| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: V9.com enfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
04.07.2014, 10:03
| #1 |
| |  V9.com enfernen V9.com Virus entfernen. Ich habe unerwünschte Software V9.com Virus auf dem System! Wie kann ich es loswerden? Firefox und Internet Explorer sind betroffen habe schon Addons gelöscht und about:config, ohne Erfolg. Geändert von Witali (04.07.2014 um 10:14 Uhr) |
|
04.07.2014, 10:44
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | V9.com enfernen Hallo und
__________________ Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
04.07.2014, 11:47
| #3 |
| | Logfille Teil1 [CODE] Malwarebytes Anti-Malware
__________________www.malwarebytes.org Suchlauf Datum: 06.07.2014 Suchlauf-Zeit: 10:45:00 Logdatei: Log.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.07.04.02 Rootkit Datenbank: v2014.07.03.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8 CPU: x64 Dateisystem: NTFS Benutzer: Witali Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 271535 Verstrichene Zeit: 22 Min, 14 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 3 PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, 1152, , [93efd6c5fc7fd16593da8ece68996898] PUP.Optional.WpManager, C:\ProgramData\WPM\wprotectmanager.exe, 1208, , [94ee5249b1ca6dc97d6b84e26c95956b] PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpts.exe, 2664, , [3e443c5f780368ce5201666bbb47f907] Module: 6 PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll, , [275b306be497a88e2977085209f8857b], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Common.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpt.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptc.dll, , [3e443c5f780368ce5201666bbb47f907], Registrierungsschlüssel: 65 PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginService, , [93efd6c5fc7fd16593da8ece68996898], PUP.Optional.WpManager, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Wpm, , [94ee5249b1ca6dc97d6b84e26c95956b], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311301136}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344304436}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355305536}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366306636}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355305536}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366306636}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344304436}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311301136}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110311301136}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220322302236}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220322302236}, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311301136}\INPROCSERVER32, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, , [9fe3dfbc304be452dddabec6a161b44c], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [9fe3dfbc304be452dddabec6a161b44c], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [9fe3dfbc304be452dddabec6a161b44c], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [b0d27922ff7cae88678a5034b84a28d8], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [7210d5c643385ed8549e13712ed409f7], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, , [552d851688f3f6400f578dbecb376997], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, , [9fe3009b80fba591186e176d17eb4eb2], PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSystemUpdater, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SupTab, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64, , [344e5c3fbbc01026e45dda33a064b749], PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, , [453dbbe06a11a98d6ce6bb47d72d8e72], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, , [eb97bbe0fc7f5cda3c6d53772dd5e11f], PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [4240a0fb9fdce254ed00807835ce29d7], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [0979e9b22c4f33038dcfbcf6b44eb24e], PUP.Optional.HDVidCndec.A, HKLM\SOFTWARE\WOW6432NODE\HDvid Codec V6.0, , [750decaf5823c472bdb333a0d131c23e], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [49392c6ff18ab284c852528679896898], PUP.Optional.MediaPlayerplus.A, HKLM\SOFTWARE\WOW6432NODE\MediaPlayerplus, , [810196057dfe0234b400636605fdde22], PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\nationzoomSoftware, , [2e54cbd083f871c5620550adde25fa06], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD-2.2, , [96ec1883225942f4806a4792946ead53], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent, , [cab81e7dc0bb6bcb9ab8a9592fd547b9], PUP.Optional.HDVidCodec.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dnllcmllkjofnojidnaknldfehfhehoo, , [84fe039896e52c0ae03e0ee04cb7bd43], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21636, , [562cc1da304b1a1c1c8da624e121aa56], PUP.Optional.Linkury.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}, , [bcc6e0bb96e53600fe9c615c8082dd23], PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM, , [f29038633843a1958b98f6f8aa59d927], PUP.Optional.Feven.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Feven 2.5, , [bcc64853a4d78caa3455dbf75ba730d0], PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-2.2, , [2260dcbf4b30ea4caca524a6788a30d0], PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [3151b2e985f6b97d6627a04ecb386f91], PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [ccb68f0ce79444f2178850b1ba4ae51b], PUP.Optional.PlusHD.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-2.2, , [0d75712a2e4d03332829b21869990af6], PUP.Optional.PriceGong.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [88faf4a7295265d1efa7547db0520cf4], PUP.Optional.InstallCore.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [dca62c6f8fec62d4061e4c8bff03c739], PUP.Optional.InstallCore.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [5131e8b3641766d083b32ebf748f6b95], PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, , [41416932d8a391a57d2dc604020035cb], PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Freeven, , [6b17f6a5a7d478be748bf6d722e0758b], PUP.Optional.CrossRider.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\installdaddy, , [e9998d0ed4a73303130d23cb3bc81be5], PUP.Optional.PlusHD.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Plus HD, , [88faedaea9d2162083cfbf0b43bfc33d], PUP.Optional.Ciuvo.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ciuvo.com, , [820062399dde2412509bf8bad42ec63a], PUP.Optional.SuperFish.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, , [9ce6bfdc84f7be789f4bb5fd06fcf30d], PUP.Optional.Qone8, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [2e54247746350a2c688426d2bc4702fe], PUP.Optional.SweetIM.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM, , [83ff13887efd67cf968cdf0f4db64cb4], PUP.Optional.HDVidCodec.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HDvid Codec V6.0, , [ccb6405b13688aac9f9d5c3dc83a7b85], PUP.Optional.HDVidCodec.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\1ClickDownload, , [c4bee1ba7a015ed8cf6e5445c33f21df], Registrierungswerte: 9 PUP.Optional.NextLive.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NextLive, C:\Windows\SysWOW64\rundll32.exe "C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l, , [275b306be497a88e2977085209f8857b] PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Mysearchdial, , [0979e9b22c4f33038dcfbcf6b44eb24e] PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\2sfzx2xn.default-1387402583828\extensions\quick_start@gmail.com, , [7909d4c7fe7d59dd192d48835ba736ca] PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SWEETIM|simapp_id, 205476692094826048234177718857667808812, , [f29038633843a1958b98f6f8aa59d927] PUP.Optional.Linkury.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LPTSYSTEMUPDATER|ImagePath, "C:\Program Files (x86)\LPT\srpts.exe", , [493955461c5f6acc6ce9d9f87e840ef2] PUP.Optional.WpManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM|ImagePath, C:\ProgramData\WPM\wprotectmanager.exe -service, , [a0e27526364595a10eb57a8361a2c13f] PUP.Optional.InstallCore.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O0R1R1H2Z1S1G0H1F, , [5131e8b3641766d083b32ebf748f6b95] PUP.Optional.QuickStart.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, , [8ef40e8d88f393a397790da8ff039769] PUP.Optional.SweetIM.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM|simapp_id, 205476692094826048234177718857667808812, , [83ff13887efd67cf968cdf0f4db64cb4] Registrierungsdaten: 19 PUP.Optional.NationZoom.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[f88aafecd6a574c2981f5632a75d8e72] PUP.Optional.NationZoom.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[93efcfcc1962eb4bd0e920683fc5d828] PUP.Optional.NationZoom.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[681a89126318c3731e9a2e5a46bea957] PUP.Optional.NationZoom.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[047e3c5f344749edc9f1394f84807090] PUP.Optional.NationZoom, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[80021a81c8b376c03968286a22e203fd] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[2b574853e39849ede47b187a7b890bf5] PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[dea4cad193e857df51660d7b5da75ca4] PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=) ,,[374be1ba1d5e84b292e96b1d47bdaf51] PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[ee9452493a41ba7c69502a5e31d303fd] PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[562ca3f86219d1653a7efc8c2fd559a7] PUP.Optional.NationZoom.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[83ff5a4186f50234b1093a4ee3219d63] PUP.Optional.NationZoom, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}),,[8101801bc1baa98d663b434f2dd7b050] PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[c5bd049753280630d3967e0a0afa5aa6] PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[176bbcdf0c6f8bab02cdb7da25df22de] PUP.Optional.NationZoom.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX, Gut: (hxxp://www.google.com), Schlecht: (hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX),,[3151adee0a715cda2c88eb9d9b698a76] PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[681aedae28530a2c9836b5dccf35c838] PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[681a207b3a41a88e09c8c7ca38ccea16] PUP.Optional.Snapdo, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[7b07900bee8d6accb51d7e13887ca45c] PUP.Optional.SnapDo.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={sear chTerms}),,[5131e6b5d1aa5cda17539aee4aba54ac] Ordner: 104 PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\libraries, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\resources, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale\en-US, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\skin, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\defaults, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\defaults\preferences, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\libraries, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\resources, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.HDVidCodec.A, C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com, , [0f737427512abc7a8894b638cd3602fe], PUP.Optional.Iminent.A, C:\Users\Witali\AppData\Local\Temp\Iminent, , [ceb47a219eddbf771ec87e1956acbc44], PUP.Optional.Iminent.A, C:\Users\Witali\AppData\Local\Temp\Iminent\Log, , [ceb47a219eddbf771ec87e1956acbc44], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0, , [ccb6405b13688aac9f9d5c3dc83a7b85], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\GuideFiles, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\LocalDB, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\MyBackupPc, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\OptimizerPro, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Qone8, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Storimbo, , [9ae84b505d1ef541dc912e6be220a25e], PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me, , [91f19cff700b68cec4b83c5dcf33e61a], PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\cache, , [91f19cff700b68cec4b83c5dcf33e61a], PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService, , [2e54dcbfccaf7cbac3c8504aea180af6], PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update, , [2e54dcbfccaf7cbac3c8504aea180af6], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\actions, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource, , [97ebc0db28530f274530e7b4fe041de3], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\api, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\core, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\defaults, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\defaults\preferences, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\userCode, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\locale, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\locale\en-US, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin, , [8af8c4d7e695350138269d00d82aa25e], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\api, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\core, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\defaults, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\defaults\preferences, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\userCode, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\locale, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\locale\en-US, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin, , [285a07943e3d3ef8b1ad77265ca64fb1], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2, , [b1d14754ccafd0662f7b9c02d929c040], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5, , [bdc56b3053288ea823872f6f52b0de22], PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5, , [d8aad1ca0576171f2e90207ee0227b85], Dateien: 1194 PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\PluginService.exe, , [93efd6c5fc7fd16593da8ece68996898], PUP.Optional.WpManager, C:\ProgramData\WPM\wprotectmanager.exe, , [94ee5249b1ca6dc97d6b84e26c95956b], PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll, , [275b306be497a88e2977085209f8857b], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll, , [1d65108be19a3df9f98ab968a75a2fd1], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, , [cfb33566b4c7df5713ab61ee1de5f50b], PUP.Optional.SupTab.A, C:\Users\Witali\AppData\Roaming\SupTab\SupTab.dll, , [dca6e6b588f370c6c89a989d9b65e917], PUP.Optional.InstallRex, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R15J0KA.exe, , [e79bc2d9a7d464d2d709bf855aa6d030], PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R1TVC1S.exe, , [5e2489122c4fcf67ff9658f3748dfc04], PUP.Optional.OneClickDownloader.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R4BQN0P.exe, , [344ee6b5a0dbb97da37c6dab936ed030], PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R4LVT6U.exe, , [49395e3d7506290dc683a7b98480ce32], PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R5IGK2Q.exe, , [3c46bae18cefe45251744704b849ec14], PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$R7PGWW3.exe, , [2f535d3e344778be4bb677d4e61b21df], PUP.Optional.OneClickDownloader.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$RMG7WA1.exe, , [b2d084179fdca09697884bcd0ef345bb], PUP.Optional.BundleInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$RTGN3TX.exe, , [e2a0cfcce497003681c8cb9527ddd62a], PUP.Optional.OptimumInstaller.A, C:\$Recycle.Bin\S-1-5-21-215413311-585589717-95820281-1001\$RUNOFPQ.exe, , [6a18d6c5c4b7f3438543e86b8b767c84], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\bhs12DF.tmp, , [4c367922641757df863276be60a05da3], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\bhsE7CC.tmp, , [c1c19a012853a88e6058c37104fca25e], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\pniueGko.exe.part, , [344e910a64173ff78530fe47ce334fb1], PUP.Optional.Solimba.mr, C:\Users\Witali\AppData\Local\Temp\GtaEk5zH.exe.part, , [85fda4f7c9b2c571011040d7ad54d828], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\parent.txt, , [245e22797605d660329394b77e83b050], PUP.Optional.PayByAds.A, C:\Users\Witali\AppData\Local\Temp\dsrlte.exe, , [ccb6ecaf5d1ea49233b6734c6a9a7c84], PUP.Optional.DomalQ, C:\Users\Witali\AppData\Local\Temp\K9UiiNYm.exe.part, , [d7abe4b7b9c255e1027d21405fa58779], PUP.Optional.SweetIM, C:\Users\Witali\AppData\Local\Temp\mgsqlite3.dll, , [9fe31388235857df2837feb83fc54eb2], PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Local\Temp\setupA9_.exe, , [037fbedde596ad89ced28bcf41c0b050], PUP.Optional.Iminent, C:\Users\Witali\AppData\Local\Temp\Umbrella.exef296a17, , [8002bae11b609e985986709d4db4ee12], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\041bc179-e08b-42da-b56a-e4edb9085cbb0\parent.txt, , [b1d12378572460d61baad5761ae7ab55], PUP.Optional.ScramblePacker.A, C:\Users\Witali\AppData\Local\Temp\8984877d-e867-4ce1-925e-d3acc74b5b5d\software\feven-2-5.exe, , [f58d1289d5a6142203ef5928e31eed13], Backdoor.Bot, C:\Users\Witali\AppData\Local\Temp\android\android.exe, , [f1916f2c542754e2ab577af902ffdd23], Backdoor.Bot, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\android.exe, , [86fc0e8d99e254e214ee80f3d22fe917], PUP.Optional.Fortunitas.A, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\software\FortunitasSetup.exe, , [f58daeeddba09d999db266f8e61e0df3], PUP.Optional.ScramblePacker.A, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\software\mediaplayerpluuss.exe, , [fe84d3c8f289bd798b676c1513ee45bb], PUP.Optional.ShoppingHelper.A, C:\Users\Witali\AppData\Local\Temp\b0c2ba3b-05aa-43bc-a2c1-94fae2d19a34\software\ShoppinHelper2_Setup2.exe, , [433fa8f3c2b91b1b7e10ee4e7a86f30d], PUP.Optional.SmartBar, C:\Users\Witali\AppData\Local\Temp\MSI1015.tmp-\Smartbar.Installer.CustomActions.dll, , [b5cdeead1566ed49250a9c928b75d12f], PUP.Optional.ScramblePacker.A, C:\Users\Witali\AppData\Local\Temp\f50672b0-7a72-4f16-91d7-ceee2f119948\software\feven-2-5.exe, , [c9b9168568135ed82bc78ff2f40d1ae6], PUP.Optional.NationZoom.A, C:\Users\Witali\AppData\Local\Temp\fullpackage_temp1387395728\Baofeng.exe, , [99e92f6c3d3e5cdaf68ce94417e939c7], PUP.Optional.WpManager, C:\Users\Witali\AppData\Local\Temp\fullpackage_temp1387395728\tmp\NewGdp.exe, , [84fee5b690eb5bdb4f99a6c04db47888], PUP.Optional.Feven.A, C:\Users\Witali\AppData\Local\Temp\~nsu.tmp\Au_.exe, , [dfa3207b4536132347623efd2dd4c13f], PUP.Optional.BundleInstaller, C:\Users\Witali\AppData\Local\Temp\DM\parent.txt, , [3250ebb07506f244f8f7e0630df46c94], PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\sfckhzrirswogkh\parent.txt, , [8ff3d6c56f0c033350b17fccbb4607f9], PUP.Optional.SkyTech.A, C:\Users\Witali\AppData\Local\Temp\sfckhzrirswogkh\software\tugs_nationzoom.exe, , [4042fc9f9ddeb77f4b03174558a9916f], PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Local\genienext\nengine.dll, , [bcc629720972072fbee24614d42d47b9], PUP.Optional.SmartBar, C:\Windows\Installer\MSI1015.tmp, , [dfa32d6ef487f343c06f131bbc4440c0], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job, , [8af89a011368c274910e7d499d6524dc], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job, , [9ae8a0fb0972dd597d226561a959718f], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-enabler.job, , [b9c9613aa9d24ceafba44086ca38f10f], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job, , [dea424774932989ecbd4378f7e8442be], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-2.2-updater.job, , [245e6833bac170c63867873f5fa34ab6], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\PublisherSettings.xml, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.NamedPipe.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\FiddlerCore.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\HtmlAgilityPack.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\linmsl.exe, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\LPTInstaller.msi, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\lrrot.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\NewConfig.txt, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Newtonsoft.Json.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Proxy.pac, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Common.