.VMNToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CCB24E92-62C4-4C53-95D2-65F9EED476BC}, , [5fa7a6ea236790a6617f90f648bbe31d], 
PUP.Optional.VMNToolBar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{CCB24E92-62C4-4C53-95D2-65F9EED476BC}, , [5fa7a6ea236790a6617f90f648bbe31d], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{c547c6c2-561b-4169-a2a5-20ba771ca93b}, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{c547c6c2-561b-4169-a2a5-20ba771ca93b}, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C547C6C2-561B-4169-A2A5-20BA771CA93B}, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C547C6C2-561B-4169-A2A5-20BA771CA93B}, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C547C6C2-561B-4169-A2A5-20BA771CA93B}, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C547C6C2-561B-4169-A2A5-20BA771CA93B}, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C547C6C2-561B-4169-A2A5-20BA771CA93B}, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{03119103-0854-469D-807A-171568457991}, , [6c9ac5cbf991d56104a11274f60df40c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{23119123-0854-469D-807A-171568457991}, , [6c9ac5cbf991d56104a11274f60df40c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{23119123-0854-469D-807A-171568457991}, , [6c9ac5cbf991d56104a11274f60df40c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{23119123-0854-469D-807A-171568457991}, , [6c9ac5cbf991d56104a11274f60df40c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03119103-0854-469D-807A-171568457991}, , [6c9ac5cbf991d56104a11274f60df40c], 
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{03119103-0854-469D-807A-171568457991}, , [6c9ac5cbf991d56104a11274f60df40c], 
PUP.Optional.Snapdo.T, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [08fe464a32583006d3011b6dea19c040], 
PUP.Optional.Snapdo.T, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, , [08fe464a32583006d3011b6dea19c040], 
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, , [08fe464a32583006d3011b6dea19c040], 
PUP.Optional.CertifiedToolbar, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{198C4E47-6CDE-4716-9975-3A92FD1322C0}, , [61a50090a7e3aa8c4a44e4a005fefc04], 
PUP.Optional.CertifiedToolbar, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{198C4E47-6CDE-4716-9975-3A92FD1322C0}, , [61a50090a7e3aa8c4a44e4a005fefc04], 
PUP.Optional.CertifiedToolbar, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{198C4E47-6CDE-4716-9975-3A92FD1322C0}, , [61a50090a7e3aa8c4a44e4a005fefc04], 
PUP.Optional.CertifiedToolbar, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{198C4E47-6CDE-4716-9975-3A92FD1322C0}, , [61a50090a7e3aa8c4a44e4a005fefc04], 
PUP.Optional.TermTutor.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6CB99040-7828-4C37-AC01-F15758F43E4D}, , [0105c3cd79119e9805b095b58c778080], 
PUP.Optional.TermTutor.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6CB99040-7828-4C37-AC01-F15758F43E4D}, , [0105c3cd79119e9805b095b58c778080], 
PUP.Optional.TermTutor.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6CB99040-7828-4C37-AC01-F15758F43E4D}, , [0105c3cd79119e9805b095b58c778080], 
PUP.Optional.TermTutor.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6CB99040-7828-4C37-AC01-F15758F43E4D}, , [0105c3cd79119e9805b095b58c778080], 
PUP.Optional.Yontoo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, , [d3335040c0ca7eb8d83f7fceb74c4fb1], 
PUP.Optional.Yontoo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, , [d3335040c0ca7eb8d83f7fceb74c4fb1], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}, , [8c7a5f315b2f80b6e32ef75827dc8d73], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}, , [8c7a5f315b2f80b6e32ef75827dc8d73], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{48586425-6BB7-4F51-8DC6-38C88E3EBB58}, , [e91d39577317cf678e84a9a6cd363ac6], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{48586425-6BB7-4F51-8DC6-38C88E3EBB58}, , [e91d39577317cf678e84a9a6cd363ac6], 
PUP.Optional.MySearchTB.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{62155D33-3CE2-401E-8967-5A270628A3D5}, , [7a8c236ddab01125fa138efc32d1e818], 
PUP.Optional.MySearchTB.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{62155D33-3CE2-401E-8967-5A270628A3D5}, , [7a8c236ddab01125fa138efc32d1e818], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [1ee86b252d5d1026cec6d5b0788ba45c], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [9c6ab0e0741687af593c73128380af51], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, , [27dfa8e82169053194952e5731d26d93], 
Adware.Agent, HKLM\SOFTWARE\CLASSES\INTERFACE\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}, , [2cda1e727b0f1f179ba7a0b40df61ae6], 
Adware.Agent, HKLM\SOFTWARE\CLASSES\TypeLib\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}, , [ba4cf898d4b6c76f7bc783d1709305fb], 
Adware.Agent, HKLM\SOFTWARE\CLASSES\INTERFACE\{75BF416E-4326-45B5-8A2D-AE32D05B930B}, , [ba4cf898d4b6c76f7bc783d1709305fb], 
Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}, , [ba4cf898d4b6c76f7bc783d1709305fb], 
Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{75BF416E-4326-45B5-8A2D-AE32D05B930B}, , [ba4cf898d4b6c76f7bc783d1709305fb], 
Adware.Agent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}, , [ba4cf898d4b6c76f7bc783d1709305fb], 
Adware.Agent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{75BF416E-4326-45B5-8A2D-AE32D05B930B}, , [ba4cf898d4b6c76f7bc783d1709305fb], 
Adware.Agent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TypeLib\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}, , [a66029678802f145a0a22b296f9430d0], 
Adware.Agent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TypeLib\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}, , [d333345c21690630132f213349ba5da3],
         
Code:
ATTFilter
PUP.Optional.CrimeWatch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CrimeWatch, , [d23470208a0039fdcaa990a04ab86c94], 
PUP.Optional.EZSoftware.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EZ Software Updater, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\EZ Software Updater_is1, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Boost, , [b74f078948423df92c880a469075d828], 
PUP.Optional.Flashbeat.A, HKLM\SOFTWARE\Flashbeat, , [39cd424e18721a1c191c825631d2cd33], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, , [2ed8d3bd6723b28473db2fed16ee35cb], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051382.BHO, , [c54179175733f145fa9f14e2f01306fa], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051382.BHO.1, , [90760789fc8e3600019832c49370cd33], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [b84e117f1377979f767f60d9de27a15f], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\APPID\PricePeep.DLL, , [c442b0e095f566d008a8ed452adb47b9], 
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA, , [63a377190d7d7db93f1c09c3956eba46], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [ea1c820e7e0c6fc704f1bf7a8184847c], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\PricePeep.DLL, , [7294127e622858deb9f7a88a6c99ee12], 
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA, , [10f6365a69214fe775e6e0ec6a99b050], 
PUP.Optional.Astromenda.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [5babddb32862f83ef13ff95ce91c5ba5], 
PUP.Optional.EZSoftware.A, HKLM\SOFTWARE\WOW6432NODE\EZ Software Updater, , [8f77216f08826bcbb033f7f3748f0bf5], 
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, , [887ec6ca167448ee9fbccc2647bcc53b], 
PUP.Optional.PriceMeter.A, HKLM\SOFTWARE\WOW6432NODE\PriceMeterLiveUpdate, , [18eeaee2cebcee48eb35ba24e61dd52b], 
PUP.Optional.qvo6.A, HKLM\SOFTWARE\WOW6432NODE\qvo6Software, , [6a9cb6da305ac1757cf4ff349174ea16], 
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [a660dbb5c8c2b77f96ba99b73acb956b], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, , [22e45a361c6e9a9cdcf214dc44bf31cf], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\VideoDownloadConverter_4z, , [54b2e3ad78123600873f46059e67e818], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\WaNetworkEnhance, , [43c36f213d4d63d364fb933bed168977], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0051382.BHO, , [a462652b5a300234ebae8e68cd36c63a], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0051382.BHO.1, , [22e44c444c3ec1758c0dd620c73c39c7], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [778f2b65a9e10d2924d154e5fe07c43c], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PricePeep.DLL, , [8185eaa6f397ba7cf6ba53df887d36ca], 
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA, , [0cfa662a395185b1f566eddf1ce7d52b], 
PUP.Optional.VNMToolbar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dghncoeocefmhkhiphdgikkamjeglbfh, , [778f47493b4f54e2796eb24816ed22de], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\igdhbblpcellaljokkpfhcjlagemhgjl, , [42c4a1ef662496a03a1322faaf550000], 
PUP.Optional.Astromenda.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [7a8c8e023654fa3c9b95ba9b80857e82], 
PUP.Optional.VoPackage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPackage, , [ff07b1df6b1f0c2a57b1f16efb0a936d], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@VideoDownloadConverter_4z.com/Plugin, , [907699f78ffb7db905bf31d6c93b54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, , [8680eca48208b6801989737d798a27d9], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [c3438808f1998ea813bab63a50b3ea16], 
PUP.Optional.Umbrella.A, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA, , [3dc91779a4e678becaed74beb25337c9], 
PUP.Optional.Mindspark.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VideoDownloadConverter_4zService, , [f016a1ef276395a1f6cf0205af550ff1], 
PUP.Optional.Wajam.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WaNetworkEnhance Service, , [8e780c8432588fa75210d6f8d42f51af], 
PUP.Optional.Iminent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinkHandler, , [56b070208ffb8fa765e77e9e2bd9f40c], 
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, , [41c54947cdbdcc6a8c17f1f59e65f60a], 
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [897d6e22751555e1d7cd40a6e91a24dc], 
PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD, , [2bdb731d8dfd13233755f3fb21e20ef2], 
PUP.Optional.1ClickMovieDownload.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0, , [6a9cc1cf107a5cda629f5abb3dc7966a], 
PUP.Optional.DigitalSites.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\DSiteProducts, , [28de2a66d7b3bc7aff879ebadb2a29d7], 
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\PriceMeterLiveUpdate, , [d135cdc382089c9aaa74d30bbd467888], 
PUP.Optional.SmartBar, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SmartbarBackup, , [20e66e22bcceed49de3fd87146bfa759], 
PUP.Optional.SmartBar, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SmartbarLog, , [5da97d13eaa01125b963ab9e17eee917], 
PUP.Optional.WebSearches.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SupHpUISoft, , [8383c9c7d7b35ed87dd9db17847f2ed2], 
PUP.Optional.TNT.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\TNT2, , [9e68c8c8741665d187959642946f43bd], 
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\wse_astromenda, , [bd49454ba3e7f6406f4e30c0ea1953ad], 
PUP.Optional.1ClickMovieDownload.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0, , [689e08886a2069cdb24f3bdaf80ceb15], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [c93d7719d8b286b06bd1380d7a8bb34d], 
PUP.Optional.PricePeep.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\PricePeep, , [0105f19f6a202c0aa39a25f9b4503ec2], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\VideoDownloadConverter_4z, , [dc2a95fb7317db5b7cabfc07de2646ba], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\BOOST, , [4db9840c4941f0461e1ae2766e97ac54], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\BABSOLUTION\Updater, , [f6108e02305af44267a3a092de270ef2], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\BOOST, , [a165a4ec8bff26100351c51d20e36898], 
PUP.Optional.AlexaTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\DISTROMATIC\Toolbars, , [fd09f19f56349e9818802c0bf60fd32d], 
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [c93d6f2109816dc95ad70e47af56847c], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [8f77a0f05931e254134efb20bf45867a], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\INSTALLCORE, , [f5110090ef9b5bdb78b3013020e57888], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, , [9472523ec6c4c2748b2817f119eb9c64], 
PUP.Optional.BProtector.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [b84e434d2862cb6b45086aca52b3a25e], 
PUP.Optional.ShoppingHelper.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SMARTBAR, , [bc4a484833572f07900370e16e97c23e], 
PUP.Optional.DigitalSites.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\DSiteproducts, , [7492b0e0048690a6ef974b0dac59b64a], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\Iminent, , [4abc335dc4c645f1212e5dbf739158a8], 
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\PriceMeterLiveUpdate, , [25e18808701a6fc79c82e0fe4ab96b95], 
PUP.Optional.SaveSense.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\SaveSense, , [e620365aa3e73303d3f0172838cd619f], 
PUP.Optional.SaveSense.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\SaveSenseLive, , [996da3ed7713b680e3e14ff0bc49ba46], 
PUP.Optional.1ClickMovieDownload.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0, , [9d69523e890178be41c0fe1740c4db25], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [a85eeca4b3d7be7887b5162fa461867a], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\VideoDownloadConverter_4z, , [80863d536129fc3ac4637d86d1337090], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\BOOST, , [7690abe5b8d2a19546f2da7e9f6619e7], 
PUP.Optional.CertifiedTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\SIMPLYTECH\CertifiedToolbar, , [c0460789c0caf54133873dbcd0336f91], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [16f01e728a002f07025fb665a262c739], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLCORE, , [d135e9a77416cb6bc86376bb95701fe1], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\installdaddy, , [be488c04c1c9ea4c927e55dd56af9e62], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, , [9274127e167488ae5d560cfce61e11ef], 
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\SYSTWEAK\RegClean Pro, , [b94d5937b1d9142203c0bf77a46147b9], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLMenu.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLMenu, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLMenu, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLMenu, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLMenu.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLMenu.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{99e1f6fd-2e94-4cf6-8344-1ba63cd3bd9b}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{fb0e8a09-f08c-44cf-9e15-97adac016248}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{17B10E59-09E1-4C39-A738-6774D7AB7778}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2D9083CE-8758-4704-BA57-3C891D7452BD}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{17B10E59-09E1-4C39-A738-6774D7AB7778}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2D9083CE-8758-4704-BA57-3C891D7452BD}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{17B10E59-09E1-4C39-A738-6774D7AB7778}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2D9083CE-8758-4704-BA57-3C891D7452BD}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{fb0e8a09-f08c-44cf-9e15-97adac016248}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{fb0e8a09-f08c-44cf-9e15-97adac016248}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.XMLSessionPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.XMLSessionPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1f6f39c1-00a8-4752-a94c-d0ea92d978b6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{fe8dbb09-c3d3-4477-80cb-d38914b94bb8}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3E9469AF-E866-4476-B767-810630F1F6E7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3E9469AF-E866-4476-B767-810630F1F6E7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3E9469AF-E866-4476-B767-810630F1F6E7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{fe8dbb09-c3d3-4477-80cb-d38914b94bb8}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{fe8dbb09-c3d3-4477-80cb-d38914b94bb8}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.PseudoTransparentPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.PseudoTransparentPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3d429207-4689-492d-a0e5-cdc5dfbb5005}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3D429207-4689-492D-A0E5-CDC5DFBB5005}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D429207-4689-492D-A0E5-CDC5DFBB5005}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ff48dba6-5dd8-4d10-9eb0-0fa968502e66}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{FF48DBA6-5DD8-4D10-9EB0-0FA968502E66}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5354d921-3f52-47c5-938d-77a2fb6defe7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3ee17dd1-e28b-4aed-a3b2-9c29cb2c19d6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3ee17dd1-e28b-4aed-a3b2-9c29cb2c19d6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{3ee17dd1-e28b-4aed-a3b2-9c29cb2c19d6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLPanel.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLPanel, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLPanel, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLPanel, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLPanel.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLPanel.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0051382.BHO, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0051382.BHO.1, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 

Registrierungswerte: 44
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Boost, C:\Program Files (x86)\Boost\Boost.exe, , [b74f078948423df92c880a469075d828]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA|tlbrSrchUrl, hxxp://astromenda.com/?f=3&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=&q=, , [63a377190d7d7db93f1c09c3956eba46]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA|tlbrSrchUrl, hxxp://astromenda.com/?f=3&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=&q=, , [10f6365a69214fe775e6e0ec6a99b050]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}|URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, , [cb3bade3f1993303216275e915f03ec2]
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [d531eda3becc43f3dfbb27c8ca3944bc]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA|tlbrSrchUrl, hxxp://astromenda.com/?f=3&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=&q=, , [0cfa662a395185b1f566eddf1ce7d52b]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\WSE_Astromenda\\, , [a462a4ec6e1c75c12342a626ad567a86]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, , [f313603015750b2b0d12b3aed43155ab]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, , [db2bbcd489011323057eec72ee179f61]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [e62057395a30999d6c2e6f80c83b56aa]
PUP.Optional.Mindspark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|VideoDownloadConverter Search Scope Monitor, "C:\PROGRA~2\VIDEOD~1\bar\1.bin\4zsrchmn.exe" /m=2 /w /h, , [cf37355b305a42f46cd6024f02036c94]
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|4zffxtbr@VideoDownloadConverter_4z.com, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin, , [0006e9a7e9a156e034000bc5bc474bb5]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, , [8680eca48208b6801989737d798a27d9]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, bdo, , [c3438808f1998ea813bab63a50b3ea16]
PUP.Optional.Umbrella.A, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA|MUpdBlock, {
   "MASSUPDATE" : {
      "CHROME_MBAR" : {
         "Checked" : 1,
         "RetryIdx" : 0,
         "Version" : 1
      },
      "FIREFOX_MBAR" : {
         "Checked" : 1,
         "RetryIdx" : 0,
         "Version" : 1
      },
      "IEXPLORE_BHO" : {
         "Checked" : 1,
         "RetryIdx" : 0,
         "Version" : 4
      }
   }
}
, , [3dc91779a4e678becaed74beb25337c9]
PUP.Optional.Iminent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPROTECTION|ImagePath, C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe, , [be48a7e912780135d0ac79e9fa0b916f]
PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD|ImagePath, system32\drivers\ttnfd.sys, , [2bdb731d8dfd13233755f3fb21e20ef2]
PUP.Optional.WpManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM|ImagePath, C:\ProgramData\WPM\wprotectmanager.exe -service, , [6a9cddb3cdbdb1858ce4bd84bf469967]
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\BOOST|refreshInterval, 7200, , [4db9840c4941f0461e1ae2766e97ac54]
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\BOOST|BrowserAllow, {ie}{chrome}{firefox}{opera}, , [a165a4ec8bff26100351c51d20e36898]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\INSTALLCORE|tb, 0V1S2Q1J0V1C2S, , [f5110090ef9b5bdb78b3013020e57888]
PUP.BProtector, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032, , [3fc7444c95f592a437d25fd228dd7888]
PUP.Optional.SearchCertified.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, , [d432cec2a8e2c1757dfe04fa2ed5827e]
PUP.BProtector, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [2dd9236d6624e452be4c49e8877ecb35]
PUP.Optional.Trovi.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|URL, hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325155&octid=EB_ORIGINAL_CTID&ISID=M783FC972-AFB4-41C0-8913-6B835DFEFD55&SearchSource=58&CUI=&UM=8&UP=SP245EFFC9-4F12-44DD-AA14-0060A1913BE7&q={searchTerms}&D=032315&SSPV=, , [739389071872b08604b32b33f80d23dd]
PUP.Optional.Conduit.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|SuggestionsURL_JSON, hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}, , [b94dfd93d8b2a690001d666881827a86]
PUP.Optional.Trovi.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|DisplayName, Trovi, , [47bf226ebecc89adc8ef8cd2f80dd828]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}|Url, hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}, , [798d751b5436be789795cf00dc273ac6]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}|FaviconPath, C:\Program Files (x86)\Iminent\inst\SearchTheWeb.ico, , [49bdc4cce1a9ee486dbfa02fea19728e]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=, , [c244870942489a9c740073ebb4517f81]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURLFallback, hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=, , [e71fb5dbd2b8cd69cca8e678c34212ee]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|FaviconPath, C:\Program Files (x86)\WSE_Astromenda\\FavIcon.ico, , [51b50a86216942f4205478e60bfa4fb1]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Astromenda, , [dd29eca4aae0c76f85ef77e7af56e917]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, Astromenda, , [788e385890fa979f591bcb930104ab55]
PUP.Optional.MyStart.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}|URL, hxxp://www.mystart.com/results.php?gen=ms&pr=vmn&id=mystarttb&v=5_4&ent=ch_5108&q={searchTerms}, , [15f19ff1cebce452d8b8b9a5b451d62a]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{460C3D19-B3D4-4964-A550-77D263B0CCCB}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, , [6f97c0d0dab0f83e68b6a7ba08fdbf41]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}|URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, , [94723f514941122493ef8dd172939f61]
PUP.Optional.ShoppingHelper.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SMARTBAR|Publisher, ShoppingHelper, , [bc4a484833572f07900370e16e97c23e]
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\BOOST|refreshInterval, 7200, , [7690abe5b8d2a19546f2da7e9f6619e7]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLCORE|tb, 0V1N2Y1S0V1R1H, , [d135e9a77416cb6bc86376bb95701fe1]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [8680fa962f5bc175b4542fc9e41fe020]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|Url, hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}, , [36d05937ddadcb6b2dffb6198c771ee2]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|FaviconPath, C:\Program Files (x86)\Iminent\inst\SearchTheWeb.ico, , [47bf6729464492a4959749864ab9a65a]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, , [5da9127e93f79a9cb9655a07de27ed13]