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Communication.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Infrastructure.Utilities.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Monetization.Proxy.ProxyService.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Personalization.Common.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\sppsm.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\spusm.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srbs.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srbu.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\sreu.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpdm.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srprl.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpt.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptc.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptm.exe, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srptm.exe.config, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srpts.exe, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\srut.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\System.Data.SQLite.dll, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\UserSettings.xml, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\XMLOperations.xml, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\BrowserSettings.xml, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\LPTMapping.xml, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Configs\Timers.xml, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.Linkury.A, C:\Program Files (x86)\LPT\Resources\LPT.xml, , [3e443c5f780368ce5201666bbb47f907], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\style.css, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\27.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\1.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\10.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\11.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\12.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\13.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\14.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\15.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\16.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\17.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\18.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\19.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\2.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\20.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\21.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\22.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\23.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\24.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\25.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\26.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\28.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\29.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\3.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\30.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\31.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\32.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\33.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\34.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\35.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\36.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\37.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\38.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\39.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\4.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\40.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\41.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\42.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\43.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\44.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\45.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\46.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\47.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\5.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\6.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\7.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\8.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\9.png, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\background.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-base.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, , [12709efd621944f28a62d102f80a04fc], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\source.crx, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\unins000.dat, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\icon.png, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\install.rdf, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\main.js.bak, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\content\main.xul, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\locale\en-US\overlay.dtd, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.VbatesHelper.A, C:\Program Files\V-bates\Firefox\chrome\skin\overlay.css, , [a6dcd6c5fe7d73c39c2cf3e58082e917], PUP.Optional.HDVidCodec.A, C:\Windows\Tasks\HDvid Codec V1-codedownloader.job, , [39499506215acf679a812ac444bfde22], PUP.Optional.HDVidCodec.A, C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\HDVidCodec.lnk, , [0f737427512abc7a8894b638cd3602fe], PUP.Optional.HDVidCodec.A, C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\Uninstall.lnk, , [0f737427512abc7a8894b638cd3602fe], PUP.Optional.FunMoods.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage, , [ec96207bd3a8d363adacc234e81b40c0], PUP.Optional.HDVidCodec.A, C:\Windows\Tasks\HDvid Codec V6.0-firefoxinstaller.job, , [b1d1a1fa24573bfbd23b52aa956e26da], PUP.Optional.HDVidCodec.A, C:\Windows\Tasks\HDvid Codec V6.0-updater.job, , [86fca7f487f4f73f060717e5b15229d7], PUP.Optional.NationZoom.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\nationzoom.xml, , [87fb118a2952a096570f9964cd3620e0], PUP.Optional.Sanbreel.A, C:\Windows\System32\Drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys, , [344e5c3fbbc01026e45dda33a064b749], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\45971.xpi, , [ccb6405b13688aac9f9d5c3dc83a7b85], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-firefoxinstaller.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\HDvid Codec V6.0-updater.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\Uninstall.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\HDvid Codec V6.0\utils.exe, , [ccb6405b13688aac9f9d5c3dc83a7b85], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\b.bmp, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\finish.bmp, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\FinishHDVID.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDVidCodec.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDvidCodec10.crx, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\HDvidCodecIE.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\hdvidextsetup.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\hdvid_temp.bmp, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.HDVidCodec.A, C:\Program Files (x86)\hdvidcodec.com\uninst.exe, , [c4bee1ba7a015ed8cf6e5445c33f21df], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\VBeeClient.vsto, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\adj.exc, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\adv.exc, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\cntlist, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\cntlist.rev, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.adj, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.adv, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.noun, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\data.verb, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\english.model, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\frames.vrb, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.adj, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.adv, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.noun, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.sense, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\index.verb, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\log.grind.2.1, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\noun.exc, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\sentidx.vrb, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\sents.vrb, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\verb.exc, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\Dic-Eng\verb.Framestext, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\GuideFiles\License.rtf, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeExe\GuideFiles\SelectSlidesGuide.rtf, , [a1e1cccf7a0140f62939d2c7669c16ea], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 colors 01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 colors 01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 colors 01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_6frame_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_6frame_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_blue_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_blue_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_blue_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_book_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_book_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_book_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_chinesepaper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_chinesepaper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_chinesepaper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_greenstars_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_greenstars_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_greenstars_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_majestic_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_majestic_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_paperback_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_paperback_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_paperback_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pareeca_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pareeca_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pareeca_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pink_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pink_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_pink_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_spirala_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_spirala_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_spirala_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\3 Colors 07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_6frame_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Analogue_majestic_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Elemental_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Verve_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Bubbles_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\BaloonGirl_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\BaloonGirl_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\BaloonGirl_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ChineseDoll_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ChineseDoll_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ChineseDoll_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas1_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas1_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas1_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas2_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas2_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Christmas2_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Comics06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Angles_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Angles_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Angles_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Apo_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Apo_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Apo_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_BlackTie_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_BlackTie_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_BlackTie_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Composite_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Composite_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Composite_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Elemental_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Elemental_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_gray_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_gray_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_gray_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Horizon_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Horizon_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Horizon_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Newspaper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Newspaper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Newspaper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Paper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Paper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Paper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Technic_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Technic_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Technic_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Verve_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Flashy_Colours_Verve_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Bubbles_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Bubbles_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Classic_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Classic_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Classic_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Desert_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Desert_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Desert_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Earth_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Earth_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Earth_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Flower_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Flower_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Flower_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Leaves_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Leaves_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Leaves_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Ornament_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Ornament_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Ornament_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sky_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sky_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sky_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sport_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sport_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Sport_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Urban_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Urban_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Guga_Urban_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\HandShake_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\HandShake_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\HandShake_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_A_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_A_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_A_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_B_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_B_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_B_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_C_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_C_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_C_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_D_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_D_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Large_title_D_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\logo.png, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Flowers_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Flowers_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Flowers_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Paper_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Paper_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Paper_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Plants_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Plants_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Sand_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Sand_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Sand_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Stars_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Stars_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Stars_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Waves_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Waves_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Waves_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Painting_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Painting_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Painting_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Background.png, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Background_v35.png, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Buy1.png, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Buy2.png, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PaymentPanel-Buy3.png, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_sport_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_sport_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_techPp_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_travl_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legal_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legl_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legl_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_medc_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_medc_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_medc_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_tech_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_tech_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_tech_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_travl_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PurpleButterfly_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PurpleButterfly_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\RedHeadCalling_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\RedHeadCalling_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\RedHeadCalling_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ShipsComing_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ShipsComing_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ShipsComing_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Simple 04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark 02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Mono Dark Plants_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_11_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_17_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppD_Classic_14_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_sport_06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_educ_08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_legl_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Pp_sport_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PurpleButterfly_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\SunFlower_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\SunFlower_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1], PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\SunFlower_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1], |
|
04.07.2014, 11:52
| #4 |
| | Logfille Teil2Code:
ATTFilter PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T105_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T105_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T105_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T107_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T107_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T107_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T109_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T109_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T109_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T115_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T115_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T115_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T116_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T116_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T116_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T119_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T119_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T119_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T120_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T120_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T120_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T121_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T121_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T121_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T202_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T202_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T202_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T203_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T203_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T203_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T205_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T205_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T205_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T207_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T207_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T207_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T211_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T211_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T211_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T213_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T213_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T213_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T218_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T218_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T218_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T219_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T219_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T219_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T220_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T220_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T220_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T301_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T301_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T301_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T302_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T302_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T302_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T303_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T303_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T303_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T304_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T304_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T304_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T305_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T305_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T305_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T306_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T306_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T306_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T307_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T307_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T307_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T308_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T308_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T308_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T309_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T309_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T309_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T311_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T311_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T311_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T312_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T312_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T312_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T313_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T313_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T313_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T314_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T314_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T314_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T316_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T316_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T316_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T317_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T317_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T317_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T318_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T318_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T318_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T319_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T319_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T319_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T320_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T320_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T320_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T322_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T322_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T322_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T324_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T324_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T324_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T325_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T325_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T325_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T326_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T326_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T326_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T327_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T327_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\T327_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Teenage_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Teenage_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp06_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp09_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp09_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp09_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp10_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp10_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp10_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp11_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp11_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp11_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp12_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp12_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp12_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Teenage_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp13_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp18_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11E_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11J_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\VisualBeeLogo.png, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y103_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y307_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y319_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y327_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp13_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp13_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp14_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp14_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp14_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp15_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp15_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp15_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp16_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp16_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp16_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp17_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp17_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp17_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp18_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp18_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp19_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp19_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp19_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp20_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp20_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ThinkUp20_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11A_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11A_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11A_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11B_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11B_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11B_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11C_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11C_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11C_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11D_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11D_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11D_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11E_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11E_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11F_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11F_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11F_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11G_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11G_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11G_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11H_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11H_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11H_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11I_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11I_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11I_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11J_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11J_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11K_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11K_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11K_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11L_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11L_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11L_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11M_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11M_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11M_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11N_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11N_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Typo11N_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WatchingTheSea_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WatchingTheSea_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WatchingTheSea_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Watching_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Watching_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Watching_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WeddingSoon_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WeddingSoon_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WeddingSoon_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WindGirl_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WindGirl_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\WindGirl_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y101_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y101_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y101_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y103_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y103_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y305_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y305_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y305_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y306_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y306_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y306_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y307_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y307_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y308_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y308_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y308_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y312_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y312_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y312_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y319_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y319_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y323_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y323_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y323_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y324_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y324_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y324_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y327_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y327_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y330_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y330_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y330_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y332_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y332_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y332_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y333_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y333_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y333_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y335_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y335_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y335_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y336_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y336_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\Y336_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Female_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Female_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Female_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Guy_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Guy_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_Guy_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_SCI_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplates_3M_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplate_Background.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\myTemplate_Button.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_03_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_03_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_03_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_04_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_04_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_04_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_05_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_05_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_05_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_06_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_06_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_08_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_08_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_08_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_09_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_09_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_09_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_10_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_10_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_10_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_11_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_11_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_12_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_12_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_12_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_13_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_13_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_13_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_15_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_15_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_15_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_16_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_16_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_16_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_17_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_17_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_18_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_18_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_18_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_19_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_19_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_19_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_20_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_20_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppA_Classic_20_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppD_Classic_14_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\ppD_Classic_14_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_educ_07_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_educ_07_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_educ_07_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_01_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_01_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_01_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_02_smart.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_02_text.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.Visualbee, C:\Users\Witali\AppData\Local\VisualBeeClient\Domain\PpD_medc_02_thumb.jpg, , [97eb0497e8931b1b3d269900ed152fd1],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\base.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\mypcbackup.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\nationzoom.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\optimizerpro.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position1A.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position2A.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position2B.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position2C.