Registrierungsdaten: 29
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[27df96faacdeaa8c590c4cba26e05fa1]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[877f8d0327633600f075e71fdb2b9c64]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[a85ed8b852381f176df8d333ff072fd1]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[b84eb3ddccbe0f27c99cb74f798d50b0]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[cc3a751b0486ee48f063ac66b25410f0]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[8b7bb0e0d9b11e1803625ea8b74fab55]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[788e721e39517bbb69fc04026f97728e]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[7b8b3b551f6b1a1c7fe68185ff079e62]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[8e78048c3e4c2c0a560f41c5f21423dd]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[aa5cdfb1b4d661d51c37b35fb3534bb5]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[1aec3c5492f869cddf5f14f34db9b050]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[38cec2ceb0da3cfa154e689ea066c33d]
Hijack.StartPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Default_Page_URL, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[40c60090d5b58da9ad5e6ca5c73fc040]
Hijack.StartPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[9e68b8d8fe8c290d63a87e93bc4a19e7]
PUP.Optional.StartPage.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032, Gut: (www.google.com), Schlecht: (hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032),,[13f3216f7a1032046dadfe14aa5cbd43]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[e521f19f2565f73fb37eae5a4eb83dc3]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[ef17c0d03d4d211533dbd83964a2c739]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[a85ec8c8f89264d2022f58b0f1157b85]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[21e52e6256344cea34da060b2cdafe02]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[1aec702065251f17f43ddc2c3ec854ac]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[8b7b3a5698f283b3d9356da48d796d93]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[b254e7a9ddadba7cd55cf117fa0c8e72]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[fd09127e0c7e95a1789613fef5110ef2]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s),,[9f675838e3a7e452cb1f5cb68c7a956b]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|(Default), hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s, Gut: (www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s),,[f313a5eb9ceec571dd0ee32f29ddda26]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D, Gut: (www.Google.com), Schlecht: (hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D),,[9c6a820e0585fc3afab915fd74929d63]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[9472fe92b7d31d19b98713f407ffa15f]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[df27e3ad2b5fc27472ce64a312f454ac]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[d036068aa7e3e74f7fc034d3aa5c10f0]

Ordner: 403
PUP.Optional.WebBar.A, C:\Users\Marvin\AppData\Local\WebBar, , [887e4d436525e056c8dbc904689b48b8], 
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar, , [f80e09871476191d8b18dfee0201c53b], 
PUP.Optional.CrimeWatch.A, C:\ProgramData\CrimeWatch, , [66a01a76aae0d264f821fedf13f09a66], 
PUP.Optional.CrimeWatch.A, C:\Users\ViMa\AppData\Local\CrimeWatch, , [41c5c6ca335770c666bc7c68649fa957], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\lib, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\temp, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\update, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Configs, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Resources, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log, , [fc0ae1af95f50c2a4c777f985ba99868], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost, , [b74f078948423df92c880a469075d828], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\actions, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\actions, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.MultiPlug.A, C:\Users\ViMa\AppData\Roaming\9A71C85D-1428686857-78A7-5658-952CB992DEA7, , [0402890774160d29d832d789040102fe], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults\preferences, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\userCode, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale\en-US, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D10, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D4, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D5, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D6, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D7, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D9, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\ar, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Configs, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\de, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\es, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\fr, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\he, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\it, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\nl, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\pt, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\ru, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\tr, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\Configs, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\ServicesPlugins, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Configs, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Profiles, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\RollBack, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar, , [5ea85a364a400b2b289bd6c38380e11f], 
PUP.Optional.Iminent.A, C:\Users\ViMa\AppData\Local\Temp\Iminent, , [a3638b05deacc175ddff3762f40f43bd], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice\en, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.SaveSense, C:\ProgramData\SaveSenseLive, , [5caad1bf008a0432b3584853ec178977], 
PUP.Optional.SaveSense, C:\ProgramData\SaveSenseLive\Update, , [5caad1bf008a0432b3584853ec178977], 
PUP.Optional.SaveSense, C:\ProgramData\SaveSenseLive\Update\Log, , [5caad1bf008a0432b3584853ec178977], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense\UpdateProc, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense, , [c541424eb1d91e181bf2118aba4902fe], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSenseLive, , [ea1c7020e0aa02340e022b7004fff30d], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSenseLive\CrashReports, , [ea1c7020e0aa02340e022b7004fff30d], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.1ClickMovieDownload.A, C:\Users\Marvin\AppData\LocalLow\1ClickMovie-Download V9.0, , [aa5c8907e8a296a01d356a33fd06a25e], 
PUP.Optional.1ClickMovieDownload.A, C:\Users\ViMa\AppData\LocalLow\1ClickMovie-Download V9.0, , [22e45d330981c96dfb57a9f453b0738d], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSense, , [f90dcec24d3d8bab46159d02996ad927], 
PUP.Optional.PriceMeter.A, C:\Program Files (x86)\PriceMeterLiveUpdate, , [7e88fc9471190432c2f3207f42c1748c], 
PUP.Optional.PriceMeter.A, C:\Program Files (x86)\PriceMeterLiveUpdate\CrashReports, , [7e88fc9471190432c2f3207f42c1748c], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\chrome, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\ThirdPartyInstallers, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\gen1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\History, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\IE9Mesg, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\Message, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\Settings, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0, , [b650d8b8ee9c8caa78a15052c83b42be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0, , [00060a86791170c655c4e1c15ea56997], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo, , [11f549470e7c89ad8790b7f047bc05fb],
         

Alt 05.05.2015, 14:48   #7
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Code:
ATTFilter
PUP.Optional.CrimeWatch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CrimeWatch, , [d23470208a0039fdcaa990a04ab86c94], 
PUP.Optional.EZSoftware.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EZ Software Updater, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\EZ Software Updater_is1, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.Boost.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Boost, , [b74f078948423df92c880a469075d828], 
PUP.Optional.Flashbeat.A, HKLM\SOFTWARE\Flashbeat, , [39cd424e18721a1c191c825631d2cd33], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\Iminent, , [2ed8d3bd6723b28473db2fed16ee35cb], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051382.BHO, , [c54179175733f145fa9f14e2f01306fa], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051382.BHO.1, , [90760789fc8e3600019832c49370cd33], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [b84e117f1377979f767f60d9de27a15f], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\APPID\PricePeep.DLL, , [c442b0e095f566d008a8ed452adb47b9], 
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA, , [63a377190d7d7db93f1c09c3956eba46], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [ea1c820e7e0c6fc704f1bf7a8184847c], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\PricePeep.DLL, , [7294127e622858deb9f7a88a6c99ee12], 
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA, , [10f6365a69214fe775e6e0ec6a99b050], 
PUP.Optional.Astromenda.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [5babddb32862f83ef13ff95ce91c5ba5], 
PUP.Optional.EZSoftware.A, HKLM\SOFTWARE\WOW6432NODE\EZ Software Updater, , [8f77216f08826bcbb033f7f3748f0bf5], 
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, , [887ec6ca167448ee9fbccc2647bcc53b], 
PUP.Optional.PriceMeter.A, HKLM\SOFTWARE\WOW6432NODE\PriceMeterLiveUpdate, , [18eeaee2cebcee48eb35ba24e61dd52b], 
PUP.Optional.qvo6.A, HKLM\SOFTWARE\WOW6432NODE\qvo6Software, , [6a9cb6da305ac1757cf4ff349174ea16], 
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [a660dbb5c8c2b77f96ba99b73acb956b], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\supWPM, , [22e45a361c6e9a9cdcf214dc44bf31cf], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\VideoDownloadConverter_4z, , [54b2e3ad78123600873f46059e67e818], 
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\WaNetworkEnhance, , [43c36f213d4d63d364fb933bed168977], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0051382.BHO, , [a462652b5a300234ebae8e68cd36c63a], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0051382.BHO.1, , [22e44c444c3ec1758c0dd620c73c39c7], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Iminent.WebBooster.InternetExplorer.DLL, , [778f2b65a9e10d2924d154e5fe07c43c], 
PUP.Optional.PricePeep.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PricePeep.DLL, , [8185eaa6f397ba7cf6ba53df887d36ca], 
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA, , [0cfa662a395185b1f566eddf1ce7d52b], 
PUP.Optional.VNMToolbar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dghncoeocefmhkhiphdgikkamjeglbfh, , [778f47493b4f54e2796eb24816ed22de], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\igdhbblpcellaljokkpfhcjlagemhgjl, , [42c4a1ef662496a03a1322faaf550000], 
PUP.Optional.Astromenda.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [7a8c8e023654fa3c9b95ba9b80857e82], 
PUP.Optional.VoPackage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPackage, , [ff07b1df6b1f0c2a57b1f16efb0a936d], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@VideoDownloadConverter_4z.com/Plugin, , [907699f78ffb7db905bf31d6c93b54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP, , [8680eca48208b6801989737d798a27d9], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [c3438808f1998ea813bab63a50b3ea16], 
PUP.Optional.Umbrella.A, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA, , [3dc91779a4e678becaed74beb25337c9], 
PUP.Optional.Mindspark.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VideoDownloadConverter_4zService, , [f016a1ef276395a1f6cf0205af550ff1], 
PUP.Optional.Wajam.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WaNetworkEnhance Service, , [8e780c8432588fa75210d6f8d42f51af], 
PUP.Optional.Iminent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinkHandler, , [56b070208ffb8fa765e77e9e2bd9f40c], 
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, , [41c54947cdbdcc6a8c17f1f59e65f60a], 
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [897d6e22751555e1d7cd40a6e91a24dc], 
PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD, , [2bdb731d8dfd13233755f3fb21e20ef2], 
PUP.Optional.1ClickMovieDownload.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0, , [6a9cc1cf107a5cda629f5abb3dc7966a], 
PUP.Optional.DigitalSites.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\DSiteProducts, , [28de2a66d7b3bc7aff879ebadb2a29d7], 
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\PriceMeterLiveUpdate, , [d135cdc382089c9aaa74d30bbd467888], 
PUP.Optional.SmartBar, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SmartbarBackup, , [20e66e22bcceed49de3fd87146bfa759], 
PUP.Optional.SmartBar, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SmartbarLog, , [5da97d13eaa01125b963ab9e17eee917], 
PUP.Optional.WebSearches.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SupHpUISoft, , [8383c9c7d7b35ed87dd9db17847f2ed2], 
PUP.Optional.TNT.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\TNT2, , [9e68c8c8741665d187959642946f43bd], 
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\wse_astromenda, , [bd49454ba3e7f6406f4e30c0ea1953ad], 
PUP.Optional.1ClickMovieDownload.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0, , [689e08886a2069cdb24f3bdaf80ceb15], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [c93d7719d8b286b06bd1380d7a8bb34d], 
PUP.Optional.PricePeep.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\PricePeep, , [0105f19f6a202c0aa39a25f9b4503ec2], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\VideoDownloadConverter_4z, , [dc2a95fb7317db5b7cabfc07de2646ba], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\BOOST, , [4db9840c4941f0461e1ae2766e97ac54], 
PUP.Optional.Babylon.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\BABSOLUTION\Updater, , [f6108e02305af44267a3a092de270ef2], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\BOOST, , [a165a4ec8bff26100351c51d20e36898], 
PUP.Optional.AlexaTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\DISTROMATIC\Toolbars, , [fd09f19f56349e9818802c0bf60fd32d], 
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pfkfdlcdbajamklbneflfbcmfgddmpae, , [c93d6f2109816dc95ad70e47af56847c], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [8f77a0f05931e254134efb20bf45867a], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\INSTALLCORE, , [f5110090ef9b5bdb78b3013020e57888], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, , [9472523ec6c4c2748b2817f119eb9c64], 
PUP.Optional.BProtector.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [b84e434d2862cb6b45086aca52b3a25e], 
PUP.Optional.ShoppingHelper.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SMARTBAR, , [bc4a484833572f07900370e16e97c23e], 
PUP.Optional.DigitalSites.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\DSiteproducts, , [7492b0e0048690a6ef974b0dac59b64a], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\Iminent, , [4abc335dc4c645f1212e5dbf739158a8], 
PUP.Optional.PriceMeter.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\PriceMeterLiveUpdate, , [25e18808701a6fc79c82e0fe4ab96b95], 
PUP.Optional.SaveSense.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\SaveSense, , [e620365aa3e73303d3f0172838cd619f], 
PUP.Optional.SaveSense.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\SaveSenseLive, , [996da3ed7713b680e3e14ff0bc49ba46], 
PUP.Optional.1ClickMovieDownload.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\1ClickMovie-Download V9.0, , [9d69523e890178be41c0fe1740c4db25], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [a85eeca4b3d7be7887b5162fa461867a], 
PUP.Optional.Mindspark.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\VideoDownloadConverter_4z, , [80863d536129fc3ac4637d86d1337090], 
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\BOOST, , [7690abe5b8d2a19546f2da7e9f6619e7], 
PUP.Optional.CertifiedTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\SIMPLYTECH\CertifiedToolbar, , [c0460789c0caf54133873dbcd0336f91], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [16f01e728a002f07025fb665a262c739], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLCORE, , [d135e9a77416cb6bc86376bb95701fe1], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\installdaddy, , [be488c04c1c9ea4c927e55dd56af9e62], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\Iminent, , [9274127e167488ae5d560cfce61e11ef], 
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\SYSTWEAK\RegClean Pro, , [b94d5937b1d9142203c0bf77a46147b9], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLMenu.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLMenu, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLMenu, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLMenu, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLMenu.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLMenu.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{99e1f6fd-2e94-4cf6-8344-1ba63cd3bd9b}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{fb0e8a09-f08c-44cf-9e15-97adac016248}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{17B10E59-09E1-4C39-A738-6774D7AB7778}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2D9083CE-8758-4704-BA57-3C891D7452BD}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{17B10E59-09E1-4C39-A738-6774D7AB7778}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2D9083CE-8758-4704-BA57-3C891D7452BD}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{17B10E59-09E1-4C39-A738-6774D7AB7778}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2D9083CE-8758-4704-BA57-3C891D7452BD}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8FDA7A57-D1A8-4A62-A643-B85FDC116212}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{fb0e8a09-f08c-44cf-9e15-97adac016248}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{fb0e8a09-f08c-44cf-9e15-97adac016248}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.XMLSessionPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.XMLSessionPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.XMLSessionPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1f6f39c1-00a8-4752-a94c-d0ea92d978b6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{fe8dbb09-c3d3-4477-80cb-d38914b94bb8}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3E9469AF-E866-4476-B767-810630F1F6E7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3E9469AF-E866-4476-B767-810630F1F6E7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3E9469AF-E866-4476-B767-810630F1F6E7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{46CE5380-6055-4C3A-A7E5-3A02A2335C61}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4F6ECF71-C575-4BD2-8EF7-548D0EF1AB1D}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{54D99BE4-2FD7-449E-9DB4-76532CEE0B16}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{fe8dbb09-c3d3-4477-80cb-d38914b94bb8}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{fe8dbb09-c3d3-4477-80cb-d38914b94bb8}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.PseudoTransparentPlugin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.PseudoTransparentPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.PseudoTransparentPlugin.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3d429207-4689-492d-a0e5-cdc5dfbb5005}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3D429207-4689-492D-A0E5-CDC5DFBB5005}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D429207-4689-492D-A0E5-CDC5DFBB5005}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ff48dba6-5dd8-4d10-9eb0-0fa968502e66}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{FF48DBA6-5DD8-4D10-9EB0-0FA968502E66}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5354d921-3f52-47c5-938d-77a2fb6defe7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3ee17dd1-e28b-4aed-a3b2-9c29cb2c19d6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{34AD1EA7-8B9E-4D8B-B3ED-365D12C8EE73}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3ee17dd1-e28b-4aed-a3b2-9c29cb2c19d6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{3ee17dd1-e28b-4aed-a3b2-9c29cb2c19d6}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLPanel.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\VideoDownloadConverter_4z.HTMLPanel, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLPanel, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLPanel, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\VideoDownloadConverter_4z.HTMLPanel.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\VideoDownloadConverter_4z.HTMLPanel.1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0051382.BHO, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0051382.BHO.1, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511131182}, , [e71f5e329febd165dbe5cc4c23e3f808], 

Registrierungswerte: 44
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Boost, C:\Program Files (x86)\Boost\Boost.exe, , [b74f078948423df92c880a469075d828]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA|tlbrSrchUrl, hxxp://astromenda.com/?f=3&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=&q=, , [63a377190d7d7db93f1c09c3956eba46]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA|tlbrSrchUrl, hxxp://astromenda.com/?f=3&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=&q=, , [10f6365a69214fe775e6e0ec6a99b050]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}|URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, , [cb3bade3f1993303216275e915f03ec2]
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [d531eda3becc43f3dfbb27c8ca3944bc]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}\INSTL\DATA|tlbrSrchUrl, hxxp://astromenda.com/?f=3&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=&q=, , [0cfa662a395185b1f566eddf1ce7d52b]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\WSE_Astromenda\\, , [a462a4ec6e1c75c12342a626ad567a86]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, , [f313603015750b2b0d12b3aed43155ab]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, , [db2bbcd489011323057eec72ee179f61]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [e62057395a30999d6c2e6f80c83b56aa]
PUP.Optional.Mindspark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|VideoDownloadConverter Search Scope Monitor, "C:\PROGRA~2\VIDEOD~1\bar\1.bin\4zsrchmn.exe" /m=2 /w /h, , [cf37355b305a42f46cd6024f02036c94]
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|4zffxtbr@VideoDownloadConverter_4z.com, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin, , [0006e9a7e9a156e034000bc5bc474bb5]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPDP|dir, C:\Program Files (x86)\SupTab, , [8680eca48208b6801989737d798a27d9]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, bdo, , [c3438808f1998ea813bab63a50b3ea16]
PUP.Optional.Umbrella.A, HKLM\SOFTWARE\WOW6432NODE\UMBRELLA|MUpdBlock, {
   "MASSUPDATE" : {
      "CHROME_MBAR" : {
         "Checked" : 1,
         "RetryIdx" : 0,
         "Version" : 1
      },
      "FIREFOX_MBAR" : {
         "Checked" : 1,
         "RetryIdx" : 0,
         "Version" : 1
      },
      "IEXPLORE_BHO" : {
         "Checked" : 1,
         "RetryIdx" : 0,
         "Version" : 4
      }
   }
}
, , [3dc91779a4e678becaed74beb25337c9]
PUP.Optional.Iminent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPROTECTION|ImagePath, C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe, , [be48a7e912780135d0ac79e9fa0b916f]
PUP.Optional.TermTutor.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTNFD|ImagePath, system32\drivers\ttnfd.sys, , [2bdb731d8dfd13233755f3fb21e20ef2]
PUP.Optional.WpManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM|ImagePath, C:\ProgramData\WPM\wprotectmanager.exe -service, , [6a9cddb3cdbdb1858ce4bd84bf469967]
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\APPDATALOW\SOFTWARE\BOOST|refreshInterval, 7200, , [4db9840c4941f0461e1ae2766e97ac54]
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\BOOST|BrowserAllow, {ie}{chrome}{firefox}{opera}, , [a165a4ec8bff26100351c51d20e36898]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\INSTALLCORE|tb, 0V1S2Q1J0V1C2S, , [f5110090ef9b5bdb78b3013020e57888]
PUP.BProtector, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032, , [3fc7444c95f592a437d25fd228dd7888]
PUP.Optional.SearchCertified.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, , [d432cec2a8e2c1757dfe04fa2ed5827e]
PUP.BProtector, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [2dd9236d6624e452be4c49e8877ecb35]
PUP.Optional.Trovi.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|URL, hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325155&octid=EB_ORIGINAL_CTID&ISID=M783FC972-AFB4-41C0-8913-6B835DFEFD55&SearchSource=58&CUI=&UM=8&UP=SP245EFFC9-4F12-44DD-AA14-0060A1913BE7&q={searchTerms}&D=032315&SSPV=, , [739389071872b08604b32b33f80d23dd]
PUP.Optional.Conduit.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|SuggestionsURL_JSON, hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}, , [b94dfd93d8b2a690001d666881827a86]
PUP.Optional.Trovi.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|DisplayName, Trovi, , [47bf226ebecc89adc8ef8cd2f80dd828]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}|Url, hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}, , [798d751b5436be789795cf00dc273ac6]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}|FaviconPath, C:\Program Files (x86)\Iminent\inst\SearchTheWeb.ico, , [49bdc4cce1a9ee486dbfa02fea19728e]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=, , [c244870942489a9c740073ebb4517f81]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURLFallback, hxxp://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_frmr_14_37_ie&cd=2XzuyEtN2Y1L1Qzu0FyE0ByB0EtBtC0AtC0C0B0B0AtByCtCtN0D0Tzu0SzyzzyEtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0D0CyByC0ByDyDtG0A0D0EtBtG0EtD0CyCtG0BtB0B0EtGtAyDyDzztDtByB0C0CyB0CyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DyDzz0EyEzytAtBtGyD0DyC0CtGyE0D0DtBtG0BtDtA0BtG0B0F0Czz0B0F0A0BtDyB0C0C2Q&cr=1363180055&ir=, , [e71fb5dbd2b8cd69cca8e678c34212ee]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|FaviconPath, C:\Program Files (x86)\WSE_Astromenda\\FavIcon.ico, , [51b50a86216942f4205478e60bfa4fb1]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Astromenda, , [dd29eca4aae0c76f85ef77e7af56e917]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, Astromenda, , [788e385890fa979f591bcb930104ab55]
PUP.Optional.MyStart.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}|URL, hxxp://www.mystart.com/results.php?gen=ms&pr=vmn&id=mystarttb&v=5_4&ent=ch_5108&q={searchTerms}, , [15f19ff1cebce452d8b8b9a5b451d62a]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{460C3D19-B3D4-4964-A550-77D263B0CCCB}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, , [6f97c0d0dab0f83e68b6a7ba08fdbf41]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}|URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, , [94723f514941122493ef8dd172939f61]
PUP.Optional.ShoppingHelper.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\SMARTBAR|Publisher, ShoppingHelper, , [bc4a484833572f07900370e16e97c23e]
PUP.Optional.Boost.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\APPDATALOW\SOFTWARE\BOOST|refreshInterval, 7200, , [7690abe5b8d2a19546f2da7e9f6619e7]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\INSTALLCORE|tb, 0V1N2Y1S0V1R1H, , [d135e9a77416cb6bc86376bb95701fe1]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [8680fa962f5bc175b4542fc9e41fe020]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|Url, hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}, , [36d05937ddadcb6b2dffb6198c771ee2]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|FaviconPath, C:\Program Files (x86)\Iminent\inst\SearchTheWeb.ico, , [47bf6729464492a4959749864ab9a65a]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, , [5da9127e93f79a9cb9655a07de27ed13]