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3A.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3B.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3C.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position3D.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\position4A.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\storimbo.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\style.css, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bg_app.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\boton.jpg, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\boton_xl.jpg, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bullet-short.gif, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bullet-shortw.gif, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\bullet.gif, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\butpause.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\butplay.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\check-close.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\check.jpg, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\check.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\cross.jpg, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\hide.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\less.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\logo-win.jpg, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\more.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\mypcbackup.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\optimizerpro-img.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\optimizerpro-logo-big.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\optimizerpro-logo.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\percentage-bg.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\progress.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\progress_small.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\progress_small_bg.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-geaudioconverter.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-gevideoconverter.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-ifish.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-miul.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-olivebrowser.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-printpdf.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-vafmusic.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-vafplayer.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\screen-zipper.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\css\images\show.png, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\box.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\close.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\finish.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\group.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\instalando.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\options.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\exe\welcome.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\MyBackupPc\info.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\OptimizerPro\info.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Qone8\info.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.BundleInstaller.A, C:\Users\Witali\AppData\Local\Temp\DM\bin\Storimbo\info.html, , [9ae84b505d1ef541dc912e6be220a25e],
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\nengine.cookie, , [91f19cff700b68cec4b83c5dcf33e61a],
PUP.Optional.NextLive.A, C:\Users\Witali\AppData\Roaming\newnext.me\cache\spark.bin, , [91f19cff700b68cec4b83c5dcf33e61a],
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginService\update\conf, , [2e54dcbfccaf7cbac3c8504aea180af6],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\background.html, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\crossriderManifest.json, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\manifest.json, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\popup.html, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\manifest.xml, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins.json, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\47_resources_background.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\102_dealply_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\105_corticas_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\117_coupons_intext_ads_5_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\119_similar_web_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\120_luck_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\123_intext_adv_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\125_arcadi2_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\126_revizer_ws_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\175_coolmirage_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\177_crossriderDashboard.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\178_revizer_ws_dynamic_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\179_revizer_p_dynamic_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\17_jQuery.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\180_bpo_serp_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\182_openUrl.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\183_tabsWrapper.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\184_noproblemppc_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\189_active_sanity.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\190_pops_5_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\191_ciuvo_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\194_retargeting_bi_m.js.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\195_icm_convertmedia_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\197_kreapixel_pops_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\199_superfish_no_coupons_plushd_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\19_CHAppAPIWrapper.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\1_base.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\200_foxydeal_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\204_pricedetect_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\21_debug.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\22_resources.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\28_initializer.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\127_revizer_p_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\128_superfish_pricora_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\135_arcadi3_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\138_getdeal_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\13_CrossriderAppUtils.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\141_corticas_ru_m.js.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\142_intext_fa_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\14_CrossriderUtils.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\159_cortica_rollover_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\171_arcadi2_sourceID_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\4_jquery_1_7_1.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\64_appApiMessage.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\72_appApiValidation.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\78_CrossriderInfo.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\7_hooks.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\80_CHPopupAppAPI.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\91_monetizationLoader.js.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\93_superfish_no_coupons_m.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\97_resourceApiWrapper.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\9_search_engine_hook.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\background.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\extension.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon128.png, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon16.png, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon48.png, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\actions\1.png, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\background.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\main.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\chrome.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\cookie.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\message.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageAction.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageActionBG.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\app_api.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\bg_app_api.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\consts.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\cookie_store.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\crossriderAPI.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\delegate.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\events.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\extensionDataStore.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\installer.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logFile.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logging.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\onBGDocumentLoad.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\reports.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\storageWrapper.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\updateManager.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\util.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\xhr.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\newPopup.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\popup.js, , [97ebc0db28530f274530e7b4fe041de3],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome.manifest, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\install.rdf, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\background.html, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\dialog.js, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\ffCoreFilesIndex.txt, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\options.js, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\options.xul, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\chrome\content\search_dialog.xul, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button1.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button2.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button3.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button4.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\button5.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\crossrider_statusbar.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon128.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon16.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon24.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\icon48.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\panelarrow-up.png, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\popup.html, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\skin\update.css, , [8af8c4d7e695350138269d00d82aa25e],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome.manifest, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\install.rdf, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\3797d4fa385b0f20d9509ad32b672fd6.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\68547978802754956948bee5226935db.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\background.html, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\dialog.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\ffCoreFilesIndex.txt, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\options.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\options.xul, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\chrome\content\search_dialog.xul, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\manifest.xml, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins.json, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\223.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\1.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\102.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\104.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\119.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\123.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\13.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\14.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\155.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\158.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\16.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\17.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\177.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\178.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\179.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\180.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\182.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\183.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\184.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\189.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\191.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\195.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\207.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\21.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\22.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\220.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\221.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\226.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\232.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\242.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\244.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\246.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\262.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\263.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\268.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\273.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\28.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\4.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\47.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\64.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\7.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\72.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\78.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\9.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\93.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\98.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\userCode\background.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\userCode\extension.js, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button1.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button2.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button3.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button4.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\button5.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\crossrider_statusbar.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon128.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon16.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon24.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\icon48.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\panelarrow-up.png, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\popup.html, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\skin\update.css, , [285a07943e3d3ef8b1ad77265ca64fb1],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-codedownloader.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\33036.crx, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\33036.xpi, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Installer.log, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bg.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil.dll, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil64.dll, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil64.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-chromeinstaller.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-enabler.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-firefoxinstaller.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-helper.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-updater.exe, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2.ico, , [b1d14754ccafd0662f7b9c02d929c040],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5\33438.crx, , [bdc56b3053288ea823872f6f52b0de22],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5\33438.xpi, , [bdc56b3053288ea823872f6f52b0de22],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-2.5\Installer.log, , [bdc56b3053288ea823872f6f52b0de22],
PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5\45182.xpi, , [d8aad1ca0576171f2e90207ee0227b85],
PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5\background.html, , [d8aad1ca0576171f2e90207ee0227b85],
PUP.Optional.ClickNMark.A, C:\Program Files (x86)\click-n-mark-5\Installer.log, , [d8aad1ca0576171f2e90207ee0227b85],
PUP.Optional.Dsrlte.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://rts.dsrlte.com");), ,[3a484f4c6912280e6fbe7d436f95ab55]
PUP.Optional.CrossRider.A, C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "14676aabc5449fec3b077edf343695ed");), ,[acd6a5f6334847ef00f2bd0308fcda26]
Physische Sektoren: 0
(No malicious items detected)
(end)
|
|
04.07.2014, 12:14
| #5 |