Registrierungsdaten: 29
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[27df96faacdeaa8c590c4cba26e05fa1]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[877f8d0327633600f075e71fdb2b9c64]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[a85ed8b852381f176df8d333ff072fd1]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[b84eb3ddccbe0f27c99cb74f798d50b0]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[cc3a751b0486ee48f063ac66b25410f0]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[8b7bb0e0d9b11e1803625ea8b74fab55]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[788e721e39517bbb69fc04026f97728e]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[7b8b3b551f6b1a1c7fe68185ff079e62]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243&q={searchTerms}),,[8e78048c3e4c2c0a560f41c5f21423dd]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[aa5cdfb1b4d661d51c37b35fb3534bb5]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[1aec3c5492f869cddf5f14f34db9b050]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hp&ts=1409476792&from=bdo&uid=WDCXWD10EZEX-60ZF5A0_WD-WCC1S207824378243),,[38cec2ceb0da3cfa154e689ea066c33d]
Hijack.StartPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Default_Page_URL, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[40c60090d5b58da9ad5e6ca5c73fc040]
Hijack.StartPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (hxxp://www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[9e68b8d8fe8c290d63a87e93bc4a19e7]
PUP.Optional.StartPage.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032, Gut: (www.google.com), Schlecht: (hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=5C7DF4B7E21A1CBB&affID=125035&tsp=5032),,[13f3216f7a1032046dadfe14aa5cbd43]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[e521f19f2565f73fb37eae5a4eb83dc3]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[ef17c0d03d4d211533dbd83964a2c739]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[a85ec8c8f89264d2022f58b0f1157b85]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=home&tid=3373),,[21e52e6256344cea34da060b2cdafe02]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[1aec702065251f17f43ddc2c3ec854ac]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[8b7b3a5698f283b3d9356da48d796d93]
PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[b254e7a9ddadba7cd55cf117fa0c8e72]
Hijack.SearchPage, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=, Gut: (hxxp://www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&tid=3373&st=bs&q=),,[fd09127e0c7e95a1789613fef5110ef2]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s, Gut: (www.google.com), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s),,[9f675838e3a7e452cb1f5cb68c7a956b]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-130668294-1935915265-711181056-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|(Default), hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s, Gut: (www.google.com/), Schlecht: (hxxp://search.certified-toolbar.com?si=42826&st=bs&tid=3373&q=%s),,[f313a5eb9ceec571dd0ee32f29ddda26]
PUP.Optional.Iminent.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D, Gut: (www.Google.com), Schlecht: (hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D),,[9c6a820e0585fc3afab915fd74929d63]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[9472fe92b7d31d19b98713f407ffa15f]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[df27e3ad2b5fc27472ce64a312f454ac]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-130668294-1935915265-711181056-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmfYfvLrKqV-p08_TvxgVgOOcl5UWQ5fve63V7nUu-40s1Ra6_vyaArWgtx0ycnKoYJypO2gqhf7HUuNuWQ3f-XhV_wij8H4EtbJNgqQOhaXcuXXSdUAPKbcW3lMeJbHM9lpOM-6Qe6nKiBkjkxNhu75MONc,&q={searchTerms}),,[d036068aa7e3e74f7fc034d3aa5c10f0]

Ordner: 403
PUP.Optional.WebBar.A, C:\Users\Marvin\AppData\Local\WebBar, , [887e4d436525e056c8dbc904689b48b8], 
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar, , [f80e09871476191d8b18dfee0201c53b], 
PUP.Optional.CrimeWatch.A, C:\ProgramData\CrimeWatch, , [66a01a76aae0d264f821fedf13f09a66], 
PUP.Optional.CrimeWatch.A, C:\Users\ViMa\AppData\Local\CrimeWatch, , [41c5c6ca335770c666bc7c68649fa957], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\lib, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\temp, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\update, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Configs, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Resources, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log, , [fc0ae1af95f50c2a4c777f985ba99868], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost, , [b74f078948423df92c880a469075d828], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\actions, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\actions, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.MultiPlug.A, C:\Users\ViMa\AppData\Roaming\9A71C85D-1428686857-78A7-5658-952CB992DEA7, , [0402890774160d29d832d789040102fe], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults\preferences, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\userCode, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale\en-US, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D10, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D4, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D5, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D6, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D7, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D9, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\ar, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Configs, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\de, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\es, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\fr, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\he, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\it, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\nl, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\pt, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\ru, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\tr, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\Configs, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\ServicesPlugins, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Configs, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Profiles, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\RollBack, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.Iminent.A, C:\Program Files (x86)\IminentToolbar, , [5ea85a364a400b2b289bd6c38380e11f], 
PUP.Optional.Iminent.A, C:\Users\ViMa\AppData\Local\Temp\Iminent, , [a3638b05deacc175ddff3762f40f43bd], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\voice\en, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.SaveSense, C:\ProgramData\SaveSenseLive, , [5caad1bf008a0432b3584853ec178977], 
PUP.Optional.SaveSense, C:\ProgramData\SaveSenseLive\Update, , [5caad1bf008a0432b3584853ec178977], 
PUP.Optional.SaveSense, C:\ProgramData\SaveSenseLive\Update\Log, , [5caad1bf008a0432b3584853ec178977], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense\UpdateProc, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense, , [c541424eb1d91e181bf2118aba4902fe], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSenseLive, , [ea1c7020e0aa02340e022b7004fff30d], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSenseLive\CrashReports, , [ea1c7020e0aa02340e022b7004fff30d], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.1ClickMovieDownload.A, C:\Users\Marvin\AppData\LocalLow\1ClickMovie-Download V9.0, , [aa5c8907e8a296a01d356a33fd06a25e], 
PUP.Optional.1ClickMovieDownload.A, C:\Users\ViMa\AppData\LocalLow\1ClickMovie-Download V9.0, , [22e45d330981c96dfb57a9f453b0738d], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSense, , [f90dcec24d3d8bab46159d02996ad927], 
PUP.Optional.PriceMeter.A, C:\Program Files (x86)\PriceMeterLiveUpdate, , [7e88fc9471190432c2f3207f42c1748c], 
PUP.Optional.PriceMeter.A, C:\Program Files (x86)\PriceMeterLiveUpdate\CrashReports, , [7e88fc9471190432c2f3207f42c1748c], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\chrome, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\ThirdPartyInstallers, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\gen1, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\History, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\IE9Mesg, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\Message, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\Settings, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0, , [b650d8b8ee9c8caa78a15052c83b42be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0, , [00060a86791170c655c4e1c15ea56997], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo, , [11f549470e7c89ad8790b7f047bc05fb],
         

Alt 05.05.2015, 14:53   #8
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Code:
ATTFilter
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo, , [11f549470e7c89ad8790b7f047bc05fb], 
PUP.Optional.Yontoo.A, C:\Users\ViMa\AppData\Roaming\Yontoo, , [689ed6ba3456de58c94f3d6a7192a759], 
PUP.Optional.Yontoo.A, C:\Users\ViMa\AppData\Roaming\Yontoo\dat, , [689ed6ba3456de58c94f3d6a7192a759], 
PUP.Optional.Yontoo.A, C:\Users\ViMa\AppData\Roaming\Yontoo\dat\update, , [689ed6ba3456de58c94f3d6a7192a759], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\History, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Settings, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\VideoDownloadConverter_4z, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\VideoDownloadConverter_4z\Cache, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, , [b254c7c9cebc122480133e6dc34007f9], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, , [b254c7c9cebc122480133e6dc34007f9], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, , [2ed8c8c87812043299c95d50a85b2bd5], 
PUP.Optional.Updater.A, C:\Users\Marvin\AppData\Roaming\DigitalSites\UpdateProc, , [49bdeca4c2c884b222812c841fe436ca], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\data, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather\images, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\css, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\about, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\apps, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\discovery, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\ftue, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\pageAction, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\image-upload, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\loaders, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\cat, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\bubbles, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\buttons, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\city, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\clean, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\disco, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\fishing, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\forest, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\mountains, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\planets, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sea, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\space, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\strips, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sunset, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\user, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\ar, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\de, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\en, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\es, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\fr, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\he, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\it, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\ja, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\nl, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\pl, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\pt_BR, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\ru, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\tr, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_metadata, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda.A, C:\Users\ViMa\AppData\Roaming\WSE_Astromenda, , [16f070203f4b4ee807a9288b17ec31cf], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\LocalLow\Smartbar, , [0600414f8604d95d2f2a754821e211ef], 
PUP.Optional.PriceMeter.A, C:\Users\ViMa\AppData\Local\PriceMeterLiveUpdate, , [ca3c3e52e3a704329594e6dcf11256aa], 
PUP.Optional.PriceMeter.A, C:\Users\ViMa\AppData\Local\PriceMeterLiveUpdate\CrashReports, , [ca3c3e52e3a704329594e6dcf11256aa], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\chrome, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\chrome\content, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\chrome\content\widgets, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\chrome\content\widgets\net.vmn.www.alexa, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\coupons, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.MyStartTB.A, C:\Program Files (x86)\mystarttb, , [10f6e4aced9de84e809fd4f6ea1932ce], 
PUP.Optional.MyPCBackup.A, C:\Program Files (x86)\MyPC Backup, , [8e787b158307280e5d3708c291720bf5], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\native, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\native\libs, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\adapter, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\abstractbutton, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\abstractbutton\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\alert, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\alert\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml\html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript\html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\flare, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\flare\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\flare\icons, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\generic, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\generic\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\link, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\link\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\images, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\rss, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\rss\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\thirdparty, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\thirdparty\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\uninstall, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\uninstall\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\weather, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\weather\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\common, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\rss, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\rss\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps\css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\weather, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\weather\css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\weather\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\window, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\foreground, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\radioWrapper, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search\background, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search\html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\shared, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\_metadata, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl, , [8f770b85e1a97db9f3b293bba264c63a], 

Dateien: 2432
PUP.Optional.CrimeWatch.A, C:\ProgramData\GSwkHYjPE\EKxPYY.exe, , [dc2ac1cf1278bd7932419b958d75fb05], 
PUP.Optional.Iminent, C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe, , [0402751b96f4bc7a8bddce6c37ca9070], 
PUP.Optional.WpManager.A, C:\ProgramData\WPM\wprotectmanager.exe, , [0cfaaee2dab0310590e5097214eda45c], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost\64Boost.dll, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost\Boost.dll, , [4db9c9c74446cd6920ea6ddad52ef20e], 
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll, , [2bdbbed25a307eb876450381dd26e51b], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, , [3bcb315f107aa98dda99e26e8281cd33], 
PUP.Optional.Outbrowse, C:\Users\ViMa\AppData\Local\Temp\instrac.exe, , [d135aae6b6d470c64c8bcbbde41fb24e], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll, , [a95d95fb375387afcc4717387b88857b], 
PUP.Optional.CrimeWatch.A, C:\ProgramData\CrimeWatch\uninstall.exe, , [d23470208a0039fdcaa990a04ab86c94], 
PUP.Optional.CrimeWatch.A, C:\ProgramData\GSwkHYjPE\dat\ApWGBYJNLS.exe, , [34d2533d761438fe2b4820106999639d], 
PUP.Optional.ZombieInvasion.A, C:\ProgramData\GSwkHYjPE\dat\ROyWcsR.dll, , [cd3949475634092d3c2faa538e7732ce], 
PUP.Optional.CrimeWatch.A, C:\ProgramData\GSwkHYjPE\dat\ZUHSlmPv.exe, , [5caabdd3d1b9b680353e61cf907213ed], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, , [60a6c5cba1e98ea828635d5a748d9f61], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, , [0afccfc15d2d40f66e1df5c211f0956b], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, , [788eb4dceaa09e980c7fcaedb74a8977], 
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect64.dll, , [ec1a553b36547fb7acdf5a5dbf427d83], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\uninstall.exe, , [0ef8d2beb7d36ec84147aaa3e2248c74], 
PUP.Optional.1ClickMovieDownload.A, C:\$Recycle.Bin\S-1-5-21-130668294-1935915265-711181056-1001\$R4SDCC3.0\1ClickMovie-Download V9.0-firefoxinstaller.exe, , [30d62070fe8c043283de0a857091b947], 
PUP.Optional.1ClickMovieDownload.A, C:\$Recycle.Bin\S-1-5-21-130668294-1935915265-711181056-1001\$R4SDCC3.0\1ClickMovie-Download V9.0-bho64.dll, , [59ad2070d3b7e155eb76aae5ff029c64], 
PUP.Optional.1ClickMovieDownload.A, C:\$Recycle.Bin\S-1-5-21-130668294-1935915265-711181056-1001\$R4SDCC3.0\1ClickMovie-Download V9.0-buttonutil64.exe, , [9472c4cc0b7f1521f26fd1bebe435da3], 
PUP.Optional.InstallCore, C:\$Recycle.Bin\S-1-5-21-130668294-1935915265-711181056-1001\$RNRR8NO\uninstaller.exe, , [2adce6aa3d4df5412010401f7290c33d], 
PUP.Optional.Wajam.A, C:\$Recycle.Bin\S-1-5-21-130668294-1935915265-711181056-1001\$RY47WSC\uninstall.exe, , [9670454b0f7b5ed891f7c38a24e2936d], 
PUP.Optional.InstallCore.A, C:\Users\ViMa\AppData\Local\Temp\ICReinstall_nsgD959.tmp, , [5fa77e125337c5715b24d4cf986911ef], 
Trojan.Downloader, C:\Users\ViMa\AppData\Local\Temp\nsx8AEF.tmp, , [e620f997395181b58ec6b48aa95a12ee], 
PUP.Optional.Boost.A, C:\Users\ViMa\AppData\Local\Temp\131e3114-ca4a-4ce7-a490-a65acffd642c\boost_790001_0101.exe, , [f21495fb4842181e45903f0fdb253bc5], 
PUP.Optional.InstallCore, C:\Users\ViMa\AppData\Local\Temp\187360968.Uninstall\uninstaller.exe, , [91753759cebc72c482aec49b6b9738c8], 
PUP.Optional.SearchProtect.A, C:\Users\ViMa\AppData\Local\Temp\e538eac2-b104-4b76-a373-1319c8f613d2\sp-downloader.exe, , [53b3117f5b2f40f6b256d8db49b8ce32], 
PUP.Optional.MyStartTB.A, C:\Users\ViMa\AppData\Local\Temp\b9384ec5-59af-4fbd-a1fd-b1185d0a2246\mystarttb_5.4.1.4_sambamedia.exe, , [ef179df3afdb7fb767e53441ca3720e0], 
PUP.Optional.SearchHijacker.A, C:\Users\ViMa\AppData\Local\Temp\LIL5AB1.tmp\bdo_istartsurf.exe, , [01057f11a3e7171f4c8ee2ed1fe2ae52], 
PUP.Optional.OneMoreGame.A, C:\Users\ViMa\AppData\Local\Temp\LIL5AB2.tmp\OneMoreGame.exe, , [a0660b8504865adc0e64327fb74afa06], 
PUP.Optional.Wajam.A, C:\Users\ViMa\AppData\Local\Temp\LIL5AE0.tmp\wajam_install.exe, , [40c6721e9febcd696d8d1c4afc04e818], 
PUP.Optional.SearchHijacker.A, C:\Users\ViMa\AppData\Local\Temp\LIL9F66.tmp\bdo_istartsurf.exe, , [9670aee22169f5417169ce01649d827e], 
PUP.Optional.OneMoreGame.A, C:\Users\ViMa\AppData\Local\Temp\LIL9FD3.tmp\OneMoreGame.exe, , [10f62d6393f7e4523c3658596b9608f8], 
PUP.Optional.Wajam.A, C:\Users\ViMa\AppData\Local\Temp\LILA988.tmp\wajam_install.exe, , [d4321d73fd8db0862ad0f96d8c7458a8], 
PUP.Optional.WebBar.A, C:\Users\ViMa\AppData\Local\Temp\LILD38F.tmp\Web_Bar_Setup.exe, , [d72f5e323e4c3bfbf6b988b68082e51b], 
PUP.Optional.VeriBrowse.A, C:\Users\ViMa\AppData\Local\Temp\LILD3BE.tmp\CheckMeUp.exe, , [ce3892fe2c5e48eeb7b73ff91de56f91], 
PUP.Optional.Boost.A, C:\Users\ViMa\AppData\Local\Temp\LILD42B.tmp\boost_880001_0101.exe, , [a95daae67e0c4ee8c51026285da357a9], 
PUP.Optional.Wajam.A, C:\Users\ViMa\AppData\Local\Temp\LILD489.tmp\wajam_install.exe, , [42c4345c018941f5b3d5be8f8d79f10f], 
PUP.Optional.MixVideoPlayer.A, C:\Users\ViMa\AppData\Local\Temp\f1a18433-d863-4a7e-b5ea-5593b1e59ccd\mixvideoplayersetup.exe, , [4fb7840c95f5f54114f40b6587797f81], 
PUP.Optional.AnyProtect.A, C:\Users\ViMa\AppData\Local\Temp\is45637729\222628753_stp\AnyProtectScannerSetup.exe, , [a5619bf58109b77ff5d2ca827f872cd4], 
PUP.Optional.MyPCBackup.A, C:\Windows\Temp\tmpE734.tmp, , [09fd860ab6d4c67032e8fcfab54c14ec], 
PUP.Optional.Bundlore.C, C:\Users\Marvin\Downloads\Setup (10).exe, , [a660cfc1503a3ff7e427df59c73bc13f], 
PUP.Optional.Bundlore.C, C:\Users\Marvin\Downloads\Setup (1).exe, , [060039577b0f75c121ea5cdc38ca34cc], 
PUP.Optional.Bundlore.C, C:\Users\Marvin\Downloads\Setup (2).exe, , [48be424e5a302f076f9c4fe913ef1ee2], 
PUP.Optional.Bundlore.C, C:\Users\Marvin\Downloads\Setup (3).exe, , [e026ff91632750e6020962d65da546ba], 
PUP.Optional.Bundlore.C, C:\Users\Marvin\Downloads\Setup (8).exe, , [769089079febdb5b35d61028c1416c94], 
PUP.Optional.Bundlore.C, C:\Users\Marvin\Downloads\Setup (9).exe, , [7f87e4ac34561c1ab7540c2cb74bf010], 
PUP.Optional.InstallCore.SID.A, C:\Users\ViMa\Downloads\adobe_flash_setup(1).exe, , [ec1a652b206a96a06602a8a563a3c63a], 
PUP.Optional.InstallCore.SID.A, C:\Users\ViMa\Downloads\adobe_flash_setup.exe, , [18ee226ea0ea6cca83e5f05d13f3639d], 
PUP.Optional.SmartBar, C:\Users\ViMa\AppData\Local\LPT\LPTInstaller.msi, , [d234f39d5634a0960754c798c04048b8], 
PUP.Optional.WebBar.A, C:\Users\Marvin\AppData\Local\WebBar\wb.log, , [887e4d436525e056c8dbc904689b48b8], 
PUP.Optional.WebBar.A, C:\Users\Marvin\AppData\Local\WebBar\wb.app.settings, , [887e4d436525e056c8dbc904689b48b8], 
PUP.Optional.WebBar.A, C:\Users\Marvin\AppData\Local\WebBar\wb.user.history, , [887e4d436525e056c8dbc904689b48b8], 
PUP.Optional.WebBar.A, C:\Users\Marvin\AppData\Local\WebBar\wb.user.settings, , [887e4d436525e056c8dbc904689b48b8], 
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar\wb.log, , [f80e09871476191d8b18dfee0201c53b], 
PUP.Optional.PastaLeads.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_nps.pastaleads.com_0.localstorage, , [8383b6da1b6fef4713fc33a09d666c94], 
PUP.Optional.PastaLeads.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_nps.pastaleads.com_0.localstorage-journal, , [a4621977800a4ee80d028a49ae557d83], 
PUP.Optional.Gambali.A, C:\Windows\Temp\Gambali.log, , [21e5a7e97614e4520943359f0102a45c], 
PUP.Optional.Gambali.A, C:\Users\ViMa\AppData\Local\Temp\Gambalir.log, , [fd0938583159ae88a5a8e7ed689b6a96], 
PUP.Optional.Gambali.A, C:\Windows\Temp\Gambalir.log, , [f90de5ab206ab1857cd1ca0a7a897e82], 
PUP.Optional.WebTInst.A, C:\Windows\System32\drivers\Msft_Kernel_webTinstMKTN_01009.Wdf, , [976fc1cf9bef30062504a72e57ace917], 
PUP.Optional.SelectNGo.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.selectgo00.selectgo.net_0.localstorage, , [c442f9975d2dd75f2dca7e5bde2514ec], 
PUP.Optional.SelectNGo.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.selectgo00.selectgo.net_0.localstorage-journal, , [8a7c028e7e0cc670c235d603dc277c84], 
PUP.Optional.Patsearch.A, C:\Windows\patsearch.bin, , [83837d13b8d21620f42ed40739ca1fe1], 
PUP.Optional.CrimeWatch.A, C:\ProgramData\CrimeWatch\uninstall.exe.config, , [66a01a76aae0d264f821fedf13f09a66], 
PUP.Optional.CrimeWatch.A, C:\ProgramData\CrimeWatch\CrimeWatch.ico, , [66a01a76aae0d264f821fedf13f09a66], 
PUP.Optional.SaveSense.A, C:\Windows\Tasks\SaveSense.job, , [22e4e5abb4d65bdbddfe865bdb28b14f], 
PUP.Optional.CrimeWatch.A, C:\Users\ViMa\AppData\Local\CrimeWatch\data2.dat, , [41c5c6ca335770c666bc7c68649fa957], 
PUP.Optional.Astromenda.A, C:\Windows\Tasks\WSE_Astromenda.job, , [5caa325e51396ec87ed2f6ee26dd40c0], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\unins000.dat, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\cfg.ini, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\EZ Software Updater.exe, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\unins000.exe, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\updateStatus.ini, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\lib\EZ Software Updater.dll, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.EZSoftware.A, C:\Program Files (x86)\EZ Software Updater\temp\response.ini, , [22e4fd938efcb383984a13d7699a9967], 
PUP.Optional.MyStart.A, C:\Users\ViMa\AppData\Local\Temp\mystart-toolbar.xml, , [c34399f7731753e3827bcf1b739051af], 
PUP.Optional.BetterDeals.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, , [64a2c6caed9d8da955d88e7344c056aa], 
PUP.Optional.BetterDeals.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, , [e71f464acbbf7cbaf4397f82ac58f50b], 
PUP.Optional.SelectNGo.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage, , [57afc2ced1b9a492598a8e749272e61a], 
PUP.Optional.SelectNGo.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, , [14f20c84c1c9999dc0236b9729dbaa56], 
PUP.Optional.LiveLyrics.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage, , [8086f39d31595ed85d992cd7ae5609f7], 
PUP.Optional.LiveLyrics.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage-journal, , [56b05a36beccea4c3fb704ffed1707f9], 
PUP.Optional.ShoppingGate.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage, , [e81e67292a6088ae0b429c69c3410df3], 
PUP.Optional.ShoppingGate.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage-journal, , [b551c3cde4a6f93d65e8ee17a95b5ca4], 
PUP.Optional.LiveLyrics.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage, , [1aec226ec2c8b581c7d350b5bb49ee12], 
PUP.Optional.LiveLyrics.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage-journal, , [f016345c5139fd39465450b57391946c], 
PUP.Optional.Iminent.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, , [bd490987d0babf7717f98a7d26de7888], 
PUP.Optional.Iminent.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, , [3cca9cf4ed9dbc7ac14f94739e660ef2], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0.localstorage, , [df27622e4941fd39254cc24940c4b749], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0.localstorage-journal, , [2adc424eb4d6a88e650c7992ba4a17e9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0.localstorage, , [8086cfc14e3c1224e19096758e765ea2], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0.localstorage-journal, , [29ddf29e8bffe5514031868538ccf010], 
PUP.Optional.Iminent.A, C:\Program Files (x86)\Common Files\Umbrella\Umbrella_bkp.exe, , [d2340e8257334fe75cbd11fe7094ed13], 
PUP.Optional.Iminent.A, C:\Program Files (x86)\Common Files\Umbrella\Umbrella_upd.exe, , [b74fb7d9b1d930068f8af31c6c98ac54], 
PUP.Optional.1ClickMovieDownload.A, C:\Windows\Tasks\1ClickMovie-Download V9.0-chromeinstaller.job, , [e026c3cdfe8c83b3ce3132e2788c4bb5], 
PUP.Optional.1ClickMovieDownload.A, C:\Windows\Tasks\1ClickMovie-Download V9.0-codedownloader.job, , [b254325ec7c30d2937c853c11aea40c0], 
PUP.Optional.1ClickMovieDownload.A, C:\Windows\Tasks\1ClickMovie-Download V9.0-enabler.job, , [42c45c34503a1e18b649041022e233cd], 
PUP.Optional.1ClickMovieDownload.A, C:\Windows\Tasks\1ClickMovie-Download V9.0-firefoxinstaller.job, , [a75fa1efb6d4a5919d620014689c9967], 
PUP.Optional.1ClickMovieDownload.A, C:\Windows\Tasks\1ClickMovie-Download V9.0-updater.job, , [bb4b424e3e4c48ee59a68f85ad5744bc], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\PublisherSettings.xml, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\NewConfig.txt, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Smartbar.Personalization.Common.dll, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\sppsm.dll, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\spusm.dll, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\srptm.exe.config, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\srut.dll, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\UserSettings.xml, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\XMLOperations.xml, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Configs\BrowserSettings.xml, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Configs\LPTMapping.xml, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Configs\Timers.xml, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.Linkury.A, C:\Users\ViMa\AppData\Local\LPT\Resources\LPT.xml, , [a2642d63880205313c95c94c54b05ca4], 
PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log\eGdpSvc.LOG, , [fc0ae1af95f50c2a4c777f985ba99868], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\GuidCreator.dll, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\Installer.exe.config, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioData.xml, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\TVData.xml, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1001276787.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1032580196.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1049633276.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1087330818.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\10910262.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1104610067.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1147580050.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1163213760.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1204718153.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\121835881.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\122472738.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1230328089.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1298762877.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1310107020.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1326063932.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1345014714.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1349390236.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1369710219.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3063365749.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3064150577.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3082581872.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\309514462.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3120382369.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3122142557.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3165264072.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3182409528.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3184054012.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3187131776.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4108659329.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4111842662.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4124855599.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4156122664.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4160168922.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4162666780.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4180019228.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\42509276.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4258041623.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\426489121.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4289669010.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\439796844.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\446498293.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\462705098.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\502425151.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2538400399.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2540923269.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2558778520.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2571747616.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2583444921.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2587409586.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2590608011.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2591439044.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2612287955.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2628037879.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2653061757.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1669310521.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1679097045.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\168641980.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1758576778.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1761620300.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1772830074.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\179336091.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1804880237.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1893260371.png, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1924605918.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1944064088.png, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1955680767.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2030579034.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2035413131.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2042360304.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2054100928.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3872957308.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3458352640.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3489211912.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3498988851.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3500507916.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\355292266.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3561459644.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3590131191.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3596627549.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3620542188.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3663645435.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3696038166.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3702168251.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3741228717.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3763336611.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3766425313.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3789643263.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2085154025.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2098956121.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2100782698.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2132085398.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2133340426.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2135235822.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2157068549.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2172383622.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2188799041.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\505295175.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\508462604.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\554680345.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\573901993.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\610494985.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\620039489.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\647184093.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\652777024.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\655303227.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1373235683.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1386532862.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1394199207.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1407761077.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1415894710.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1418938224.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1424569337.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1448618572.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1481822820.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1493636833.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1509927059.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\1517724479.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\154459894.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\155412559.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3813878146.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3814325319.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3823133617.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3823177572.png, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3835949179.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3837055614.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3847014217.png, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3855687987.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3856427893.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3862616577.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3864747753.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2675558977.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2710200799.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\273527147.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2751319937.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2776020400.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2787724300.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2797249473.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2842060987.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\285939796.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2931527065.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2952973582.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2984351418.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3033724325.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3042219480.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\319401273.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3232831230.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3233771152.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3250796059.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3282864392.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3308340081.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3329535649.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\333136190.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3353459484.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3369034760.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3383800463.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3386776517.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3423014897.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3453891725.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3885036774.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3887458186.png, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3890543285.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3944243447.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3966688001.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3970689814.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3976347681.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\3994114319.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\40007619.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4032896534.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4040521507.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4047869151.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\4059135308.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\735399138.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\765389517.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\767227599.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\768979132.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\788754019.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\876609851.png, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\881006563.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\90069336.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\90299962.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\918057842.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\953710841.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2197254446.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2237253885.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2299189749.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2314318620.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2319664488.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2351760750.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2352788679.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2434806465.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2448178934.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2527570036.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Temp\smartbar\RadioTVIcons\2538377536.gif, , [8383b9d7f892bf77f2468a93d2326898], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage, , [a75f78186c1e92a4b0802926b154ec14], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pelmeidfhdlhlbjimpabfcbnnojbboma_0.localstorage-journal, , [7b8bc2ce04860c2a141c59f68c7908f8], 
PUP.Optional.Iminent.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.iminent.com_0.localstorage, , [90768c04d3b7dc5a482d351a8b7a31cf], 
PUP.Optional.Iminent.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_search.iminent.com_0.localstorage-journal, , [93731779454547ef3d38e26d17ee09f7], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost\Boost.ico, , [b74f078948423df92c880a469075d828], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost\Boost.exe, , [b74f078948423df92c880a469075d828], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost\Boosti.dll, , [b74f078948423df92c880a469075d828], 
PUP.Optional.Boost.A, C:\Program Files (x86)\Boost\uninstall.exe, , [b74f078948423df92c880a469075d828], 
PUP.Optional.DigitalSites.A, C:\Windows\Tasks\Digital Sites.job, , [c6401c7436542313b2d5d187c73e8f71], 
PUP.Optional.Vitruvian.A, C:\Users\ViMa\AppData\Local\Temp\vitruvian-installer-install-v0001, , [d432f898b1d92e08b3415dfb8283a957], 
PUP.Optional.Vitruvian.A, C:\Users\ViMa\AppData\Local\Temp\vitruvian-installer-processes-v0001, , [9a6c315f5733cd69e60e5ff9867f847c], 
PUP.Optional.Vitruvian.A, C:\Users\ViMa\AppData\Local\Temp\vitruvian-installer-softwareregkeys-v0001, , [9571642ce2a822148371e177f70e8b75], 
PUP.Optional.Vitruvian.A, C:\Users\ViMa\AppData\Local\Temp\vitruvian-installer-uninstall-v0001, , [778f93fd028838fe658fb8a05aab966a], 
PUP.Optional.IStartSurf.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage, , [897d543c0f7ba78ff32795c744c1ac54], 
PUP.Optional.IStartSurf.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage-journal, , [52b42868791176c08595b1ab0104f40c], 
PUP.Optional.ReMarkable.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, , [e224464a474384b241e05906679e19e7], 
PUP.Optional.ReMarkable.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, , [f115b2de99f184b270b109562ed7b947], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\crossriderManifest.json, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\background.html, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\chromeCoreFilesIndex.txt, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\manifest.json, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\popup.html, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\manifest.xml, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins.json, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\207_dbWrapper.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1000020_analytics.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1000025_analyticsFront.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1000030_mz.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\13_CrossriderAppUtils.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\14_CrossriderUtils.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\177_crossriderDashboard.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\17_jQuery.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\180_bpo_serp_m.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\182_openUrl.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\183_tabsWrapper.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\19_CHAppAPIWrapper.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1_base.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\21_debug.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\22_resources.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\28_initializer.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\47_resources_background.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\4_jquery_1_7_1.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\64_appApiMessage.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\72_appApiValidation.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\78_CrossriderInfo.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\80_CHPopupAppAPI.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\97_resourceApiWrapper.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode\background.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode\extension.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\icon128.png, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\icon16.png, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\icon48.png, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\actions\1.png, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\background.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\main.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\platformVersion.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\chrome.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\cookie.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\message.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\monitor.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\pageAction.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\pageActionBG.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\app_api.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\bg_app_api.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\consts.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\cookie_store.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\crossriderAPI.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\delegate.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\events.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\extensionDataStore.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\installer.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\logFile.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\logging.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\onBGDocumentLoad.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\reports.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\storageWrapper.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\updateManager.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\util.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\xhr.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource\newPopup.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource\popup.js, , [ca3cf0a0e8a22d09639b431c2dd851af], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\crossriderManifest.json, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\background.html, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\chromeCoreFilesIndex.txt, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\manifest.json, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\popup.html, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\manifest.xml, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins.json, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\207_dbWrapper.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1000020_analytics.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1000025_analyticsFront.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1000030_mz.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\13_CrossriderAppUtils.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\14_CrossriderUtils.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\177_crossriderDashboard.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\17_jQuery.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\180_bpo_serp_m.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\182_openUrl.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\183_tabsWrapper.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\19_CHAppAPIWrapper.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\1_base.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\21_debug.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\22_resources.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\28_initializer.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\47_resources_background.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\4_jquery_1_7_1.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\64_appApiMessage.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\72_appApiValidation.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\78_CrossriderInfo.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\80_CHPopupAppAPI.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\plugins\97_resourceApiWrapper.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode\background.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\extensionData\userCode\extension.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\icon128.png, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\icon16.png, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\icon48.png, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\icons\actions\1.png, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\background.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\main.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\platformVersion.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\chrome.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\cookie.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\message.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\monitor.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\pageAction.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\api\pageActionBG.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\app_api.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\bg_app_api.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\consts.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\cookie_store.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\crossriderAPI.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\delegate.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\events.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\extensionDataStore.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\installer.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\logFile.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\logging.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\onBGDocumentLoad.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\reports.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\storageWrapper.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\updateManager.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\util.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\xhr.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource\newPopup.js, , [e521fc94107a93a3ffff203ff411c53b], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphjehcgndcjccmghmjmeeabfecdiilm\1.26.12_0\js\lib\popupResource\popup.js, , [e521fc94107a93a3ffff203ff411c53b],
         