| | FRST-Editor FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2014 Ran by Witali (administrator) on FAMILIEN-PC on 06-07-2014 12:22:08 Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Program Files (x86)\LPT\srpts.exe (Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe (Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA) HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-15] (IVT Corporation) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-01-24] (Tlapia) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-215413311-585589717-95820281-1001\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: http=127.0.0.1:8877 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir= SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Plus-HD-2.2 - {11111111-1111-1111-1111-110311301136} - C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll No File BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll No File BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995 FF Homepage: hxxp://rts.dsrlte.com FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\searchplugins\keepmysearch.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nationzoom.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: HDvid Codec V6.0 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com [2014-07-06] FF Extension: Plus-HD-2.2 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com [2014-07-06] FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\2sfzx2xn.default-1387402583828\extensions\quick_start@gmail.com FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK Chrome: ======= CHR Extension: (Plus-HD-2.2) - C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo [2013-12-18] CHR HKLM-x32\...\Chrome\Extension: [dnllcmllkjofnojidnaknldfehfhehoo] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx [2013-06-30] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed] R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed] R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32288 2014-02-09] () R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-01-24] (Tlapia) R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [400664 2014-01-24] (Tlapia) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation) R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [510608 2014-03-05] (Cherished Technololgy LIMITED) ==================== Drivers (Whitelisted) ==================== R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [62848 2012-11-20] (ASUS Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-07] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-10] (Avira Operations GmbH & Co. KG) U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation) U4 BthHFEnum; S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-06] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-14] (Ralink Technology, Corp.) R1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; C:\Windows\System32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [61120 2014-04-24] (StdLib) U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.) U0 msahci; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-06 12:16 - 2014-07-06 12:22 - 00000000 ____D () C:\FRST 2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml 2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-06 10:26 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-06 10:26 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-06 10:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-06 09:53 - 2014-07-06 10:39 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website 2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe ==================== One Month Modified Files and Folders ======= 2014-07-06 12:22 - 2014-07-06 12:16 - 00000000 ____D () C:\FRST 2014-07-06 12:14 - 2013-06-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-06 12:03 - 2013-12-18 21:21 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.2 2014-07-06 12:03 - 2013-05-16 18:36 - 00003592 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-215413311-585589717-95820281-1001 2014-07-06 12:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru 2014-07-06 11:48 - 2014-02-18 14:14 - 00000000 ____D () C:\Program Files (x86)\sysTPL 2014-07-06 11:45 - 2014-04-01 17:39 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml 2014-07-06 11:14 - 2013-12-18 21:14 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V6.0 2014-07-06 11:14 - 2013-10-26 20:58 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V1 2014-07-06 10:39 - 2014-07-06 09:53 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website 2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-06 09:51 - 2013-12-18 21:22 - 00001354 _____ () C:\Windows\Tasks\Plus-HD-2.2-updater.job 2014-07-06 09:51 - 2013-12-18 21:22 - 00001256 _____ () C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job 2014-07-06 09:51 - 2013-12-18 21:22 - 00001156 _____ () C:\Windows\Tasks\Plus-HD-2.2-enabler.job 2014-07-06 09:51 - 2013-12-18 21:21 - 00002130 _____ () C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job 2014-07-06 09:51 - 2013-12-18 21:21 - 00002002 _____ () C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job 2014-07-06 09:51 - 2013-12-18 21:14 - 00002198 _____ () C:\Windows\Tasks\HDvid Codec V6.0-firefoxinstaller.job 2014-07-06 09:51 - 2013-12-18 21:14 - 00001352 _____ () C:\Windows\Tasks\HDvid Codec V6.0-updater.job 2014-07-06 09:51 - 2013-10-26 20:58 - 00001222 _____ () C:\Windows\Tasks\HDvid Codec V1-codedownloader.job 2014-07-06 09:51 - 2013-05-16 18:29 - 00000401 _____ () C:\Users\Witali\AppData\Roaming\sp_data.sys 2014-07-06 09:13 - 2013-01-22 21:19 - 01556059 _____ () C:\Windows\WindowsUpdate.log 2014-07-06 09:01 - 2012-07-26 07:26 - 00000226 _____ () C:\Windows\win.ini 2014-07-06 08:59 - 2013-06-02 22:11 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-06 08:56 - 2013-06-01 11:22 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-06 08:54 - 2013-12-18 21:21 - 00000000 ____D () C:\Users\Witali\AppData\Roaming\newnext.me 2014-07-06 08:54 - 2013-12-11 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-01 20:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-14 21:36 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp 2014-06-08 22:00 - 2013-12-09 22:40 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.5 2014-06-07 16:08 - 2012-08-15 19:46 - 00000739 _____ () C:\Windows\SysWOW64\bscs.ini 2014-06-07 16:08 - 2012-08-02 15:24 - 00023334 _____ () C:\Windows\PFRO.log 2014-06-07 16:08 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-07 16:07 - 2013-12-18 23:36 - 00000000 ____D () C:\Users\Witali\Desktop\Alte Firefox-Daten 2014-06-07 16:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe 2014-06-07 15:26 - 2013-06-01 11:22 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys Files to move or delete: ==================== C:\ProgramData\SetStretch.exe Some content of TEMP: ==================== C:\Users\Witali\AppData\Local\Temp\96984uninstall.exe C:\Users\Witali\AppData\Local\Temp\avgnt.exe C:\Users\Witali\AppData\Local\Temp\BackupSetup.exe C:\Users\Witali\AppData\Local\Temp\dsrlte.exe C:\Users\Witali\AppData\Local\Temp\FortunitasUntemp.exe C:\Users\Witali\AppData\Local\Temp\mgsqlite3.dll C:\Users\Witali\AppData\Local\Temp\setupA9_.exe C:\Users\Witali\AppData\Local\Temp\ShoppinHelper2new2.exe C:\Users\Witali\AppData\Local\Temp\Sqlite3.dll C:\Users\Witali\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-06 12:05 ==================== End Of Log ============================ --- --- --- FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2014 Ran by Witali (administrator) on FAMILIEN-PC on 06-07-2014 12:22:08 Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Program Files (x86)\LPT\srpts.exe (Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe (Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA) HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-15] (IVT Corporation) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-01-24] (Tlapia) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-215413311-585589717-95820281-1001\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Witali\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.) ==================== Internet (Whitelisted) ==================== ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: http=127.0.0.1:8877 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.nationzoom.com/?type=sc&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir= SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms} SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: Plus-HD-2.2 - {11111111-1111-1111-1111-110311301136} - C:\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll No File BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll No File BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995 FF Homepage: hxxp://rts.dsrlte.com FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\searchplugins\keepmysearch.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nationzoom.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: HDvid Codec V6.0 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com [2014-07-06] FF Extension: Plus-HD-2.2 - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com [2014-07-06] FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\2sfzx2xn.default-1387402583828\extensions\quick_start@gmail.com FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK Chrome: ======= CHR Extension: (Plus-HD-2.2) - C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo [2013-12-18] CHR HKLM-x32\...\Chrome\Extension: [dnllcmllkjofnojidnaknldfehfhehoo] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx [2013-06-30] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS) R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed] R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed] R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [32288 2014-02-09] () R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-01-24] (Tlapia) R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [400664 2014-01-24] (Tlapia) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation) R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [510608 2014-03-05] (Cherished Technololgy LIMITED) ==================== Drivers (Whitelisted) ==================== R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [62848 2012-11-20] (ASUS Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-07] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-10] (Avira Operations GmbH & Co. KG) U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation) U4 BthHFEnum; S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation) S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-06] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation) R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-14] (Ralink Technology, Corp.) R1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; C:\Windows\System32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [61120 2014-04-24] (StdLib) U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.) U0 msahci; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-06 12:16 - 2014-07-06 12:22 - 00000000 ____D () C:\FRST 2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml 2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-06 10:26 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-06 10:26 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-06 10:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-06 09:53 - 2014-07-06 10:39 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website 2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe ==================== One Month Modified Files and Folders ======= 2014-07-06 12:22 - 2014-07-06 12:16 - 00000000 ____D () C:\FRST 2014-07-06 12:14 - 2013-06-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-06 12:03 - 2013-12-18 21:21 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.2 2014-07-06 12:03 - 2013-05-16 18:36 - 00003592 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-215413311-585589717-95820281-1001 2014-07-06 12:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru 2014-07-06 11:48 - 2014-02-18 14:14 - 00000000 ____D () C:\Program Files (x86)\sysTPL 2014-07-06 11:45 - 2014-04-01 17:39 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml 2014-07-06 11:14 - 2013-12-18 21:14 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V6.0 2014-07-06 11:14 - 2013-10-26 20:58 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V1 2014-07-06 10:39 - 2014-07-06 09:53 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website 2014-07-06 10:27 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-07-06 09:51 - 2013-12-18 21:22 - 00001354 _____ () C:\Windows\Tasks\Plus-HD-2.2-updater.job 2014-07-06 09:51 - 2013-12-18 21:22 - 00001256 _____ () C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job 2014-07-06 09:51 - 2013-12-18 21:22 - 00001156 _____ () C:\Windows\Tasks\Plus-HD-2.2-enabler.job 2014-07-06 09:51 - 2013-12-18 21:21 - 00002130 _____ () C:\Windows\Tasks\Plus-HD-2.2-firefoxinstaller.job 2014-07-06 09:51 - 2013-12-18 21:21 - 00002002 _____ () C:\Windows\Tasks\Plus-HD-2.2-chromeinstaller.job 2014-07-06 09:51 - 2013-12-18 21:14 - 00002198 _____ () C:\Windows\Tasks\HDvid Codec V6.0-firefoxinstaller.job 2014-07-06 09:51 - 2013-12-18 21:14 - 00001352 _____ () C:\Windows\Tasks\HDvid Codec V6.0-updater.job 2014-07-06 09:51 - 2013-10-26 20:58 - 00001222 _____ () C:\Windows\Tasks\HDvid Codec V1-codedownloader.job 2014-07-06 09:51 - 2013-05-16 18:29 - 00000401 _____ () C:\Users\Witali\AppData\Roaming\sp_data.sys 2014-07-06 09:13 - 2013-01-22 21:19 - 01556059 _____ () C:\Windows\WindowsUpdate.log 2014-07-06 09:01 - 2012-07-26 07:26 - 00000226 _____ () C:\Windows\win.ini 2014-07-06 08:59 - 2013-06-02 22:11 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-06 08:56 - 2013-06-01 11:22 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-07-06 08:54 - 2013-12-18 21:21 - 00000000 ____D () C:\Users\Witali\AppData\Roaming\newnext.me 2014-07-06 08:54 - 2013-12-11 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-01 20:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-06-14 21:36 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp 2014-06-08 22:00 - 2013-12-09 22:40 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-2.5 2014-06-07 16:08 - 2012-08-15 19:46 - 00000739 _____ () C:\Windows\SysWOW64\bscs.ini 2014-06-07 16:08 - 2012-08-02 15:24 - 00023334 _____ () C:\Windows\PFRO.log 2014-06-07 16:08 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-07 16:07 - 2013-12-18 23:36 - 00000000 ____D () C:\Users\Witali\Desktop\Alte Firefox-Daten 2014-06-07 16:07 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe 2014-06-07 15:26 - 2013-06-01 11:22 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys Files to move or delete: ==================== C:\ProgramData\SetStretch.exe Some content of TEMP: ==================== C:\Users\Witali\AppData\Local\Temp\96984uninstall.exe C:\Users\Witali\AppData\Local\Temp\avgnt.exe C:\Users\Witali\AppData\Local\Temp\BackupSetup.exe C:\Users\Witali\AppData\Local\Temp\dsrlte.exe C:\Users\Witali\AppData\Local\Temp\FortunitasUntemp.exe C:\Users\Witali\AppData\Local\Temp\mgsqlite3.dll C:\Users\Witali\AppData\Local\Temp\setupA9_.exe C:\Users\Witali\AppData\Local\Temp\ShoppinHelper2new2.exe C:\Users\Witali\AppData\Local\Temp\Sqlite3.dll C:\Users\Witali\AppData\Local\Temp\vcredist_x64.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-06 12:05 ==================== End Of Log ============================ --- --- --- |
|
04.07.2014, 12:27
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9.com enfernen Das Teil ist ja vollgerotzt ohne Ende  Scan mit Combofix
__________________ --> V9.com enfernen |
|
04.07.2014, 12:56
| #7 |
| | CombofixCode:
ATTFilter ComboFix 14-07-03.01 - Witali 06.07.2014 13:48:31.1.2 - x64
Microsoft Windows 8 6.2.9200.0.1252.49.1031.18.3980.2389 [GMT 2:00]
ausgeführt von:: c:\users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6UTN1C8W\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\SetStretch.exe
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\background.html
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\crossriderManifest.json
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\manifest.xml
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins.json
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\1_base.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\102_dealply_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\105_corticas_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\117_coupons_intext_ads_5_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\119_similar_web_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\120_luck_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\123_intext_adv_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\125_arcadi2_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\126_revizer_ws_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\127_revizer_p_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\128_superfish_pricora_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\13_CrossriderAppUtils.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\135_arcadi3_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\138_getdeal_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\14_CrossriderUtils.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\141_corticas_ru_m.js.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\142_intext_fa_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\159_cortica_rollover_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\17_jQuery.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\171_arcadi2_sourceID_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\175_coolmirage_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\177_crossriderDashboard.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\178_revizer_ws_dynamic_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\179_revizer_p_dynamic_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\180_bpo_serp_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\182_openUrl.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\183_tabsWrapper.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\184_noproblemppc_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\189_active_sanity.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\19_CHAppAPIWrapper.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\190_pops_5_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\191_ciuvo_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\194_retargeting_bi_m.js.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\195_icm_convertmedia_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\197_kreapixel_pops_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\199_superfish_no_coupons_plushd_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\200_foxydeal_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\204_pricedetect_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\21_debug.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\22_resources.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\28_initializer.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\4_jquery_1_7_1.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\47_resources_background.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\64_appApiMessage.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\7_hooks.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\72_appApiValidation.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\78_CrossriderInfo.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\80_CHPopupAppAPI.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\9_search_engine_hook.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\91_monetizationLoader.js.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\93_superfish_no_coupons_m.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\97_resourceApiWrapper.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\background.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\userCode\extension.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\actions\1.png
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon128.png
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon16.png
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\icons\icon48.png
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\chrome.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\cookie.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\message.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageAction.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\api\pageActionBG.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\background.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\app_api.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\bg_app_api.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\consts.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\cookie_store.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\crossriderAPI.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\delegate.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\events.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\extensionDataStore.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\installer.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logFile.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\logging.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\onBGDocumentLoad.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\newPopup.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\popupResource\popup.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\reports.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\storageWrapper.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\updateManager.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\util.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\lib\xhr.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\js\main.js
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\manifest.json
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\popup.html
c:\users\Witali\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Storimbo_iels
c:\windows\msvcr71.dll
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-06-06 bis 2014-07-06 ))))))))))))))))))))))))))))))
.