Alt 05.05.2015, 14:56   #9
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Code:
ATTFilter
PUP.Optional.MultiPlug.A, C:\Users\ViMa\AppData\Roaming\9A71C85D-1428686857-78A7-5658-952CB992DEA7\vnsx144D.tmp, , [0402890774160d29d832d789040102fe], 
PUP.Optional.MultiPlug.A, C:\Users\ViMa\AppData\Roaming\9A71C85D-1428686857-78A7-5658-952CB992DEA7\Uninstall.exe, , [0402890774160d29d832d789040102fe], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\crossrider_statusbar.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\button1.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\button2.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\button3.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\button4.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\button5.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\icon128.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\icon16.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\icon24.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\icon48.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\panelarrow-up.png, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\popup.html, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\skin.css, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\skin\update.css, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome.manifest, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\install.rdf, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\background.html, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\baseObject.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\browser.xul, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\dialog.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\ffCoreFilesIndex.txt, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\main.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\options.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\options.xul, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\platformVersion.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\search_dialog.xul, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\asyncDB.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\background.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\browserAction.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\contextMenu.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\dbManager.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\dom_bg.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\fileManager.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\firefox.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\firefoxNotifications.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\firefoxOmnibox.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\message.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\pageAction.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\request.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\tabs.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\webRequest.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\api\windowsMessagingHandler.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\addressBarChangeObserver.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\console.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\consts.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\delegate.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\extensionDataStore.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\folderIOWrapper.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\httpObserver.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\IDBWrapper.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\installer.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\logFile.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\prefs.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\progressListenerObserver.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\registry.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\reloadObserver.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\reports.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\requestObject.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\searchSettings.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\uninstallObserver.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\updateManager.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\utils.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\chrome\content\core\xhr.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\defaults\preferences\prefs.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\manifest.xml, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins.json, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\47_resources_background.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\1000020_analytics.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\1000025_analyticsFront.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\1000030_mz.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\102_dealply_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\13_CrossriderAppUtils.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\14_CrossriderUtils.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\16_FFAppAPIWrapper.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\177_crossriderDashboard.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\178_revizer_ws_dynamic_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\179_revizer_p_dynamic_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\17_jQuery.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\180_bpo_serp_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\182_openUrl.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\183_tabsWrapper.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\184_noproblemppc_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\1_base.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\207_dbWrapper.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\21_debug.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\220_icm_base_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\221_icm_downloads_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\223_imonomy_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\4_jquery_1_7_1.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\64_appApiMessage.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\72_appApiValidation.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\78_CrossriderInfo.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\7_hooks.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\91_monetizationLoader.js.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\98_omniCommands.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\9_search_engine_hook.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\226_set_campaign_id_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\22_resources.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\234_firstoffer_right_slider_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\246_setup.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\253_pixel_inject.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\273_aedgency_back_button_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\281_ibario_tier3_pops_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\28_initializer.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\345_pluginsVerticals.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\354_categories.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\376_loaderBackup.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\385_jollywallet_new_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\390_50pops_new_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\plugins\391_50intext_new_m.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\userCode\background.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\extensionData\userCode\extension.js, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com\locale\en-US\translations.dtd, , [0ef829678802d75f1af2eb751bea37c9], 
PUP.Optional.Browser.A, C:\ProgramData\Browser\prompt.exe.config, , [927418788cfec0763630a7ba957060a0], 
PUP.Optional.MyStartTB.A, C:\Users\ViMa\AppData\Local\Temp\mystarttb_Install_Log.txt, , [fb0bd3bd107aa492d1dfea77669f9967], 
PUP.Optional.MyStartTB.A, C:\Users\ViMa\AppData\Local\Temp\mystarttb_Uninstall_Log.txt, , [4fb7f59b8a008bab1799e978d72e23dd], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\dat.dat, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D10\netengine.exe, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D10\netengine.exe.config, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D10\sqlite3.dll, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D4\netengine.exe, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D4\netengine.exe.config, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D4\sqlite3.dll, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D5\netengine.exe, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D5\netengine.exe.config, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D5\sqlite3.dll, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D6\netengine.exe, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D6\netengine.exe.config, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D6\sqlite3.dll, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D6\time.dat, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D7\netengine.exe.config, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D7\sqlite3.dll, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D9\netengine.exe, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D9\netengine.exe.config, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.NetEngine.A, C:\ProgramData\NetEngine\bin\D9\sqlite3.dll, , [e32399f7305ae155a9855a08c441d12f], 
PUP.Optional.Mindspark, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe, , [cf37355b305a42f46cd6024f02036c94], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancerService.exe, , [8e780c8432588fa75210d6f8d42f51af], 
PUP.Optional.Iminent.A, C:\Program Files (x86)\Iminent\WinkHandler.exe, , [56b070208ffb8fa765e77e9e2bd9f40c], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\BrowserHelper.exe.config, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\DomainBlackList.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Interop.SHDocVw.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Microsoft.mshtml.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Common.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.ExceptionHandling.Logging.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Microsoft.Practices.EnterpriseLibrary.Logging.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Microsoft.Practices.ObjectBuilder.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\NewConfig.txt, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\RegAsm.exe, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\sb.host.json, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Smartbar.exe.config, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\SmartbarInstallationIcon.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\SmartbarInternetExplorerBHO2.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\SmartbarShortcutIcon.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.config, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\IEButton.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\sppsm.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\spusm.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\srut.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\System.Data.SQLite.dll, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\XMLOperations.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.html, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\manifest.json, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.htm, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.html, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.html, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS\border.css, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fb.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fblike.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\gmail.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\google.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\googleplus.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\left.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\mgsplusvideo.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\pinit.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\right.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\searchBox.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\twitter.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\alxbl.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\BackPageRemove.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\defaultBlockList.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\documentEvents.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\externalJS.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\FBImagePreview.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\filters.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\generalBackButtonDetection.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\InternalJS.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\jquery-1.9.0.min.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\PluginWrapper.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\publisherDefinitions.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\ta.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\tabReload.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\TopFrameJS.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\trans.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper128.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper16.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper48.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Configs\QueryParameters.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\Configs\XmlSideBySideProtocol.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome.manifest, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\install.rdf, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\BackPageRemove.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\externalJS.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FBImagePreview.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.css, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.xul, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\InternalJS.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\jquery-1.5.1.min.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\publisherDefinitions.js, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fb.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fblike.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\gmail.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\googleplus.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\left.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\mgsplusvideo.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\pinit.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\right.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\searchBox.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\twitter.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper128.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper16.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper_small.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\ISmartbarFireFoxRemotePlugin.xpt, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\Configs\UserInfo.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8f.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367D.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2B.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cd.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212E.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29B.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png, , [877fe8a867230135c3f3b4e51ce716ea],
         

Alt 05.05.2015, 15:03   #10
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



.. der zweite und der dritte Abschnitt sind glaube ich die gleichen... also es geht weiter.....

Code:
ATTFilter
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02AHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02APress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9F.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FD.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBE.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066B.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1.PNG, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1HOVER.PNG, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1PRESS.PNG, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EAB.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367D.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2B.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cd.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212E.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29B.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BC.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aef.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefPress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FHover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.ico, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056press.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\youtube.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\youtubehover.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\Common\iconsWide\youtubepress.png, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Configs\IconsSettings.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Configs\LocalMethods.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Configs\ProfileManager.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Configs\PublisherSettings.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Configs\UserSettings.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.SmartBar.A, C:\Users\ViMa\AppData\Local\Smartbar\DistributionFiles\Profiles\3C6BEA24-8B0E-4EDE-82EC-536F56750CD5.xml, , [877fe8a867230135c3f3b4e51ce716ea], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\eng_rcp.dat, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\German_rcp.dat, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_03-29-2014.log, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_04-08-2015.log, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_10-12-2013.log, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_10-13-2013.log, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.RegCleanerPro.A, C:\Users\Marvin\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp, , [17efc2ce5436c76f260f7723bd4627d9], 
PUP.Optional.SaveSense, C:\ProgramData\SaveSenseLive\Update\Log\SaveSenseLive.log, , [5caad1bf008a0432b3584853ec178977], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense\UpdateProc\config.dat, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense\UpdateProc\info.dat, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense\UpdateProc\STTL.DAT, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\SaveSense\UpdateProc\TTL.DAT, , [ab5bb9d7addda29494783b60ae552fd1], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\SaveSense Help.url, , [c541424eb1d91e181bf2118aba4902fe], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\SaveSense.url, , [c541424eb1d91e181bf2118aba4902fe], 
PUP.Optional.SaveSense, C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\Uninstall SaveSense.lnk, , [c541424eb1d91e181bf2118aba4902fe], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\Autorun.inf, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\crx.tar, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\GameApps.ini, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\GameConsole.exe, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\GameEngine.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\GLOBALUNINSTALL.TNT, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\hmac.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\iestage2.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\IEToolbar.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\IEToolbar64.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\INSTALL.TNT, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\log.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\MinecraftShims64.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\npTNT2.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\PARTNER.TNT, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\passport.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\passport64.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\pinnedSearch.htm, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\pinnedSearch_FindWide.htm, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\pinnedSearch_Freshy.htm, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\progress.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\regsvr.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\RemoteSkin.wms, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\sqlite.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\tnt2chrome.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\tnt2chrome64.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\TNT2User.exe, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\TNT2UserPS.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\TNT2UserPS64.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\TntMagicDel.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\UnInjLib.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\UnInjLib64.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\UNINSTALL.TNT, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\UninstallDlg.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\untar.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\UPDATE.TNT, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\xpi.tar, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.TidyNetwork.A, C:\Users\ViMa\AppData\Local\TNT2\2.0.0.1966\zipunzip.1.dll, , [b84e424e0882ea4c7218c4d7f310dd23], 
PUP.Optional.1ClickMovieDownload.A, C:\Users\Marvin\AppData\LocalLow\1ClickMovie-Download V9.0\DTFProxyToServerSect_bCrossriderApp0051382_p3304.dat, , [aa5c8907e8a296a01d356a33fd06a25e], 
PUP.Optional.1ClickMovieDownload.A, C:\Users\Marvin\AppData\LocalLow\1ClickMovie-Download V9.0\DTFProxyToServerSect_bCrossriderApp0051382_p7844.dat, , [aa5c8907e8a296a01d356a33fd06a25e], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\background.html, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\index.html, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\jump.html, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\manifest.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\bookmarks.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\searchButton.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\classification.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\del.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\main.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\selected.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloud.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudApp.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudWebsite.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\createWebsite.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\buttonBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\categoryBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\icons.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchButton.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchLeft.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\selected.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\tabsBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin\headerBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\extensions.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\gameCenter.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star_bg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\time.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\guide.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\lastVisited.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\notice.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\played.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\search.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\google-new-logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon2.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\setup.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\dialBoxStyle.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\icons.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oBookmarks.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oDownloads.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oExtensions.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oHistory.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oNewtab.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\cloudWallpaper.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\skins.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\categoryBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\delete.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\download.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\icons.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\loading.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\weather.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css\style.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\logo.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\line.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\locationIcon.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\searchButton.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\weather.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css\all.css, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\game.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_128.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_16.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_48.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\NEW.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\shopping.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\weather.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\webstore.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\default.jpg, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\iconsprite.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\idialog_s.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\ios5_button.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\left.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading.gif, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading2.gif, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\qBoxBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg0.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left0.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right0.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\right.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\selected.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\titleBg.png, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\all.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\background.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\ga.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jq.mobi.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jump.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\pop.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\redirect.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\xagainit.js, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW\messages.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.QuickStart.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata\verified_contents.json, , [0cfaa9e79dedd264033f8619a85b8080], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSense\icon.ico, , [f90dcec24d3d8bab46159d02996ad927], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSense\installer_icon.ico, , [f90dcec24d3d8bab46159d02996ad927], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSense\SaveSense.xpi, , [f90dcec24d3d8bab46159d02996ad927], 
PUP.Optional.SaveSense.A, C:\Users\Marvin\AppData\Local\SaveSense\SaveSenseIE64.dll, , [f90dcec24d3d8bab46159d02996ad927], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zhtmlmu.dll, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zmsg.dll, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zPlugin.dll, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zskin.dll, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\BOOTSTRAP.JS, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\CHROME.MANIFEST, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\CREXT.DLL, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\CrExtP4z.exe, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\INSTALL.RDF, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\installKeys.js, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\LOGO.BMP, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\T8HTML.DLL, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\T8TICKER.DLL, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\chrome\4zffxtbr.jar, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\ThirdPartyInstallers\VDC_Silent.exe, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\gen1\COMMON.T8S, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\IE9Mesg\COMMON.T8S, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\Message\COMMON.T8S, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\VideoDownloadConverter_4z\bar\Settings\s_pid.dat, , [5ea8bdd3a4e62d0927176d33cf34de22], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0\1, , [b650d8b8ee9c8caa78a15052c83b42be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gphjehcgndcjccmghmjmeeabfecdiilm_0\1, , [00060a86791170c655c4e1c15ea56997], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\000425.ldb, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\000427.ldb, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\000431.log, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\CURRENT, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\LOCK, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\LOG, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\LOG.old, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\MANIFEST-000413, , [58aeade3afdbb28426f8d7cbb94abe42], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\000154.log, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\000155.ldb, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\CURRENT, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\LOCK, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\LOG, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\LOG.old, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gphjehcgndcjccmghmjmeeabfecdiilm\MANIFEST-000072, , [59ad5b354b3f55e145d9abf7b35042be], 
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo\sqlite3.exe, , [11f549470e7c89ad8790b7f047bc05fb], 
PUP.Optional.Yontoo.A, C:\Users\ViMa\AppData\Roaming\Yontoo\PlugIns.cache, , [689ed6ba3456de58c94f3d6a7192a759], 
PUP.Optional.Yontoo.A, C:\Users\ViMa\AppData\Roaming\Yontoo\dat\Desktop.OS.dll, , [689ed6ba3456de58c94f3d6a7192a759], 
PUP.Optional.Yontoo.A, C:\Users\ViMa\AppData\Roaming\Yontoo\dat\HeartBeat.dat, , [689ed6ba3456de58c94f3d6a7192a759], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\04629DC5, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462A0A3, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462ADE2.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462AE8E.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462AEFB.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462AF49.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462AF97.cab, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B0C0.cab, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B1AB.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B228.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B266.cab, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B302.cab, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B3BE.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B43B.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B4A8.cab, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B564.cab, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B6BB.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B729.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B7A6.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B97B.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B9B9.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\0462B9F8.bmp, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Cache\files.ini, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\History\search3, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\bar\Settings\prevcfg2.htm, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\VideoDownloadConverter_4z\Cache\PopupProperties210425027.html, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\VideoDownloadConverter_4z\Cache\Radio.html, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\LocalLow\VideoDownloadConverter_4z\VideoDownloadConverter_4z\Cache\VideosBtn.html, , [0cfa424e6228a49211a6218646bdd12f], 
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, , [b254c7c9cebc122480133e6dc34007f9], 
PUP.Optional.Updater.A, C:\Users\Marvin\AppData\Roaming\DigitalSites\UpdateProc\config.dat, , [49bdeca4c2c884b222812c841fe436ca], 
PUP.Optional.Updater.A, C:\Users\Marvin\AppData\Roaming\DigitalSites\UpdateProc\info.dat, , [49bdeca4c2c884b222812c841fe436ca], 
PUP.Optional.Updater.A, C:\Users\Marvin\AppData\Roaming\DigitalSites\UpdateProc\prod.dat, , [49bdeca4c2c884b222812c841fe436ca], 
PUP.Optional.Updater.A, C:\Users\Marvin\AppData\Roaming\DigitalSites\UpdateProc\STTL.DAT, , [49bdeca4c2c884b222812c841fe436ca], 
PUP.Optional.Updater.A, C:\Users\Marvin\AppData\Roaming\DigitalSites\UpdateProc\TTL.DAT, , [49bdeca4c2c884b222812c841fe436ca], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcp110.dll, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\msvcr110.dll, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WindowsSupportDll32.dll, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WindowsSupportDll64.dll, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\bk_shadow.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\btn.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\close.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\main.xml.bak, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\ck_box.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\ck_check.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\radio_bk.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\skin\image\radio_check.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit-ie8.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit2.0.js, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, , [9e68751b187239fd538e921ed231e917], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, , [9e68751b187239fd538e921ed231e917],
         

Alt 05.05.2015, 15:06   #11
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Code:
ATTFilter
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\background.html, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\manifest.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\newtab.html, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\opentab.html, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\comp.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\phone-frame.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\phone.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\0-mobile.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\0.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\1-mobile.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\1.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\2-mobile.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\2.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\3-mobile.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\3.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\4-mobile.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\4.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\5-mobile.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\facebook\images\carousel\screenshots\5.jpg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\data\gallery.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\9gag.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\afterDownload.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\aim.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\aim_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\amazon.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\apple.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\app_store.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\arto.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\aws.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\baidu.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\basecamp.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\bebo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\behance.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\bing.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blogger.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\bnter.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\brightkite.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\cinch.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\cloudapp.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\coroflot.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\creative_commons.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\dailybooth.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\delicious.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\designbump.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\designfloat.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\designmoo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\deviantart.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\digg.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\digg_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\diigo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\dribbble.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\dropbox.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\drupal.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\dzone.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\ebay.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\ember.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\etsy.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\evernote.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\expedia.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\facebook.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\facebook_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\facebook_places.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\facto.me.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\feedburner.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\flickr.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\folkd.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\formspring.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\forrst.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\foursquare.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\foxtab.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\friendfeed.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\friendster.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\funmoods.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\gdgt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\github.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\github_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\gmail.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\goodreads.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\google-drive.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\google.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\google_buzz.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\google_talk.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\gowalla.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\gowalla_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\grooveshark.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\hacker_news.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\hi5.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\hype_machine.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\hyves.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\icq.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\identi.ca.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\installCore.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\instapaper.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\ironSource.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-bizcards.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-confluence.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blip.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\gameo.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\last.fm.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\msn_messenger.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\picassa.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\retweet.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\squarespace.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\tumblr.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-facebook.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-googleplus.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-jira.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-linkedin.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-news.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-presence.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-signature.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\iS-twitter.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\itunes.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\jira.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\kik.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\krop.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\linkedin.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\linkedin_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\livejournal.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\lovedsgn.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\meetup.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\metacafe.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\ming.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\mister_wong.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\mixx.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\mixx_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\mobileCore.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\mobileme.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\myspace.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\myspace_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\netflix.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\newsvine.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\noaa.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\nytimes.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\official.fm.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\openid.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\orkut.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\pandora.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\path.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\paypal.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\photobucket.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\picasa.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\pinboard.in.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\ping.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\pingchat.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\playstation.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\plixi.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\plurk.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\podcast.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\posterous.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\qik.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\quik.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\quora.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\rdio.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\readernaut.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\reddit.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\robo.to.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\rss.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\salesforce.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\scribd.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\sharethis.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\simplenote.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\skype.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\slashdot.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\slideshare.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\smugmug.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\soundcloud.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\spotify.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\squidoo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\steam.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\stumbleupon.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\technorati.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\theweatherchannel.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\threewords.me.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\trello.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\tribe.net.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\tripadvisor.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\tripit.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\tweaks-soft.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\twitter.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\twitter_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\vcard.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\viddler.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\vimeo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\virb.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\w3.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\weatherbug.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\whatsapp.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\wikipedia.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\windows.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\wists.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\wordpress.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\wordpress_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\xing.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\yahoo!_buzz.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\yahoo!_messenger.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\yahoo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\yelp.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\youtube.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\youtube_alt.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\zerply.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\zootool.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\zynga.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\amazon.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\bestbuy.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\kmart.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\newegg.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\overstock.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\samsung.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\target.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\gallery\images\blackfriday\wallmart.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather\images\clock-icon-small-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather\images\clock-icon-small.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather\images\cloud-icon-small-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather\images\cloud-icon-small.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather\images\icons-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\app\spots\weather\images\icons.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\css\jquery-ui-1.10.3.custom.min.css, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\css\newtab.css, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\css\normalize.css, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\css\opentab.css, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\css\opentab_global.css, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\close-btn.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\close_80x80.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\default-image-grey.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\default-image.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\default-image.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\powered-by-google.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\about\spotsbeta.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\apps\android-white.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\apps\download.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\apps\star.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\apps\star_full.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\add.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\chrome_apps.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\menu-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\profile.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\recently.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\search.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\searchb.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\clean\sms.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\discovery\arrow-down-active.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\discovery\arrow-down.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\discovery\discovery_facebook.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\add-item-icon-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\add-item-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\arrow-down.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\arrow-up.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\edit-item-icon.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\new-tab.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\plus-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\plus-white.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\favorites\remove-item-icon.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\ftue\arrow-up.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\ftue\ftue-finish-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\ftue\ftue-phone.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\ftue\search-bar.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\128.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\16.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\48.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\arrow-down.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\logo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\v-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\whitelogo.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\x-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\pageAction\19x19.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\pageAction\19x19b.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\pageAction\38x38.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\icons\pageAction\38x38b.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\image-upload\computer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\image-upload\screenshot1.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\image-upload\screenshot2.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\image-upload\screenshot3.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\image-upload\screenshot4.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\image-upload\warning.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\loaders\loader.swf, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\loaders\loader_white.swf, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications\birthday-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications\birthday.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications\dismiss-icon-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications\dismiss-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications\event-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications\event.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\notifications\minimize.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\em-clean.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\!.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\android-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\android.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\call-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\call.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\close-chat-clean.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\close-chat.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\contact-default-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\contact-default.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\contact-opacity.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\hangup-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\hangup-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\hangup.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\phone-welcome-dismiss-icon-clean.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\phone-welcome-dismiss-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\phone_icon-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\phone_icon.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\phone_preview-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\phone_preview.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\search-call-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\search-call-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\search-call.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\search-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\search.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\sms-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\sms-clean.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\phone\sms.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\plane.gif, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\rating-star.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\cat\cat_1.gif, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\cat\cat_2.gif, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\cat\cat_3.gif, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\cat\cat_4.gif, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\review-gifs\cat\cat_5.gif, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\bookmark-icon-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\bookmark-icon-white.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\calculator-icon-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\calculator-icon-white.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\hangup.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\navigation-icon-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\navigation-icon-white.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\phone_preview.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\plus-dark-sm.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\remove-dark-sm.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\search-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\search-icon-black.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\search-icon-white.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\search.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\sms.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\web-result-icon-black.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\search\web-result-icon-white.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\bubbles\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\bubbles\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\bubbles\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\buttons\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\buttons\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\buttons\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\city\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\city\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\city\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\clean\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\disco\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\disco\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\disco\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\fishing\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\fishing\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\fishing\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\forest\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\forest\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\forest\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\mountains\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\mountains\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\mountains\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\planets\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\planets\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\planets\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sea\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sea\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sea\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\space\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\space\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\space\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\strips\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\strips\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\strips\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sunset\bg.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sunset\footer.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\themes\sunset\thumb.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\user\login.svg, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\img\user\menu-icon.png, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\js\background.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\js\bootstrap.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\js\newtab.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\js\opentab.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\jquery.inview.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\aes.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\angular-animate.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\angular-route.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\angular.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\async.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\aws-sdk-2.0.0-rc9.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\eventsource.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\idbstore.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\jquery-2.1.1.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\jquery-ui-1.10.3.custom.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\js-canvas-to-blob.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\lodash.underscore.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\md5.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\mixins.loadash.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\moment-with-langs.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\moment.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\phoneformat.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\sortable.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\TweenMax.min.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\lib\utils.js, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_de.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_en.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_es.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_fr.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_he.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_it.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_ja.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_nl.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_pl.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_pt.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_ru.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\locales\i18n_tr.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\ar\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\de\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\en\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\es\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\fr\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\he\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\it\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\ja\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\nl\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\pl\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\pt_BR\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\ru\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_locales\tr\messages.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.Astromenda, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae\0.3.7_0\_metadata\verified_contents.json, , [56b0c6ca9eec3bfbc3dff0c3ea19fb05], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\alert.json, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\dtx.ini, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\geodata.xml, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\guid.dat, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\log.txt, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\preferences.dat, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\stats.dat, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\uninstallIE.dat, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\version.xml, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\chrome\content\widgets\net.vmn.www.alexa\AlexaAppEULA.txt, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\coupons\merchants.txt, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.MyStart.C, C:\Users\Marvin\AppData\LocalLow\mystarttb\coupons\notifications.dat, , [be482769a7e349ed3ef97c4d40c3f808], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\amazon.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\argos.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\ask.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\bestbuy.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\ebay.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\etsy.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\facebook.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\favicon.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\google.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\homedepot.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\ikea.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\imdb.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\lowes.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\mercado.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\mysearchweb.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\myshopping.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\searchresult.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\sears.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\setting.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\settings.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\shopping.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\target.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\tesco.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\tripadvisor.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\twitter.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\wajam.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\walmart.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\wiki.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\yahoo.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\Logos\zalando.ico, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\FiddlerCore.dll, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\081f1d2115d5383fe8acc8f528ed12fd, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\132082b4c49ca1b5f905d576d5968e11, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\1c938f209ca26d36c4b9aecd24567df0, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\3de2d599ca6b16bba66f5997035b2b4e, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\5f90602133322219d5f47116bb1d0f5c, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\8588c642b0c19a56ad7042332c11eefa, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\ade31f6157b1191c0694163b53436059, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\ApiHandlr.dll, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\b59c315998b0644fbf085441cd758719, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\d7cb23d54c92e35cfef2e811eeeedd7b, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\e1033610f1a8db5eed17e980b112678a, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\e555e5f23f285898678671dc4287ca6a, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\eda6ed062511a236e1d61b27a1b6fdd8, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\HtmlAgilityPack.dll, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\InternetEnhancer.exe, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\lan-proxy-settings.dat, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\makecert.exe, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\Newtonsoft.Json.dll, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\WHttpServer.exe, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\wie, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.Wajam.A, C:\Program Files (x86)\WaNetworkEnhance\WaNetworkEnhance Internet Enhancer\WJManifest, , [63a3abe5f8923bfbcf719534877c629e], 
PUP.Optional.MyPCBackup.A, C:\Program Files (x86)\MyPC Backup\DEL_InstMgr.dll, , [8e787b158307280e5d3708c291720bf5], 
PUP.Optional.MyPCBackup.A, C:\Program Files (x86)\MyPC Backup\DEL_UnRegisterExtensions.exe, , [8e787b158307280e5d3708c291720bf5],
         

Alt 05.05.2015, 15:11   #12
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Code:
ATTFilter
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\manifest.json, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\buildVars.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\config.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\contentScript.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\contentScript.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\extension_toolbar_api.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\initWidgetWindow.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\options.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\spent.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\spent.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\spent.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\superFrame.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\toolbar.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\toolbar.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\toolbarUI.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\toolbarUI.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\toolbarUI.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\native\ce.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\native\ss.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\native\libs\jquery-1.7.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\native\libs\jquery-1.9.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\adapter\adapterUtil.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\adapter\widget-adapter.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\abstractbutton\background\abstractButton.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\alert\background\alertButton.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml\background\embedHtmlWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml\html\embedHtmlTemplate.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedhtml\js\embedHtmlUI.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript\background\embedScriptWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript\html\embedScriptTemplate.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\embedscript\js\embedScriptUI.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\flare\background\FlareWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\flare\icons\Icon_Flare_blue.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\flare\icons\Icon_Flare_pink.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\flare\icons\Thumbs.db, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\generic\background\GenericWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\link\background\linkButton.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\README.txt, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\background\menuButton.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\css\menuframe.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\html\menuframe.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\images\right_arrow.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\images\right_arrow_white.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\js\jquery-1.7.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\js\menuframe.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\js\query-string.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\menu\js\underscore-1.3.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\rss\background\RssWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\thirdparty\background\thirdPartyWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\uninstall\background\uninstallButton.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\components\weather\background\weatherButton.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\bs.30.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\common.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\dynamic.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\enableDetect.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\eventListening.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\global.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\jquery-1.7.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\list-interaction.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\messageEventListener.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\navRedirector.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\paramReplacer.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\PartnerId.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\set.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\underscore-1.3.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\underscore-1.5.2.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\js\unifiedLogging.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widget-context-1.0.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\common\common.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\common\eventListening.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\common\list-interaction.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\common\set.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\radio-widget.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\css\radio-widget.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\js\radio-custom.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\js\radio-parser.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\radio\js\radio-widget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\rss\rssWidget.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\rss\js\rss-widget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\invalid.json, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\jquery.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\qunit.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\qunit.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\resource.json, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\resource.xml, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\testWidget.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\test\testWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps\widget.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps\css\widget.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps\js\topapps-config.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\topapps\js\widget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\weather\weatherButton.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\weather\css\weatherButton.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\common\widget-api\widgets\weather\js\weather.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\background\ApiBasedWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\background\widget-api-impl.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\window\hiddenWidgetWindow.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\window\hiddenWidgetWindow.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\window\hiddenWidgetWindowInit.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\window\widgetWindow.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\api\window\widgetWindow.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\background\updateSearch.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\background\updateSearchPromptBg.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\07_buttons2.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\08_buttons2.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\defaultSearchModal.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\tvf_btn_ok.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\tvf_btn_ok2.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\tvf_restart_icon.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\defaultSearch\foreground\updateSearchPromptFg.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\background\MovieReviewsWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\css\movieReviews.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\html\movieReviews.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\moviereviews\js\movieReviews.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\background\RadioWidget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\css\toolbar-item.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\foreground\button.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\radioWrapper\radioWrapper.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\radio\radioWrapper\radioWrapper.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search\background\searchBox.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search\html\searchSuggestions.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search\html\searchSuggestions.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search\html\searchSuggestions.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\search\html\searchSuggestionsInit.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\css\supertab.css, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\html\supertab.html, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\js\newtabfork.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\js\reporting.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\js\srchsugg.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\js\supertab.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\js\unifiedLogging.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\components\supertab\js\__utm.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons\arrowSprite.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons\icon128.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons\icon16.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons\icon19disabled.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons\icon19on.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons\icon48.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\icons\tb_icon_search_disappearing_ask.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\222118240.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\222118243.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\222118283.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\down_arrow.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\IDR_PRODUCT_LOGO_16.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\IDR_WEBSTORE_ICON.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\magnifying_glass.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\RadioPlayerSprite.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\search_button.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\tvf_icon_guide.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\tvf_logo.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\images\wrench.png, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\options.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\chromeUtils.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\exeManager.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\exePackageManager.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\focusManager.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\globalBlacklistManager.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\messaging.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\mutation_summary-min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\mutation_summary.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\newTabInfo.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\newTabInitialize.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\readLocalStorage.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\reservespacefortoolbar.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\reservespaceifenabled.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\scriptInjector.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\searchContext.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\settingsOverrides.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\toolbarCookieParser.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\toolbarPreinit.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\underscore-1.3.1.min.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\URILoaderContentScript.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\Widget.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\widgetFactory.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\js\widgetWindowManager.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\shared\HttpURL.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\shared\rsvp-latest.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\shared\unifiedLogging.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\shared\universalConsole.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\shared\utils.js, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\_metadata\computed_hashes.json, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.Mindspark.A, C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcncagkkhfoombgbihckkccmkjemhohl\10.83.4.65173_0\_metadata\verified_contents.json, , [8f770b85e1a97db9f3b293bba264c63a], 
PUP.Optional.CrossRider.A, C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14cacc2d112dbb114f48f77075fc5a53");), ,[a1655f317d0d22145e5d0c4659aded13]

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         
Soo: mbam wäre geschafft..

Jetzt AdwCleaner..AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v4.203 - Bericht erstellt 05/05/2015 um 15:28:11
# Aktualisiert 30/04/2015 von Xplode
# Datenbank : 2015-05-02.1 [Server]
# Betriebssystem : Windows 8.1  (x64)
# Benutzername : ViMa - SPIELEPC
# Gestarted von : G:\AdwCleaner_4.203.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Classes\CLSID\{93a3111f-4f74-4ed8-895e-d9708497629e}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Iminent
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Reimage
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\eFix
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\FlashBeat
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\WebBar
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PriceMeterLiveUpdate.exe
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mystart.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\searchgol.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\trovi.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\MyStart
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\Suche
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:49184;hxxps=127.0.0.1:49184
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:49184;hxxps=127.0.0.1:49184
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17416

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v37.0.2 (x86 de)

[o69g4g9h.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.crossrider.bic", "14cacc2d112dbb114f48f77075fc5a53");

-\\ Google Chrome v42.0.2311.135

[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.tb.ask.com/search/GGmain.jhtml?searchfor={searchTerms}&st=kwd&ptb=E6843904-F30F-40F4-9743-EEBC322145F6&n=780baef2&ind=2014031602&p2=^AYY^xdm099^YYA^de&si=flvrunner
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : pfkfdlcdbajamklbneflfbcmfgddmpae
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : gcncagkkhfoombgbihckkccmkjemhohl
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Homepage] : hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Startup_URLs] : hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D
[C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Default_Search_Provider_Data] : hxxp://search.iminent.com/?appId=A09D6D8A-6150-45C5-9567-9DAF59F88C7D&ref=toolbox&q={searchTerms}
[C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
[C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
[C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : jpmbfleldcgkldadpdinhjjopdfpjfjp
[C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma
[C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : pfkfdlcdbajamklbneflfbcmfgddmpae

*************************

AdwCleaner[R0].txt - [48881 Bytes] - [05/05/2015 15:04:20]
AdwCleaner[R1].txt - [9368 Bytes] - [05/05/2015 15:27:14]
AdwCleaner[S0].txt - [33703 Bytes] - [05/05/2015 15:05:15]
AdwCleaner[S1].txt - [7213 Bytes] - [05/05/2015 15:28:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [7272  Bytes] ##########
         
--- --- ---

JRT..

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.6.7 (04.30.2015:1)
OS: Windows 8.1 x64
Ran by ViMa on 05.05.2015 at 15:31:10,62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks

Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1001
Successfully deleted: [Task] C:\WINDOWS\system32\tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1004



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511131182}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511131182}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131182}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}



~~~ Files

Successfully deleted: [File] C:\WINDOWS\launcher.exe
Successfully deleted: [File] C:\WINDOWS\wininit.ini
Successfully deleted: [File] C:\WINDOWS\prefetch\MYSTART TOOLBAR UNINSTALL.EXE-D4906684.pf
Successfully deleted: [File] C:\WINDOWS\prefetch\TOOLBARUNINSTALL.EXE-09ABF3AE.pf



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\t122078ed
Successfully deleted: [Folder] C:\Users\ViMa\AppData\Roaming\0f1f1c2y1h1p1c0i0t



~~~ FireFox

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\4zffxtbr@videodownloadconverter_4z.com
Emptied folder: C:\Users\ViMa\AppData\Roaming\mozilla\firefox\profiles\o69g4g9h.default\minidumps [2 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.05.2015 at 15:33:25,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Und das neue FRST


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by ViMa (administrator) on SPIELEPC on 05-05-2015 15:34:23
Running from C:\Users\ViMa\Downloads
Loaded Profiles: ViMa (Available profiles: ViMa & Marvin)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2012-10-25] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-20] (IDT, Inc.)
HKLM-x32\...\Run: [APSDaemon] => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM-x32\...\Run: [PSUAMain] => "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe" /LaunchSysTray
HKLM-x32\...\Run: [Panda Security URL Filtering] => C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe [235072 2013-09-26] (Visicom Media Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\SysWOW64\userinit.exe,
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-06-14] (Electronic Arts)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [OneMoreGame] => C:\Users\ViMa\AppData\Roaming\OneMoreGame\OMG.exe
Startup: C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-03-23]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
SearchScopes: HKLM -> {601378E2-9B03-4BFF-9464-15CB05450964} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
BHO: 1ClickMovie-Download V9.0 -> {11111111-1111-1111-1111-110511131182} -> C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-bho64.dll No File
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll [2013-10-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll [2013-10-09] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-03-30] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-28] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-10-31] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Extension: 1ClickMovie-Download V9.0 - C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\Extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com [2015-04-12]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-09]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_9cc478a794064cd3958fba97c101aeae_39_1006_20131117_DE_cr_sp_
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-16]
CHR Extension: (Google Drive) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-16]
CHR Extension: (Kaspersky Protection) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-08-31]
CHR Extension: (YouTube) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-16]
CHR Extension: (Adblock Plus) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-05]
CHR Extension: (Google Search) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-16]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-08-31]
CHR Extension: (Bookmark Manager) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-16]
CHR Extension: (Gmail) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-16]
CHR Extension: (Anti-Banner) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-08-31]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2014-05-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-23] (Electronic Arts)
S2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-11-20] (IDT, Inc.) [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S2 NanoServiceMain; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe" [X]
S2 PSUAService; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-05-28] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-05-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-05-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-05] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [91368 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [122088 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [109288 2013-05-29] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [95464 2013-05-29] (Panda Security, S.L.)
S4 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [69864 2013-05-29] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [119016 2013-05-29] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [305896 2013-05-29] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [118504 2013-05-29] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [246504 2013-05-29] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [106216 2013-05-29] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [169192 2013-10-17] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [122600 2013-10-11] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [206056 2013-10-11] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124648 2013-10-11] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [137960 2013-10-11] (Panda Security, S.L.)
S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [105704 2013-10-11] (Panda Security, S.L.)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [58808 2013-04-29] (Panda Security, S.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 15:34 - 2015-05-05 15:34 - 00022094 _____ () C:\Users\ViMa\Downloads\FRST.txt
2015-05-05 15:34 - 2015-05-05 15:34 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1001
2015-05-05 15:31 - 2015-05-05 15:31 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-SPIELEPC-Windows-8.1-(64-bit).dat
2015-05-05 15:31 - 2015-05-05 15:31 - 00000000 ____D () C:\RegBackup
2015-05-05 15:30 - 2015-05-05 15:31 - 02716306 _____ (Thisisu) C:\Users\ViMa\Downloads\JRT.exe
2015-05-05 15:03 - 2015-05-05 15:28 - 00000000 ____D () C:\AdwCleaner
2015-05-05 15:03 - 2015-05-05 15:03 - 02204160 _____ () C:\Users\ViMa\Downloads\AdwCleaner_4.203.exe
2015-05-05 14:59 - 2015-05-05 14:59 - 00577233 _____ () C:\mbam.txt
2015-05-05 14:23 - 2015-05-05 15:29 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-05 14:23 - 2015-05-05 14:23 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-05 14:23 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-05-05 14:23 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-05 14:23 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-05-05 14:20 - 2015-05-05 14:21 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\ViMa\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-05 14:13 - 2015-05-05 14:13 - 00000000 ____D () C:\Users\ViMa\Documents\Trojanerentfernung
2015-05-05 14:10 - 2015-05-05 14:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-05 12:59 - 2015-05-05 12:59 - 00001242 _____ () C:\Users\ViMa\Desktop\Revo Uninstaller.lnk
2015-05-05 12:59 - 2015-05-05 12:59 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-05-05 07:45 - 2015-05-05 15:34 - 00000000 ____D () C:\FRST
2015-05-05 07:44 - 2015-05-05 07:44 - 02101248 _____ (Farbar) C:\Users\ViMa\Downloads\FRST64.exe
2015-05-03 11:11 - 2015-05-03 11:12 - 00000000 ____D () C:\Users\ViMa\Documents\3 Bücher Mai 2015 von Antje
2015-04-28 15:06 - 2015-04-28 15:06 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\de.klett.vokabeltrainer.fairway1
2015-04-28 14:40 - 2015-04-28 14:53 - 00000000 ____D () C:\Users\ViMa\Documents\4 eBooks April 2015 von Alexa
2015-04-27 15:26 - 2015-04-27 15:26 - 00000000 ____D () C:\ProgramData\Radio
2015-04-27 15:19 - 2015-04-27 15:19 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-27 14:53 - 2015-04-27 14:53 - 00000000 ___RD () C:\Users\ViMa\AppData\Roaming\Brother
2015-04-21 20:21 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-21 20:21 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-21 20:19 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-21 20:19 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-21 20:19 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-21 20:19 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-21 20:19 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-21 20:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-21 20:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-21 20:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-21 20:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-21 20:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-21 20:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-21 20:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-21 20:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-21 20:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-21 20:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-21 20:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-21 20:18 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-21 20:18 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-21 20:18 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-21 20:18 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-21 20:18 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-21 20:18 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-21 20:18 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-21 20:18 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-21 20:18 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-21 20:18 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-21 20:18 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-21 20:18 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-21 20:18 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-21 20:18 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-21 20:17 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-21 20:17 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-16 17:26 - 2015-04-16 17:26 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\ViMa\Downloads\SpyHunter-installer.exe
2015-04-16 17:20 - 2015-04-16 17:20 - 01124544 _____ (Adobe Systems Incorporated) C:\Users\ViMa\Downloads\flashplayer17_ha_install.exe
2015-04-13 19:13 - 2015-04-13 19:14 - 01055936 _____ (Adobe) C:\Users\ViMa\Downloads\install_flashplayer17x32_mssd_aaa_aih.exe
2015-04-13 18:29 - 2015-04-13 18:29 - 00003080 _____ () C:\WINDOWS\System32\Tasks\{3A837A3D-F1C7-40E3-BA35-24BB805104C6}
2015-04-13 18:21 - 2015-04-13 18:21 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Macromedia
2015-04-13 10:58 - 2015-04-13 10:58 - 00002138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-04-13 08:28 - 2015-04-13 08:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\vlc
2015-04-10 20:09 - 2015-04-27 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-10 20:09 - 2015-04-10 20:09 - 00001133 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00001121 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\ProgramData\Mozilla
2015-04-10 20:04 - 2015-04-10 20:05 - 00000000 ____D () C:\SMCLpav
2015-04-10 19:31 - 2015-04-13 09:37 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694270-78A7-5658-952CB992DEA7
2015-04-10 19:31 - 2015-04-10 19:35 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694289-78A7-5658-952CB992DEA7
2015-04-10 19:30 - 2015-04-13 10:35 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2015-04-10 19:30 - 2015-04-13 10:31 - 00000000 ____D () C:\ProgramData\4af3ee1bd8a5465f9237a5be8ea89eb9
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\ProgramData\64115d5071b54724a8d5f67e50237428
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD489.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD45A.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD44B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD42B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD41C.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3FD.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3ED.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3BE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3AE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD38F.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD370.tmp
2015-04-10 19:24 - 2015-04-10 19:24 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (3).exe
2015-04-10 19:24 - 2015-04-10 19:24 - 00000000 ____D () C:\bbc1dd1a-6d91-49f5-8f3a-4cdb431f7251
2015-04-10 19:22 - 2015-04-10 19:22 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (2).exe
2015-04-10 14:41 - 2015-04-10 14:42 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-10 14:41 - 2015-04-10 14:41 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-09 17:36 - 2015-04-09 17:36 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Steam
2015-04-09 15:57 - 2015-04-09 15:57 - 00001875 _____ () C:\Users\Marvin\Desktop\Brother DCP-J4110DW Printer - Verknüpfung.lnk
2015-04-09 15:50 - 2015-04-09 15:50 - 00000000 ___RD () C:\Users\Marvin\AppData\Roaming\Brother
2015-04-08 17:59 - 2015-04-08 17:59 - 00381059 _____ () C:\Users\ViMa\Downloads\Lind, Hera - Himmel und Hoelle.epub
2015-04-08 16:43 - 2015-04-08 16:43 - 00000000 ____D () C:\Users\ViMa\AppData\Local\calibre-cache
2015-04-08 16:42 - 2015-05-03 11:19 - 00000000 ____D () C:\Users\ViMa\Documents\Calibre-Bibliothek
2015-04-08 16:42 - 2015-04-08 17:59 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\calibre
2015-04-08 16:42 - 2015-04-08 16:42 - 00000934 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2015-04-08 16:40 - 2015-04-08 16:41 - 64266240 _____ () C:\Users\ViMa\Downloads\calibre-2.23.0.msi
2015-04-08 15:56 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-04-08 15:56 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-04-08 11:24 - 2015-04-08 13:56 - 00001426 _____ () C:\Users\Marvin\Desktop\Registry kostenlos entrümpeln!.lnk
2015-04-07 17:19 - 2015-04-07 17:19 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Steam
2015-04-06 20:30 - 2015-04-06 20:30 - 11236528 _____ (Adobe Systems, Inc.) C:\Users\ViMa\Downloads\flashplayer15_sa_win_32.exe
2015-04-06 20:30 - 2015-04-06 20:30 - 00001625 _____ () C:\Users\ViMa\Desktop\Install Flash Player Update.lnk
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\GSwkHYjPE