.
2014-07-06 11:52 . 2014-07-06 11:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-07-06 10:16 . 2014-07-06 10:24 -------- d-----w- C:\FRST
2014-07-06 08:27 . 2014-07-06 08:27 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-07-06 08:26 . 2014-05-12 05:26 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-07-06 08:26 . 2014-05-12 05:26 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-07-06 08:26 . 2014-05-12 05:25 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-07-06 08:26 . 2014-07-06 08:26 -------- d-----w- c:\program files (x86)\ Malwarebytes Anti-Malware
2014-07-06 08:26 . 2014-07-06 08:26 -------- d-----w- c:\programdata\Malwarebytes
2014-07-01 19:02 . 2014-07-01 19:02 283312 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10242.bin
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-06 07:51 . 2013-05-16 16:29 401 ----a-w- c:\users\Witali\AppData\Roaming\sp_data.sys
2014-07-06 06:56 . 2013-06-01 09:22 117712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-06-07 13:26 . 2013-06-01 09:22 130584 ----a-w- c:\windows\system32\drivers\avipbb.sys
2014-04-24 10:22 . 2014-05-03 18:38 61120 ----a-w- c:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NextLive"="c:\users\Witali\AppData\Roaming\newnext.me\nengine.dll" [2013-11-14 1283584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2014-05-08 40312]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-08-15 364032]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432]
"ASUSWebStorage"="c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe" [2012-08-28 3417984]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-07-06 750160]
"sysTPL"="c:\program files (x86)\sysTPL\sysTPL.exe" [2014-01-24 1244440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 IePluginService;IePlugin Service;c:\programdata\IePluginService\PluginService.exe;c:\programdata\IePluginService\PluginService.exe [x]
R2 Wpm;Wpm Service;c:\programdata\WPM\wprotectmanager.exe;c:\programdata\WPM\wprotectmanager.exe [x]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\System32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x]
R3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\System32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x]
R3 RTL8168;Realtek 8168 NT-Treiber;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64;{b8a90375-3b37-4954-86de-f96c458c4ce2}w64;c:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys;c:\windows\SYSNATIVE\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe;c:\program files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 LPTSystemUpdater;LPT System Updater Service;c:\program files (x86)\LPT\srpts.exe;c:\program files (x86)\LPT\srpts.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x]
S2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
S2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]
S3 ATP;ASUS PS/2 Port Input Device;c:\windows\System32\drivers\AsusTP.sys;c:\windows\SYSNATIVE\drivers\AsusTP.sys [x]
S3 BtAudioBusSrv;IVT Bluetooth Audio Bus Service;c:\windows\System32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x]
S3 HIDSwitch;ASUS Wireless Radio Control;c:\windows\System32\drivers\AsHIDSwitch64.sys;c:\windows\SYSNATIVE\drivers\AsHIDSwitch64.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\System32\drivers\rtbth.sys;c:\windows\SYSNATIVE\drivers\rtbth.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-07-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-02 06:59]
.
2014-07-06 c:\windows\Tasks\Plus-HD-2.2-codedownloader.job
- c:\program files (x86)\Plus-HD-2.2\Plus-HD-2.2-codedownloader.exe [2013-12-18 19:21]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2012-03-13 09:23 1500672 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2012-03-13 09:23 1500672 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_U]
@="{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}"
[HKEY_CLASSES_ROOT\CLSID\{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}]
2012-03-13 09:23 1500672 ----a-w- c:\program files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-16 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-16 398656]
"HDAudDeck"="c:\program files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" [2012-10-25 5299320]
"ACMON"="c:\program files (x86)\ASUS\Splendid\ACMON.exe" [2012-09-11 107192]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.de/
mDefault_Search_URL = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}
mDefault_Page_URL = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX
mStart Page = hxxp://www.nationzoom.com/?type=hp&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.nationzoom.com/web/?type=ds&ts=1387395746&from=tugs&uid=HitachiXHTS545050A7E380_TE854749D71VYMD71VYMX&q={searchTerms}
uInternet Settings,ProxyServer = http=127.0.0.1:8877
uSearchAssistant = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZDr--M9JXGUna04c8v3nrz1Jk2OMIEkAFi8neL2xxaMM0fcHoNm5vmWbLPW5CN0AYPk2M35zz1PFR2aDe5RpLaMZ9H6JXSicvSp283fnUxXXUyOc4lrcEbJwOmB3P0V3j4bPsbZVwOs4xGFHw,,&q={searchTerms}
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\
FF - prefs.js: browser.startup.homepage - hxxp://rts.dsrlte.com
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - c:\program files (x86)\SupTab\SupTab.dll
BHO-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-mobilegeni daemon - c:\program files (x86)\Mobogenie\DaemonProcess.exe
BHO-{11111111-1111-1111-1111-110311301136} - c:\program files (x86)\Plus-HD-2.2\Plus-HD-2.2-bho64.dll
Toolbar-Locked - (no file)
AddRemove-Plus-HD-2.2 - c:\program files (x86)\Plus-HD-2.2\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Zeit der Fertigstellung: 2014-07-06 13:54:38
ComboFix-quarantined-files.txt 2014-07-06 11:54
.
Vor Suchlauf: 11 Verzeichnis(se), 156.612.677.632 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 156.737.949.696 Bytes frei
.
- - End Of File - - 2C2BAFB9B4AEEC5D54A724189BD85911
|
|
04.07.2014, 13:18
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9.com enfernen Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
04.07.2014, 22:28
| #9 |
| | ADWcleanerCode:
ATTFilter # AdwCleaner v3.214 - Bericht erstellt am 06/07/2014 um 22:42:13
# Aktualisiert 29/06/2014 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Witali - FAMILIEN-PC
# Gestartet von : C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4U7YANJ3\adwcleaner_3.214 (1).exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : IePluginService
Dienst Gelöscht : LPTSystemUpdater
[#] Dienst Gelöscht : Wpm
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\IePluginService
Ordner Gelöscht : C:\ProgramData\VisualBee
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Program Files (x86)\click-n-mark-5
Ordner Gelöscht : C:\Program Files (x86)\HDvid Codec V6.0
Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com
Ordner Gelöscht : C:\Program Files (x86)\LPT
Ordner Gelöscht : C:\Program Files (x86)\MediaPlayerplus
Ordner Gelöscht : C:\Program Files (x86)\Mobogenie
Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-2.2
Ordner Gelöscht : C:\Program Files (x86)\Storimbo
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Program Files (x86)\Plus-HD-2.5
Ordner Gelöscht : C:\Program Files\V-bates
Ordner Gelöscht : C:\Users\Witali\AppData\Local\BeamriseUninstall
Ordner Gelöscht : C:\Users\Witali\AppData\Local\emaze
Ordner Gelöscht : C:\Users\Witali\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Witali\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Witali\AppData\Local\VisualBeeClient
Ordner Gelöscht : C:\Users\Witali\AppData\Local\VisualBeeExe
Ordner Gelöscht : C:\Users\Witali\AppData\LocalLow\Plus-HD-2.2
Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\337Games
Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\newnext.me
Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Ordner Gelöscht : C:\Users\Witali\Documents\Mobogenie
Ordner Gelöscht : C:\Users\Witali\Documents\Optimizer Pro
Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com
Ordner Gelöscht : C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com
Datei Gelöscht : C:\Users\Witali\daemonprocess.txt
Datei Gelöscht : C:\Users\Witali\Desktop\HDVidCodec.lnk
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\nationzoom.xml
Datei Gelöscht : C:\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage
Datei Gelöscht : C:\Windows\Tasks\Plus-HD-2.2-codedownloader.job
Datei Gelöscht : C:\Windows\System32\Tasks\Plus-HD-2.2-codedownloader
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Witali\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Witali\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dnllcmllkjofnojidnaknldfehfhehoo
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322302236}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422902208}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355305536}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366306636}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344304436}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444904408}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12218CF7-AA48-478E-A74D-0CB5959CD159}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F905DC7D-36D2-4B6F-A89A-016BF87D7776}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{173ecd4c-0558-4193-8ffd-fbe078ad6048}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4554a836-d0c3-44f6-9129-73ce4dc5ae59}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{596588e5-2e46-4e09-96a1-f0c502465e6e}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c0c354a-7740-467d-be22-d7c351b8dfc4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7fe48e05-3622-471a-8840-2dc4915175fc}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322302236}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311301136}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355305536}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366306636}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311301136}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12218CF7-AA48-478E-A74D-0CB5959CD159}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F905DC7D-36D2-4B6F-A89A-016BF87D7776}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{173ecd4c-0558-4193-8ffd-fbe078ad6048}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4554a836-d0c3-44f6-9129-73ce4dc5ae59}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{596588e5-2e46-4e09-96a1-f0c502465e6e}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c0c354a-7740-467d-be22-d7c351b8dfc4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7fe48e05-3622-471a-8840-2dc4915175fc}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\ClickConnect
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\SweetIM
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\HDvid Codec V1
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Plus-HD-2.2
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\Software\HDvid Codec V1
Schlüssel Gelöscht : HKLM\Software\IePlugin
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions
Schlüssel Gelöscht : HKLM\Software\MediaPlayerplus
Schlüssel Gelöscht : HKLM\Software\nationzoomSoftware
Schlüssel Gelöscht : HKLM\Software\Plus-HD-2.2
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\SweetIM
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDvid Codec V1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerplus
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-2.2
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SupTab
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\installedbrowserextensions
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16798
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v30.0 (de)
[ Datei : C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\prefs.js ]
Zeile gelöscht : user_pref("extensions.a34f57b0c8cdb4914818c928df47c6c4f3a243122a6fc40c9a1e6ba11e930da09com45971.45971.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.InstallationThankYouPage", false);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.InstallationTime", 1387394484);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036_dbWasSet", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036_dbWasSet_FF25_FIX", true[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.active", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.addressbar", "NA");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.addressbarenhanced", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncdb.was_copied", "true");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncdb_dbWasSet", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncdb_dbWasSet_FF25_FIX", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncinternaldb.was_copied", "true");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncinternaldb_dbWasSet", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.asyncinternaldb_dbWasSet_FF25_FIX", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.backgroundver", 3);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.certdomaininstaller", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.changeprevious", false);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallationTime.value", "%221387394484%22");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22000222%22%2C%22sub_id%22%3A%220%22%2C%22uz[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.description", "Turn YouTube videos to High Definition by default");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.domain", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.enablesearch", false);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.homepage", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.iframe", false);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%220EF3387AB5254DAAB70BD32C19209[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22000222%22%2C%22sub_id%22%3A%220%22%2C%[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22000222%22%2C%22sub_id%22%3A%220%2[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%220EF3387AB5254DAAB70B[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_appVer.value", "227");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_lastVersion.value", "1");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_meta.value", "%7B%7D");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_nextCheck.expiration", "Sun Jul 06 2014 15:01:25 GMT+0200");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_nextCheck.value", "true");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.Resources_queue.value", "%7B%7D");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.__194_lastCheck__.expiration", "Sun Jul 06 2014 10:24:00 GMT+0200");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.__194_lastCheck__.value", "true");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%220EF3387A[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_bundledWithHash.value", "null");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00 GMT+0[...]