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-05 15:33 - 2013-12-18 21:13 - 00000000 __RDO () C:\Users\ViMa\SkyDrive
2015-05-05 15:30 - 2013-10-09 11:37 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-05 15:29 - 2014-06-09 10:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-05-05 15:29 - 2014-03-02 16:21 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-05 15:29 - 2013-12-18 19:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-05 15:29 - 2013-12-18 19:51 - 01582343 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-05 15:29 - 2013-08-22 16:46 - 00354072 _____ () C:\WINDOWS\setupact.log
2015-05-05 15:29 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-05 15:11 - 2013-11-14 00:18 - 00182014 _____ () C:\WINDOWS\PFRO.log
2015-05-05 15:09 - 2014-03-02 16:21 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-05 15:05 - 2013-12-18 19:56 - 00000000 ____D () C:\Users\ViMa
2015-05-05 15:05 - 2013-12-18 19:56 - 00000000 ____D () C:\Users\Marvin
2015-05-05 15:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-05 14:19 - 2015-03-23 20:15 - 00049152 ___SH () C:\Users\ViMa\Desktop\Thumbs.db
2015-05-05 14:18 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-05 14:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-05-05 14:07 - 2015-03-16 18:27 - 00000346 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForViMa.job
2015-05-05 14:00 - 2013-12-18 21:14 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{08C945B7-41E2-4286-95D2-206B129645C8}
2015-05-05 08:05 - 2013-11-14 09:27 - 01980934 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-05 08:05 - 2013-11-14 09:11 - 00841326 _____ () C:\WINDOWS\system32\perfh007.dat
2015-05-05 08:05 - 2013-11-14 09:11 - 00191558 _____ () C:\WINDOWS\system32\perfc007.dat
2015-05-04 08:26 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-05-04 07:54 - 2015-03-16 18:27 - 00003158 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForViMa
2015-05-03 11:35 - 2013-03-23 12:59 - 00000787 _____ () C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Daten und Verträge.website
2015-05-03 11:32 - 2015-03-15 12:13 - 00000000 ____D () C:\Users\ViMa\Documents\Klett
2015-05-03 10:58 - 2015-03-23 19:44 - 00026120 _____ () C:\WINDOWS\BRRBCOM.INI
2015-05-03 10:16 - 2014-03-02 16:21 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-03 09:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-28 14:38 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-27 16:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-04-27 16:37 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-27 15:19 - 2015-02-27 15:44 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-27 14:31 - 2015-03-23 17:54 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-27 14:31 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-27 14:30 - 2013-08-02 15:08 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-27 14:24 - 2013-03-28 13:53 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-21 20:17 - 2013-05-22 16:54 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2015-04-16 17:02 - 2014-06-08 10:29 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-16 17:02 - 2013-03-26 10:06 - 00000000 ____D () C:\ProgramData\Origin
2015-04-14 01:24 - 2015-02-23 17:51 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2015-02-23 17:51 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 10:58 - 2014-03-02 16:21 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-13 10:31 - 2013-03-23 18:51 - 00000000 ____D () C:\Users\ViMa\Documents\Euro Truck Simulator 2
2015-04-13 09:13 - 2013-03-23 12:41 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Packages
2015-04-13 07:57 - 2013-11-17 17:02 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-13 07:56 - 2013-11-17 17:00 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-04-13 07:56 - 2013-11-17 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-13 07:56 - 2013-05-20 17:17 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-12 08:18 - 2013-12-20 08:52 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{52F99032-B66B-452D-B6AA-618F42C9A45F}
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2015-04-10 14:18 - 2014-09-10 16:53 - 00259300 _____ () C:\WINDOWS\system32\ScanResults.xml
2015-04-10 13:45 - 2014-09-10 16:48 - 00000464 _____ () C:\WINDOWS\system32\ScannerSettings
2015-04-09 17:59 - 2013-03-23 18:53 - 00000000 ____D () C:\Users\Marvin\Documents\Euro Truck Simulator 2
2015-04-08 18:23 - 2013-12-28 10:11 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-08 15:06 - 2014-08-31 11:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\OneMoreGame
2015-04-07 17:13 - 2013-02-18 15:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-07 17:10 - 2013-10-31 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2015-04-07 17:10 - 2013-10-31 16:32 - 00000000 ____D () C:\Nexon
2015-04-07 17:09 - 2013-02-18 15:29 - 00000000 ____D () C:\ProgramData\Apple
2015-04-06 20:08 - 2013-08-22 16:44 - 00469296 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2013-10-11 12:27 - 2013-11-10 18:27 - 0000099 _____ () C:\Users\ViMa\AppData\Roaming\WB.CFG
2013-10-11 12:27 - 2013-11-10 18:27 - 0000006 _____ () C:\Users\ViMa\AppData\Roaming\WBPU-TTL.DAT
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Input.xml
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Settings.xml
2013-12-15 17:53 - 2013-12-15 17:53 - 0000000 _____ () C:\ProgramData\0x0304A000.sfl
2013-03-23 12:42 - 2013-03-23 12:42 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1296.dll


Some content of TEMP:
====================
C:\Users\Marvin\AppData\Local\Temp\NGMSetup.exe
C:\Users\ViMa\AppData\Local\Temp\6_Offer_11.exe
C:\Users\ViMa\AppData\Local\Temp\A27CD679-6AF1-04B0-581E-51828C046082.exe
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.dll
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.exe
C:\Users\ViMa\AppData\Local\Temp\eFixProPackage.exe
C:\Users\ViMa\AppData\Local\Temp\instrac.exe
C:\Users\ViMa\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\ViMa\AppData\Local\Temp\NGMDll.dll
C:\Users\ViMa\AppData\Local\Temp\NGMResource.dll
C:\Users\ViMa\AppData\Local\Temp\Quarantine.exe
C:\Users\ViMa\AppData\Local\Temp\ReimagePackage.exe
C:\Users\ViMa\AppData\Local\Temp\sp64126.exe
C:\Users\ViMa\AppData\Local\Temp\sqlite3.dll
C:\Users\ViMa\AppData\Local\Temp\unicows.dll
C:\Users\ViMa\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-03 09:58

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 06.05.2015, 07:39   #13
schrauber
/// the machine
/// TB-Ausbilder
 

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.05.2015, 09:42   #14
Hilfe0
 
Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Okay, hier die gewünschten Logs.. Bemerke jetzt keine Probleme mehr.
Danke!!

Code:
ATTFilter
sh=7E0FFB13A87978E2288193173C8D886D904AF22C ft=1 fh=bd2aa89770578999 vn="Variante von Win32/ReImageRepair.E evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\eFixProPackage.exe"
sh=37BCC7869BD50E6C06F45E89BE91C472D0F6F86B ft=1 fh=5985275ff36e6ea6 vn="Win32/InstallCore.PB evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\ICReinstall_nsa8F06.tmp"
sh=01698355C5DB7BF020C6167D8DC102F5F9CE6C20 ft=1 fh=1f2b097e2896618d vn="Variante von Win32/InstallCore.OD evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\ICReinstall_nsgD959.tmp"
sh=81C3FAE3EBEA34BCBA5B2DE1B488DB9564924268 ft=1 fh=c885d9550f13c307 vn="Variante von Win32/InstallCore.PO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\ICReinstall_nsp30A0.tmp"
sh=2A89769E61A8F466B645FE5384832B8F8CD36EAC ft=1 fh=a3e4354f5d3d68aa vn="Variante von Win32/InstallCore.WB evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\ICReinstall_nst673F.tmp"
sh=30036FC8DC43FC827F39CD5292407E90956D1A0C ft=1 fh=9b154b2f38d34ba1 vn="Variante von Win32/InstallCore.PL evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\ICReinstall_nsx570E.tmp"
sh=2FABD278B0E388A9DC7834AC9412DD94CAC9F31E ft=1 fh=afdd8b6557ec58c1 vn="Variante von Win32/OutBrowse.BA evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\instrac.exe"
sh=9C2B03A6125B2972DFDC793ADE7481041DDADC3B ft=1 fh=6c3709335541dde1 vn="Variante von Win32/Adware.ConvertAd.GI Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\nsfEF5A.tmp"
sh=81C3FAE3EBEA34BCBA5B2DE1B488DB9564924268 ft=1 fh=c885d9550f13c307 vn="Variante von Win32/InstallCore.PO evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\nsp30A0.tmp"
sh=30036FC8DC43FC827F39CD5292407E90956D1A0C ft=1 fh=9b154b2f38d34ba1 vn="Variante von Win32/InstallCore.PL evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\nsx570E.tmp"
sh=94EA6DE0BE94B71C43DE63ADCDDF257DA7927C6B ft=1 fh=1208c69ac750d5f3 vn="Variante von Win32/ReImageRepair.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\ReimagePackage.exe"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\uninstaller.exe.186719421"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\186553453.Uninstall\uninstaller.exe"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\186705718.Uninstall\uninstaller.exe"
sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\187360968.Uninstall\uninstaller.exe"
sh=9FA4C8373B410D13BB7C49B7D530914FAFC02018 ft=1 fh=b13f2ccb1f3866d5 vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\b9384ec5-59af-4fbd-a1fd-b1185d0a2246\mystarttb_5.4.1.4_sambamedia.exe"
sh=2EE07CA20DEF0E6DD0C5ABFFEAFF334B3298935D ft=1 fh=348ed94e011c46bd vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\e538eac2-b104-4b76-a373-1319c8f613d2\sp-downloader.exe"
sh=9BB5DA1193C359B33905BD5A6262F054D1FC6333 ft=1 fh=b158605ff611a8cd vn="Variante von MSIL/NewPlayer.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\f1a18433-d863-4a7e-b5ea-5593b1e59ccd\mixvideoplayersetup.exe"
sh=65F1F0D076FEC3A794F84FE5CB355E525054128E ft=1 fh=c3ad2ea4cdaf915e vn="Variante von Win32/InstallCore.YX evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\is45637729\1868693_stp\icc.dll"
sh=65F1F0D076FEC3A794F84FE5CB355E525054128E ft=1 fh=c3ad2ea4cdaf915e vn="Variante von Win32/InstallCore.YX evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\is45637729\1939030_stp\icc.dll"
sh=D8C8A345A2EE08A0E283E8EEC7A39E4AEDE1E0A1 ft=1 fh=5b3a9a23dbe51dfc vn="Win32/AnyProtect.E evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\is45637729\222628753_stp\AnyProtectScannerSetup.exe"
sh=65F1F0D076FEC3A794F84FE5CB355E525054128E ft=1 fh=c3ad2ea4cdaf915e vn="Variante von Win32/InstallCore.YX evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\is45637729\222628863_stp\icc.dll"
sh=6AF39292DF493EEA09433C13C1F68035555233DB ft=1 fh=6d64ee34e353875d vn="Variante von Win32/ELEX.CE evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\LIL5AB1.tmp\bdo_istartsurf.exe"
sh=78F5E86EA4961900AFDA0B643867D502CFCB749A ft=1 fh=c6f783e7397c7f7a vn="Win32/Wajam.K evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\LIL5AE0.tmp\wajam_install.exe"
sh=6AF39292DF493EEA09433C13C1F68035555233DB ft=1 fh=6d64ee34e353875d vn="Variante von Win32/ELEX.CE evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\LIL9F66.tmp\bdo_istartsurf.exe"
sh=78F5E86EA4961900AFDA0B643867D502CFCB749A ft=1 fh=c6f783e7397c7f7a vn="Win32/Wajam.K evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\LILA988.tmp\wajam_install.exe"
sh=E1855DFF8166ACBE0FD6738FBFF45577F9B3C6FA ft=1 fh=5b201f5aeded98cd vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\LILD370.tmp\ASIns.exe"
sh=36355A204672EC1FAF7C4AC14F167A1AAC3719E7 ft=1 fh=8901b930706bdb39 vn="Variante von Win32/Adware.AddLyrics.DX Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\LILD3BE.tmp\CheckMeUp.exe"
sh=DB36579CEE2BB022AFAAAB5625AB571CA7708986 ft=1 fh=cc65a8974c57c083 vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung" ac=I fn="C:\Users\ViMa\AppData\Local\Temp\LILD44B.tmp\ASPackage.exe"
sh=A61F2AB2BDA3DF4EA26FB96BFA4BAA4BEFA99E6A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\staged\c409d8d4c7f149b589c03166c6@da6820630d1c49f08cdd9f5.com\extensionData\plugins\28.js"
sh=C9D706420374877A0ABE4367811BBF67F10C075D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\staged\c409d8d4c7f149b589c03166c6@da6820630d1c49f08cdd9f5.com\extensionData\plugins\91.js"
sh=35F4A44673F080582259ED7B0978EC7CAC261674 ft=1 fh=c71c0011e30cf18b vn="Variante von Win32/InstallCore.LJ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\Downloads\PDFReaderSetup.exe"
sh=81657355B9306F36BAC0DE8A60D85C0584259BEC ft=1 fh=333c1f251135755e vn="Variante von Win32/ReImageRepair.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\ViMa\Downloads\ReimageRepair.exe"
sh=29E421AB9476F9D2E23DAC7CFDE8DD9EE9D0768A ft=1 fh=d53e88ba43d6b8ab vn="Win32/Distromatic.B evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[1]"
sh=29E421AB9476F9D2E23DAC7CFDE8DD9EE9D0768A ft=1 fh=d53e88ba43d6b8ab vn="Win32/Distromatic.B evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[2]"
sh=267314430770D6DB958A4027A704961A661D4360 ft=1 fh=eec02210e4dc78c3 vn="Variante von Win32/Distromatic.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-5[1]"
sh=29E421AB9476F9D2E23DAC7CFDE8DD9EE9D0768A ft=1 fh=d53e88ba43d6b8ab vn="Win32/Distromatic.B evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[1]"
sh=29E421AB9476F9D2E23DAC7CFDE8DD9EE9D0768A ft=1 fh=d53e88ba43d6b8ab vn="Win32/Distromatic.B evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[2]"
sh=267314430770D6DB958A4027A704961A661D4360 ft=1 fh=eec02210e4dc78c3 vn="Variante von Win32/Distromatic.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-5[1]"
sh=04A10342C1C3C198E3E114CD029A5E039C25395D ft=0 fh=0000000000000000 vn="Variante von MSIL/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Temp\tmpE734.tmp"
         