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.lastDailyReport", "1404629740822");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.lastUpdate", "1404630012467");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.manifesturl", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.name", "Plus-HD-2.2");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.newtab", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.opensearch", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.pluginsurl", "hxxp://js.demogensrv.com/plugin/apps/33036/plugins/na/ff/plugins.json");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.pluginsversion", 215);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.publisher", "Plus HD");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.searchstatus", 0);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.setnewtab", false);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.thankyou", "");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.updateinterval", 360);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.33036.ver", 227);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.apps", "33036");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.bic", "14676aabc5449fec3b077edf343695ed");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.cid", 33036);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.firstrun", false);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.hadappinstalled", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.installationdate", 1404629733);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.modetype", "production");
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.reportInstall", true);
Zeile gelöscht : user_pref("extensions.a4fdacf00e9c44ad5b4cfbf9800f184f63685711674e04973936f860cd2a102a9com33036.statsDailyCounter", 1);
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14676aabc5449fec3b077edf343695ed");
-\\ Google Chrome v
*************************
AdwCleaner[R0].txt - [32916 octets] - [06/07/2014 22:40:32]
AdwCleaner[S0].txt - [26947 octets] - [06/07/2014 22:42:13]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [27008 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8 x64
Ran by Witali on 06.07.2014 at 22:51:50,44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Program Files (x86)\hdvid codec v1"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.07.2014 at 23:01:24,05
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2014
Ran by Witali (administrator) on FAMILIEN-PC on 06-07-2014 23:13:15
Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPLService.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Tlapia) C:\Program Files (x86)\sysTPL\sysTPL.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Farbar) C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5299320 2012-10-25] (VIA)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364032 2012-08-15] (IVT Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [sysTPL] => C:\Program Files (x86)\sysTPL\sysTPL.exe [1244440 2014-01-24] (Tlapia)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
ShellIconOverlayIdentifiers: AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:8877
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzuzy0CtB0AyBtDyEzztD0Dzy0ByCtAtA0BtN0D0Tzu0SyBtCtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=501081809&ir=
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995
FF Homepage: hxxp://rts.dsrlte.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\searchplugins\keepmysearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1578496 2012-08-14] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-08-14] (IVT Corporation) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 sysTPLMonitor.exe; C:\Program Files (x86)\sysTPL\sysTPLMonitor.exe [399640 2014-01-24] (Tlapia)
R2 sysTPLService.exe; C:\Program Files (x86)\sysTPL\sysTPLService.exe [400664 2014-01-24] (Tlapia)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [62848 2012-11-20] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-10] (Avira Operations GmbH & Co. KG)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthHFEnum;
S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
S3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-14] (Ralink Technology, Corp.)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [34912 2012-06-15] (Ralink Corporation.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U0 msahci;
S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-06 23:01 - 2014-07-06 23:01 - 00000808 _____ () C:\Users\Witali\Desktop\JRT.txt
2014-07-06 22:51 - 2014-07-06 22:51 - 00000000 ____D () C:\Windows\ERUNT
2014-07-06 22:41 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-06 22:38 - 2014-07-06 22:42 - 00000000 ____D () C:\AdwCleaner
2014-07-06 13:54 - 2014-07-06 13:54 - 00028227 _____ () C:\ComboFix.txt
2014-07-06 13:47 - 2014-07-06 13:54 - 00000000 ____D () C:\Qoobox
2014-07-06 13:47 - 2014-07-06 13:54 - 00000000 ____D () C:\ComboFix
2014-07-06 13:47 - 2014-07-06 13:53 - 00000000 ____D () C:\Windows\erdnt
2014-07-06 13:47 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-06 13:47 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-06 13:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-06 13:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-06 13:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-06 13:47 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2014-07-06 13:47 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-06 13:47 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-06 13:47 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-06 12:26 - 2014-07-06 12:26 - 00026655 _____ () C:\Users\Witali\Desktop\FRST.txt
2014-07-06 12:26 - 2014-07-06 12:26 - 00023994 _____ () C:\Users\Witali\Desktop\Addition.txt
2014-07-06 12:16 - 2014-07-06 23:13 - 00000000 ____D () C:\FRST
2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml
2014-07-06 10:27 - 2014-07-06 22:46 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-06 10:26 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-06 10:26 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-06 10:26 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-06 09:53 - 2014-07-06 10:39 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe
==================== One Month Modified Files and Folders =======
2014-07-06 23:14 - 2013-06-02 22:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-06 23:13 - 2014-07-06 12:16 - 00000000 ____D () C:\FRST
2014-07-06 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru
2014-07-06 23:01 - 2014-07-06 23:01 - 00000808 _____ () C:\Users\Witali\Desktop\JRT.txt
2014-07-06 23:00 - 2013-05-16 18:36 - 00003590 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-215413311-585589717-95820281-1001
2014-07-06 22:58 - 2013-01-22 21:19 - 01635051 _____ () C:\Windows\WindowsUpdate.log
2014-07-06 22:51 - 2014-07-06 22:51 - 00000000 ____D () C:\Windows\ERUNT
2014-07-06 22:46 - 2014-07-06 10:27 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 22:46 - 2013-05-16 18:29 - 00000401 _____ () C:\Users\Witali\AppData\Roaming\sp_data.sys
2014-07-06 22:45 - 2012-08-15 19:46 - 00000739 _____ () C:\Windows\SysWOW64\bscs.ini
2014-07-06 22:45 - 2012-08-02 15:24 - 00025170 _____ () C:\Windows\PFRO.log
2014-07-06 22:45 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-06 22:45 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-06 22:42 - 2014-07-06 22:38 - 00000000 ____D () C:\AdwCleaner
2014-07-06 22:42 - 2013-12-11 00:10 - 00001059 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-06 22:42 - 2013-05-16 18:25 - 00000000 ____D () C:\Users\Witali
2014-07-06 22:27 - 2013-12-11 00:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-06 13:54 - 2014-07-06 13:54 - 00028227 _____ () C:\ComboFix.txt
2014-07-06 13:54 - 2014-07-06 13:47 - 00000000 ____D () C:\Qoobox
2014-07-06 13:54 - 2014-07-06 13:47 - 00000000 ____D () C:\ComboFix
2014-07-06 13:54 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default
2014-07-06 13:53 - 2014-07-06 13:47 - 00000000 ____D () C:\Windows\erdnt
2014-07-06 13:53 - 2012-07-26 07:26 - 00000215 _____ () C:\Windows\system.ini
2014-07-06 13:44 - 2014-02-18 14:14 - 00000000 ____D () C:\Program Files (x86)\sysTPL
2014-07-06 12:26 - 2014-07-06 12:26 - 00026655 _____ () C:\Users\Witali\Desktop\FRST.txt
2014-07-06 12:26 - 2014-07-06 12:26 - 00023994 _____ () C:\Users\Witali\Desktop\Addition.txt
2014-07-06 11:21 - 2014-07-06 11:21 - 00626510 _____ () C:\LOG1.Xml
2014-07-06 10:39 - 2014-07-06 09:53 - 00000468 _____ () C:\Users\Witali\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
2014-07-06 10:26 - 2014-07-06 10:26 - 00001100 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 10:26 - 2014-07-06 10:26 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-06 09:01 - 2012-07-26 07:26 - 00000226 _____ () C:\Windows\win.ini
2014-07-06 08:59 - 2013-06-02 22:11 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-06 08:56 - 2013-06-01 11:22 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-01 20:12 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-06-23 22:16 - 2014-06-23 22:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-14 21:36 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-07 16:07 - 2013-12-18 23:36 - 00000000 ____D () C:\Users\Witali\Desktop\Alte Firefox-Daten
2014-06-07 15:45 - 2014-06-07 15:45 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Witali\Downloads\SpyHunter-installer.exe
2014-06-07 15:26 - 2013-06-01 11:22 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
Some content of TEMP:
====================
C:\Users\Witali\AppData\Local\Temp\avgnt.exe
C:\Users\Witali\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-06 12:05
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Es wurde keine Addition.txt erstellt.Mfg. Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-07-2014
Ran by Witali at 2014-07-06 23:28:51
Running from C:\Users\Witali\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HKKNIXYH
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.4.117.01527 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 3.4.117.01527 - Alcor Micro Corp.) Hidden
ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.8 - ASUS)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.4 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.9 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.9 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.0.4 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 1.0.36 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.03.0005 - ASUS)
ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.7 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.9.120 - ASUS Cloud Corporation)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4126.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.) Hidden
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0025 - ASUS)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.450 - Avira)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
HDvid Codec V6.0 (HKLM-x32\...\HDvid Codec V6.0) (Version: 1.31.153.0 - installdaddy) <==== ATTENTION
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2828 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Ralink Bluetooth Stack64 (HKLM\...\{ED818A3C-3DF5-CDCF-3DB2-A646D7B31A16}) (Version: 9.0.717.0 - Ralink Corporation)
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shopping Helper Smartbar Engine (HKCU\...\{0ecd4143-81ca-459f-9b0d-f67a45b6b073}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
sysTPL (HKLM-x32\...\{4B74BC31-B353-4B8F-8CBE-DAB4FF326FF1}) (Version: 1.4.1.2 - Tlapia) <==== ATTENTION
VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
Windows Driver Package - ASUS (ATP) Mouse (11/09/2012 1.0.0.153) (HKLM\...\5AB9160B769DD2E134ADCB8010377DECA2479378) (Version: 11/09/2012 1.0.0.153 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.1 - ASUS)
==================== Restore Points =========================
17-05-2014 19:49:05 Geplanter Prüfpunkt
06-07-2014 10:59:34 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2012-07-26 07:26 - 2014-07-06 13:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {4B2C7400-D249-4248-93BA-0FC16AE948DC} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-08-22] (ASUSTeK Computer Inc.)