Code:
ATTFilter
Results of screen317's Security Check version 1.001  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky Internet Security   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Java 8 Update 40  
 Java version 32-bit out of Date! 
  Adobe Flash Player 	11.5.502.146 Flash Player out of Date!  
 Mozilla Firefox (37.0.2) 
 Google Chrome (42.0.2311.135) 
 Google Chrome (42.0.2311.90) 
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by ViMa (administrator) on SPIELEPC on 06-05-2015 10:37:38
Running from C:\Users\ViMa\Downloads
Loaded Profiles: ViMa (Available profiles: ViMa & Marvin)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.26.9\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2012-10-25] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-11-20] (IDT, Inc.)
HKLM-x32\...\Run: [APSDaemon] => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM-x32\...\Run: [PSUAMain] => "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe" /LaunchSysTray
HKLM-x32\...\Run: [Panda Security URL Filtering] => C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe [235072 2013-09-26] (Visicom Media Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\WINDOWS\SysWOW64\userinit.exe,
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-06-14] (Electronic Arts)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-130668294-1935915265-711181056-1001\...\Run: [OneMoreGame] => C:\Users\ViMa\AppData\Roaming\OneMoreGame\OMG.exe
Startup: C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2015-03-23]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-130668294-1935915265-711181056-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/?gws_rd=ssl
SearchScopes: HKLM -> {601378E2-9B03-4BFF-9464-15CB05450964} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-130668294-1935915265-711181056-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
BHO: 1ClickMovie-Download V9.0 -> {11111111-1111-1111-1111-110511131182} -> C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-bho64.dll No File
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2015-02-23] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-13] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-05-28] (Kaspersky Lab ZAO)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll [2013-10-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll [2013-10-09] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-03-30] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-13] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-28] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2013-10-31] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-23] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN)
FF Extension: 1ClickMovie-Download V9.0 - C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\Extensions\0f1ebb0b-873c-4137-a5f1-9b9ca2284997@1152da4e-8ec5-417f-9a4b-8c7bbf9cb4a4.com [2015-04-12]
FF Extension: Adblock Plus - C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-05-06]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-09]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-09]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p23_serp_cr_de_display?ie=UTF8&tagbase=bds-p23&tbrId=v1_abb-channel-23_9cc478a794064cd3958fba97c101aeae_39_1006_20131117_DE_cr_sp_
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-16]
CHR Extension: (Google Drive) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-16]
CHR Extension: (Kaspersky Protection) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-08-31]
CHR Extension: (YouTube) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-16]
CHR Extension: (Adblock Plus) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-05]
CHR Extension: (Google Search) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-16]
CHR Extension: (Kaspersky URL Advisor) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-08-31]
CHR Extension: (Bookmark Manager) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (Google Wallet) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-16]
CHR Extension: (Gmail) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-16]
CHR Extension: (Anti-Banner) - C:\Users\ViMa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-08-31]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2014-05-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-23] (Electronic Arts)
S2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-11-20] (IDT, Inc.) [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-07-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S2 NanoServiceMain; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe" [X]
S2 PSUAService; "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-05-28] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-05-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-05-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-05] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R1 NNSALPC; C:\Windows\system32\DRIVERS\NNSALPC.sys [91368 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\system32\DRIVERS\NNSHTTP.sys [122088 2013-05-29] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\system32\DRIVERS\NNSHTTPS.sys [109288 2013-05-29] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\system32\DRIVERS\NNSIDS.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\system32\DRIVERS\NNSPICC.sys [95464 2013-05-29] (Panda Security, S.L.)
S4 NNSPIHSW; C:\Windows\system32\DRIVERS\NNSPIHSW.sys [69864 2013-05-29] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\system32\DRIVERS\NNSPOP3.sys [119016 2013-05-29] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\system32\DRIVERS\NNSPROT.sys [305896 2013-05-29] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\system32\DRIVERS\NNSPRV.sys [118504 2013-05-29] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\system32\DRIVERS\NNSSMTP.sys [114920 2013-05-29] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\system32\DRIVERS\NNSSTRM.sys [246504 2013-05-29] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\system32\DRIVERS\NNSTLSC.sys [106216 2013-05-29] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\system32\DRIVERS\PSINAflt.sys [169192 2013-10-17] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [122600 2013-10-11] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\system32\DRIVERS\PSINKNC.sys [206056 2013-10-11] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [124648 2013-10-11] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\system32\DRIVERS\PSINProt.sys [137960 2013-10-11] (Panda Security, S.L.)
S3 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [105704 2013-10-11] (Panda Security, S.L.)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [58808 2013-04-29] (Panda Security, S.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-06 10:36 - 2015-05-06 10:36 - 00852630 _____ () C:\Users\ViMa\Downloads\SecurityCheck.exe
2015-05-06 10:36 - 2015-05-06 10:36 - 00000858 _____ () C:\Users\ViMa\Desktop\checkup.txt
2015-05-06 08:58 - 2015-05-06 08:58 - 02347384 _____ (ESET) C:\Users\ViMa\Downloads\esetsmartinstaller_deu.exe
2015-05-06 08:58 - 2015-05-06 08:58 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-05-05 15:35 - 2015-05-05 15:35 - 00049136 _____ () C:\Users\ViMa\Downloads\Addition.txt
2015-05-05 15:34 - 2015-05-06 10:37 - 00022572 _____ () C:\Users\ViMa\Downloads\FRST.txt
2015-05-05 15:34 - 2015-05-06 10:30 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-130668294-1935915265-711181056-1001
2015-05-05 15:31 - 2015-05-05 15:31 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-SPIELEPC-Windows-8.1-(64-bit).dat
2015-05-05 15:31 - 2015-05-05 15:31 - 00000000 ____D () C:\RegBackup
2015-05-05 15:30 - 2015-05-05 15:31 - 02716306 _____ (Thisisu) C:\Users\ViMa\Downloads\JRT.exe
2015-05-05 15:03 - 2015-05-05 15:28 - 00000000 ____D () C:\AdwCleaner
2015-05-05 15:03 - 2015-05-05 15:03 - 02204160 _____ () C:\Users\ViMa\Downloads\AdwCleaner_4.203.exe
2015-05-05 14:59 - 2015-05-05 14:59 - 00577233 _____ () C:\mbam.txt
2015-05-05 14:23 - 2015-05-05 15:29 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-05 14:23 - 2015-05-05 14:23 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-05 14:23 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-05-05 14:23 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-05 14:23 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-05-05 14:20 - 2015-05-05 14:21 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\ViMa\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-05 14:13 - 2015-05-05 14:13 - 00000000 ____D () C:\Users\ViMa\Documents\Trojanerentfernung
2015-05-05 14:10 - 2015-05-05 14:10 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-05 12:59 - 2015-05-05 12:59 - 00001242 _____ () C:\Users\ViMa\Desktop\Revo Uninstaller.lnk
2015-05-05 12:59 - 2015-05-05 12:59 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-05-05 07:45 - 2015-05-06 10:37 - 00000000 ____D () C:\FRST
2015-05-05 07:44 - 2015-05-05 07:44 - 02101248 _____ (Farbar) C:\Users\ViMa\Downloads\FRST64.exe
2015-05-03 11:11 - 2015-05-03 11:12 - 00000000 ____D () C:\Users\ViMa\Documents\3 Bücher Mai 2015 von Antje
2015-04-28 15:06 - 2015-04-28 15:06 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\de.klett.vokabeltrainer.fairway1
2015-04-28 14:40 - 2015-04-28 14:53 - 00000000 ____D () C:\Users\ViMa\Documents\4 eBooks April 2015 von Alexa
2015-04-27 15:26 - 2015-04-27 15:26 - 00000000 ____D () C:\ProgramData\Radio
2015-04-27 15:19 - 2015-04-27 15:19 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-27 14:53 - 2015-04-27 14:53 - 00000000 ___RD () C:\Users\ViMa\AppData\Roaming\Brother
2015-04-21 20:21 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-21 20:21 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-21 20:19 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-21 20:19 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-21 20:19 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-21 20:19 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-21 20:19 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-21 20:19 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-21 20:19 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-21 20:19 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-21 20:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-21 20:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-21 20:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-21 20:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-21 20:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-21 20:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-21 20:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-21 20:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-21 20:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-21 20:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-21 20:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-21 20:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-21 20:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-21 20:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-21 20:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-21 20:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-21 20:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-21 20:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-21 20:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-21 20:18 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-21 20:18 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-21 20:18 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-21 20:18 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-21 20:18 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-21 20:18 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-21 20:18 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-21 20:18 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-21 20:18 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-21 20:18 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-21 20:18 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-21 20:18 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-21 20:18 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-21 20:18 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-21 20:18 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-21 20:18 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-21 20:18 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-21 20:17 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-21 20:17 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-21 20:17 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-04-16 17:26 - 2015-04-16 17:26 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\ViMa\Downloads\SpyHunter-installer.exe
2015-04-16 17:20 - 2015-04-16 17:20 - 01124544 _____ (Adobe Systems Incorporated) C:\Users\ViMa\Downloads\flashplayer17_ha_install.exe
2015-04-13 19:13 - 2015-04-13 19:14 - 01055936 _____ (Adobe) C:\Users\ViMa\Downloads\install_flashplayer17x32_mssd_aaa_aih.exe
2015-04-13 18:29 - 2015-04-13 18:29 - 00003080 _____ () C:\WINDOWS\System32\Tasks\{3A837A3D-F1C7-40E3-BA35-24BB805104C6}
2015-04-13 18:21 - 2015-04-13 18:21 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Macromedia
2015-04-13 10:58 - 2015-04-13 10:58 - 00002138 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-04-13 08:28 - 2015-04-13 08:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\vlc
2015-04-10 20:09 - 2015-04-27 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-10 20:09 - 2015-04-10 20:09 - 00001133 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00001121 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Mozilla
2015-04-10 20:09 - 2015-04-10 20:09 - 00000000 ____D () C:\ProgramData\Mozilla
2015-04-10 20:04 - 2015-04-10 20:05 - 00000000 ____D () C:\SMCLpav
2015-04-10 19:31 - 2015-04-13 09:37 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694270-78A7-5658-952CB992DEA7
2015-04-10 19:31 - 2015-04-10 19:35 - 00000000 ____D () C:\Users\ViMa\AppData\Local\9A71C85D-1428694289-78A7-5658-952CB992DEA7
2015-04-10 19:30 - 2015-04-13 10:35 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2015-04-10 19:30 - 2015-04-13 10:31 - 00000000 ____D () C:\ProgramData\4af3ee1bd8a5465f9237a5be8ea89eb9
2015-04-10 19:30 - 2015-04-10 19:30 - 00000000 ____D () C:\ProgramData\64115d5071b54724a8d5f67e50237428
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD489.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD45A.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD44B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD42B.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD41C.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3FD.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3ED.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3BE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD3AE.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD38F.tmp
2015-04-10 19:25 - 2015-04-10 19:25 - 00000000 _____ () C:\LILD370.tmp
2015-04-10 19:24 - 2015-04-10 19:24 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (3).exe
2015-04-10 19:24 - 2015-04-10 19:24 - 00000000 ____D () C:\bbc1dd1a-6d91-49f5-8f3a-4cdb431f7251
2015-04-10 19:22 - 2015-04-10 19:22 - 00292728 _____ () C:\Users\Marvin\Downloads\Setup (2).exe
2015-04-10 14:41 - 2015-04-10 14:42 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-10 14:41 - 2015-04-10 14:41 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-09 17:36 - 2015-04-09 17:36 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Steam
2015-04-09 15:57 - 2015-04-09 15:57 - 00001875 _____ () C:\Users\Marvin\Desktop\Brother DCP-J4110DW Printer - Verknüpfung.lnk
2015-04-09 15:50 - 2015-04-09 15:50 - 00000000 ___RD () C:\Users\Marvin\AppData\Roaming\Brother
2015-04-08 17:59 - 2015-04-08 17:59 - 00381059 _____ () C:\Users\ViMa\Downloads\Lind, Hera - Himmel und Hoelle.epub
2015-04-08 16:43 - 2015-04-08 16:43 - 00000000 ____D () C:\Users\ViMa\AppData\Local\calibre-cache
2015-04-08 16:42 - 2015-05-03 11:19 - 00000000 ____D () C:\Users\ViMa\Documents\Calibre-Bibliothek
2015-04-08 16:42 - 2015-04-08 17:59 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\calibre
2015-04-08 16:42 - 2015-04-08 16:42 - 00000934 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2015-04-08 16:42 - 2015-04-08 16:42 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2015-04-08 16:40 - 2015-04-08 16:41 - 64266240 _____ () C:\Users\ViMa\Downloads\calibre-2.23.0.msi
2015-04-08 15:56 - 2014-04-16 01:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-04-08 15:56 - 2014-04-16 01:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-04-08 11:24 - 2015-04-08 13:56 - 00001426 _____ () C:\Users\Marvin\Desktop\Registry kostenlos entrümpeln!.lnk
2015-04-07 17:19 - 2015-04-07 17:19 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Steam
2015-04-06 20:30 - 2015-04-06 20:30 - 11236528 _____ (Adobe Systems, Inc.) C:\Users\ViMa\Downloads\flashplayer15_sa_win_32.exe
2015-04-06 20:30 - 2015-04-06 20:30 - 00001625 _____ () C:\Users\ViMa\Desktop\Install Flash Player Update.lnk
2015-04-06 20:30 - 2015-04-06 20:30 - 00000000 ____D () C:\ProgramData\GSwkHYjPE

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-06 10:30 - 2013-10-09 11:37 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-06 10:22 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-05-06 10:10 - 2014-03-02 16:21 - 00001136 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-06 10:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-06 09:56 - 2013-12-18 19:51 - 01654719 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-06 08:58 - 2015-03-16 18:27 - 00003158 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleForViMa
2015-05-06 08:58 - 2015-03-16 18:27 - 00000346 _____ () C:\WINDOWS\Tasks\HPCeeScheduleForViMa.job
2015-05-06 08:57 - 2013-12-18 21:14 - 00003926 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{08C945B7-41E2-4286-95D2-206B129645C8}
2015-05-06 08:56 - 2014-06-09 10:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-05-06 08:55 - 2013-12-18 21:13 - 00000000 ___DO () C:\Users\ViMa\SkyDrive
2015-05-06 08:54 - 2014-03-02 16:21 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-05 15:29 - 2013-12-18 19:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-05 15:29 - 2013-08-22 16:46 - 00354072 _____ () C:\WINDOWS\setupact.log
2015-05-05 15:29 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-05 15:11 - 2013-11-14 00:18 - 00182014 _____ () C:\WINDOWS\PFRO.log
2015-05-05 15:05 - 2013-12-18 19:56 - 00000000 ____D () C:\Users\ViMa
2015-05-05 15:05 - 2013-12-18 19:56 - 00000000 ____D () C:\Users\Marvin
2015-05-05 14:19 - 2015-03-23 20:15 - 00049152 ___SH () C:\Users\ViMa\Desktop\Thumbs.db
2015-05-05 14:18 - 2013-08-22 15:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-05 14:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-05-05 08:05 - 2013-11-14 09:27 - 01980934 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-05 08:05 - 2013-11-14 09:11 - 00841326 _____ () C:\WINDOWS\system32\perfh007.dat
2015-05-05 08:05 - 2013-11-14 09:11 - 00191558 _____ () C:\WINDOWS\system32\perfc007.dat
2015-05-04 08:26 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-05-03 11:35 - 2013-03-23 12:59 - 00000787 _____ () C:\Users\ViMa\AppData\Roaming\Microsoft\Windows\Start Menu\Daten und Verträge.website
2015-05-03 11:32 - 2015-03-15 12:13 - 00000000 ____D () C:\Users\ViMa\Documents\Klett
2015-05-03 10:58 - 2015-03-23 19:44 - 00026120 _____ () C:\WINDOWS\BRRBCOM.INI
2015-05-03 10:16 - 2014-03-02 16:21 - 00002157 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-03 09:51 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-28 14:38 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-04-27 16:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp
2015-04-27 16:37 - 2014-03-02 12:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-27 15:19 - 2015-02-27 15:44 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-27 14:31 - 2015-03-23 17:54 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-27 14:31 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-27 14:30 - 2013-08-02 15:08 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-27 14:24 - 2013-03-28 13:53 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-21 20:17 - 2013-05-22 16:54 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2015-04-16 17:02 - 2014-06-08 10:29 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-16 17:02 - 2013-03-26 10:06 - 00000000 ____D () C:\ProgramData\Origin
2015-04-14 01:24 - 2015-02-23 17:51 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2015-02-23 17:51 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-13 10:58 - 2014-03-02 16:21 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-13 10:31 - 2013-03-23 18:51 - 00000000 ____D () C:\Users\ViMa\Documents\Euro Truck Simulator 2
2015-04-13 09:13 - 2013-03-23 12:41 - 00000000 ____D () C:\Users\ViMa\AppData\Local\Packages
2015-04-13 07:57 - 2013-11-17 17:02 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-13 07:56 - 2013-11-17 17:00 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-04-13 07:56 - 2013-11-17 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-13 07:56 - 2013-05-20 17:17 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-12 08:18 - 2013-12-20 08:52 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{52F99032-B66B-452D-B6AA-618F42C9A45F}
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2015-04-10 19:30 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2015-04-10 14:18 - 2014-09-10 16:53 - 00259300 _____ () C:\WINDOWS\system32\ScanResults.xml
2015-04-10 13:45 - 2014-09-10 16:48 - 00000464 _____ () C:\WINDOWS\system32\ScannerSettings
2015-04-09 17:59 - 2013-03-23 18:53 - 00000000 ____D () C:\Users\Marvin\Documents\Euro Truck Simulator 2
2015-04-08 18:23 - 2013-12-28 10:11 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-08 15:06 - 2014-08-31 11:29 - 00000000 ____D () C:\Users\ViMa\AppData\Roaming\OneMoreGame
2015-04-07 17:13 - 2013-02-18 15:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-07 17:10 - 2013-10-31 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2015-04-07 17:10 - 2013-10-31 16:32 - 00000000 ____D () C:\Nexon
2015-04-07 17:09 - 2013-02-18 15:29 - 00000000 ____D () C:\ProgramData\Apple
2015-04-06 20:08 - 2013-08-22 16:44 - 00469296 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

==================== Files in the root of some directories =======

2013-10-11 12:27 - 2013-11-10 18:27 - 0000099 _____ () C:\Users\ViMa\AppData\Roaming\WB.CFG
2013-10-11 12:27 - 2013-11-10 18:27 - 0000006 _____ () C:\Users\ViMa\AppData\Roaming\WBPU-TTL.DAT
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Input.xml
2013-06-04 11:56 - 2013-06-04 11:56 - 0000000 _____ () C:\Users\ViMa\AppData\Local\Settings.xml
2013-12-15 17:53 - 2013-12-15 17:53 - 0000000 _____ () C:\ProgramData\0x0304A000.sfl
2013-03-23 12:42 - 2013-03-23 12:42 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1296.dll


Some content of TEMP:
====================
C:\Users\Marvin\AppData\Local\Temp\NGMSetup.exe
C:\Users\ViMa\AppData\Local\Temp\6_Offer_11.exe
C:\Users\ViMa\AppData\Local\Temp\A27CD679-6AF1-04B0-581E-51828C046082.exe
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.dll
C:\Users\ViMa\AppData\Local\Temp\BE0D3BF2-4615-E2FA-1917-CBF4E93DF551.exe
C:\Users\ViMa\AppData\Local\Temp\eFixProPackage.exe
C:\Users\ViMa\AppData\Local\Temp\instrac.exe
C:\Users\ViMa\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\ViMa\AppData\Local\Temp\NGMDll.dll
C:\Users\ViMa\AppData\Local\Temp\NGMResource.dll
C:\Users\ViMa\AppData\Local\Temp\Quarantine.exe
C:\Users\ViMa\AppData\Local\Temp\ReimagePackage.exe
C:\Users\ViMa\AppData\Local\Temp\sp64126.exe
C:\Users\ViMa\AppData\Local\Temp\sqlite3.dll
C:\Users\ViMa\AppData\Local\Temp\unicows.dll
C:\Users\ViMa\AppData\Local\Temp\UninstallHPSA.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-06 10:14

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 06.05.2015, 12:48   #15
schrauber
/// the machine
/// TB-Ausbilder
 

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Standard

Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"



Java und Flash updaten.

Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\staged\c409d8d4c7f149b589c03166c6@da6820630d1c49f08cdd9f5.com\extensionData\plugins\28.js

C:\Users\ViMa\AppData\Roaming\Mozilla\Firefox\Profiles\o69g4g9h.default\extensions\staged\c409d8d4c7f149b589c03166c6@da6820630d1c49f08cdd9f5.com\extensionData\plugins\91.js

C:\Users\ViMa\Downloads\PDFReaderSetup.exe

C:\Users\ViMa\Downloads\ReimageRepair.exe

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[1]

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[2]

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-5[1]

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[1]

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-4[2]

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\distro-search-protect-fix-5[1]

C:\Windows\Temp\tmpE734.tmp
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.





Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"
antivirus, browser, defender, desktop, ebanking, euro, explorer, firefox, flash player, flashbeat, google, helper, home, homepage, iexplore.exe, installation, kaspersky, monitor, mozilla, psuamain.exe, registry, scan, security, services.exe, software, super, svchost.exe, system, trojaner, werbung, windows, windows 8, windowsapps




Ähnliche Themen: Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"


  1. Google Chrome leitet mich ständig auf Werbeseiten bzw "Windows-Repair-Seiten" weiter, Musik ploppt auf
    Log-Analyse und Auswertung - 15.10.2015 (11)
  2. "Öffnen mit"-Fenster öffnet sich nach Windows-Start.
    Plagegeister aller Art und deren Bekämpfung - 16.07.2015 (12)
  3. Windows 8: Weiterleitung auf Werbeseiten + "Ad by Browser Extension"
    Log-Analyse und Auswertung - 25.11.2014 (10)
  4. CMD und "farmaster.net" öffnen sich bei Start von Windows!
    Plagegeister aller Art und deren Bekämpfung - 19.09.2014 (5)
  5. Startseite "istart.websearches.com" und massenweise fenster öffnen sich
    Plagegeister aller Art und deren Bekämpfung - 23.07.2014 (5)
  6. "Offer Powered By" entfernen
    Anleitungen, FAQs & Links - 09.07.2014 (2)
  7. Fenster öffnen sich und Antivirus Meldung "pup.optional.VBates"
    Log-Analyse und Auswertung - 13.06.2014 (15)
  8. "Powered by Information" entfernen
    Anleitungen, FAQs & Links - 28.04.2014 (2)
  9. Bildschirm "friert" ein oder es öffnen sich ungewollt div. Fenster etc.
    Plagegeister aller Art und deren Bekämpfung - 25.02.2014 (15)
  10. Windows 7 - Beim Öffnen von Websites öffnen sich Popups und Tabs mit Werbung
    Log-Analyse und Auswertung - 27.01.2014 (3)
  11. Windows XP Nach Installation von HP Player immer zwei Startseiten beim Öffnen von Google chrome "start.iminent.com" und "Search gol"
    Log-Analyse und Auswertung - 08.10.2013 (5)
  12. [Probem] Windows XP: Nach dem "Willkommen"-Screen weißer Bildschirm - Taskmanager lässt sich NICHT öffnen
    Plagegeister aller Art und deren Bekämpfung - 21.07.2013 (31)
  13. "Recovery"- und"Bundeskriminalamt"-Malware; Rkill und Malwarebytes öffnen sich nicht
    Plagegeister aller Art und deren Bekämpfung - 29.05.2011 (9)
  14. "Recovery"- und"Bundeskriminalamt"-Malware; Rkill und Malwarebytes öffnen sich nicht
    Antiviren-, Firewall- und andere Schutzprogramme - 29.05.2011 (2)
  15. "normale" Websiten öffnen sich plötzlich nicht mehr
    Alles rund um Windows - 02.06.2010 (1)
  16. Firefox öffnet dubiose "Antismalwar" und "Werbeseiten"
    Log-Analyse und Auswertung - 06.05.2010 (4)
  17. "Startseite" Easysearch powered by Google
    Plagegeister aller Art und deren Bekämpfung - 04.01.2005 (14)

Zum Thema Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" - Hallo, seit einiger Zeit öffnen sich zu den Websiten by Chrome und Firefox zusätzlich auch Werbeseiten, entweder als neuer Tab oder direkt im Vordergrund. Meistens steht an der Seite "powered - Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat"...
Archiv
Du betrachtest: Bei Windows 8 öffnen sich neben Websites auch Werbeseiten "powered by Flashbeat" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.