Task: {558D434A-C25F-4F8B-B1D7-E77F2F2EB591} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2012-11-20] (AsusTek)
Task: {7FFC4441-7728-47DF-8BFB-9636438EB65B} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {A9F285AF-5B73-40C9-A53E-58803D1A1E5C} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {B5514C22-04DD-4026-943F-B9735787FABD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-06] (Adobe Systems Incorporated)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CE8409E8-A7F3-4719-B979-6AF6C6503B43} - \Plus-HD-2.2-codedownloader No Task File <==== ATTENTION
Task: {E1B64C2B-BA2A-4C45-AEFF-187843092D8B} - System32\Tasks\ASUS Patch for VIA Audio => C:\Windows\system32\AsPatchViaAudio.exe [2012-11-07] (ASUSTek Computer INC.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2012-08-24 19:26 - 2012-08-24 19:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2013-01-22 21:05 - 2012-10-25 11:26 - 00078456 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-01-22 21:05 - 2012-10-25 11:26 - 00386168 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2012-11-22 05:28 - 2012-08-15 19:52 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2012-08-14 16:13 - 2012-08-14 16:13 - 00009728 _____ () C:\Windows\system32\BsHelpCSps.dll
2012-07-26 11:48 - 2012-07-26 11:46 - 00170864 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2012-08-14 16:11 - 2012-08-14 16:11 - 00022528 _____ () C:\Windows\SYSTEM32\BsTrace.dll
2012-08-14 16:13 - 2012-08-14 16:13 - 00009728 _____ () C:\Windows\SYSTEM32\BsHelpCSps.dll
2012-08-14 16:13 - 2012-08-14 16:13 - 00052736 _____ () C:\Windows\SYSTEM32\BlueSoleilCSps.dll
2012-09-11 16:01 - 2012-09-11 16:01 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2012-08-14 16:16 - 2012-08-14 16:16 - 00072192 _____ () C:\Windows\SYSTEM32\BsProfilefunc.dll
2012-08-15 19:20 - 2012-08-15 19:20 - 00356352 _____ () C:\Windows\SYSTEM32\BsExtendFunc.dll
2013-01-22 21:03 - 2012-06-25 12:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-07-06 13:51:58.619
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 30%
Total physical RAM: 3979.67 MB
Available physical RAM: 2764.69 MB
Total Pagefile: 4747.67 MB
Available Pagefile: 3414.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:145.8 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Data) (Fixed) (Total:258.15 GB) (Free:258.03 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 04A53D1B)
Partition: GPT Partition Type.
==================== End Of Log ============================
|
|
05.07.2014, 22:20
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9.com enfernen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:8877
FF Homepage: http://rts.dsrlte.com
S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [X]
C:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
06.07.2014, 21:44
| #11 |
| | FixlogCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-07-2014 01
Ran by Witali at 2014-07-08 22:45:08 Run:1
Running from C:\Users\Witali\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:8877
FF Homepage: hxxp://rts.dsrlte.com
S1 {b8a90375-3b37-4954-86de-f96c458c4ce2}w64; system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys [X]
C:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
Firefox homepage deleted successfully.
{b8a90375-3b37-4954-86de-f96c458c4ce2}w64 => Service deleted successfully.
"C:\windows\system32\drivers\{b8a90375-3b37-4954-86de-f96c458c4ce2}w64.sys" => File/Directory not found.
==== End of Fixlog ====
|
|
07.07.2014, 11:04
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9.com enfernen Okay, dann Kontrollscans mit MBAM und ESET bitte: Downloade Dir bitte  Malwarebytes Anti-Malware
ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
|
07.07.2014, 20:50
| #13 |
| | V9.com enfernenCode:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 09.07.2014 Suchlauf-Zeit: 18:04:08 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.07.07.06 Rootkit Datenbank: v2014.07.03.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8 CPU: x64 Dateisystem: NTFS Benutzer: Witali Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 280366 Verstrichene Zeit: 20 Min, 4 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 6 PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In Quarantäne, [e9c997057b0033034978f8bd27db2ed2], PUP.Optional.HDVidCndec.A, HKLM\SOFTWARE\WOW6432NODE\HDvid Codec V6.0, In Quarantäne, [654dc2dafd7e25117f399a3c4eb4b14f], PUP.Optional.Feven.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\APPDATALOW\SOFTWARE\Feven 2.5, Löschen bei Neustart, [11a13c601962b87e626f22b344be7987], PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-2.2, Löschen bei Neustart, [2c8666360873ab8b4b58884538ca0df3], PUP.Optional.Ciuvo.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\ciuvo.com, Löschen bei Neustart, [fcb6a0fc710a67cf5af49f17f40e9070], PUP.Optional.SuperFish.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, Löschen bei Neustart, [f2c0e4b8037840f6c4896353ae547a86], Registrierungswerte: 2 PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Mysearchdial, In Quarantäne, [e9c997057b0033034978f8bd27db2ed2] PUP.Optional.QuickStart.A, HKU\S-1-5-21-215413311-585589717-95820281-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, Löschen bei Neustart, [367c85173d3ebe78125a3e7a62a035cb] Registrierungsdaten: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[ac066d2f9fdc4ee8510031651be952ae] Ordner: 0 (No malicious items detected) Dateien: 1 PUP.Optional.SmartBar, C:\Windows\Installer\MSI1015.tmp, In Quarantäne, [436fbddfb0cb270f81affe3035cb639d], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=ffe244d527e7c54abb0d5a62572d8424
# engine=19064
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-07-09 07:47:50
# local_time=2014-07-09 09:47:50 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 13836 34856892 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 9156474 32218745 0 0
# scanned=163804
# found=135
# cleaned=0
# scan_time=3361
sh=BA8348DE19AF57870C0C3FDD2E45A38DD3142FE4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\click-n-mark-5\45182.xpi.vir"
sh=6965D3FB91F97659F6BE8F2AA0BD50B236EE3972 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvid Codec V6.0\45971.xpi.vir"
sh=2B494D322B2CB30DAB95FD9181CB8609676C8951 ft=1 fh=6f5e9ef43a516102 vn="Win32/Toolbar.CrossRider.Q evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvid Codec V6.0\utils.exe.vir"
sh=AFDC90D93584CB36FFAC62B8224E4B56D399789B ft=1 fh=184bf1af47e40ccd vn="Win32/Packed.ScrambleWrapper.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvidCodec.com\HDvidCodecIE.exe.vir"
sh=B9AE60BC8151665CBD16E57FC89210261E7918D8 ft=1 fh=e96d86828d666d4e vn="Win32/Packed.ScrambleWrapper.G evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HDvidCodec.com\hdvidextsetup.exe.vir"
sh=C01E55536CE063A3AD17513FD7CAF46323A93BBB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MediaPlayerplus\54246.crx.vir"
sh=D912B10B787E799DDFD38248B6D3BCEA41BBB5E7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MediaPlayerplus\54246.xpi.vir"
sh=FDA8505DD607B974C832A3AD139687EDB2A89E5B ft=1 fh=adcc2a161cc8c55f vn="Variante von Win32/Packed.VMDetector.E evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MediaPlayerplus\utils.exe.vir"
sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\nengine.dll.vir"
sh=63B12CC74709949A898CAE5C352AC875FC011787 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\33036.crx.vir"
sh=850D43D83BCCC7AC32B6309C363BD31590F5919B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\33036.xpi.vir"
sh=BF70F55F165966A6F6B8CB3EC98FD015187CDEE0 ft=1 fh=6c1ae11ac5fc7121 vn="Variante von Win32/Toolbar.CrossRider.V evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-bg.exe.vir"
sh=9A02BF450CAA8E0623E7183DFD3814E7381079A8 ft=1 fh=df0f09567720cff3 vn="Variante von Win32/Toolbar.CrossRider.AA evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil.exe.vir"
sh=7ECC99C45B856C7995CF55497CC65DE7A31F63FD ft=1 fh=3fb6d963abe5dcf8 vn="Variante von Win64/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.2\Plus-HD-2.2-buttonutil64.exe.vir"
sh=E8A50F19A2B467710EC3FEC784B210692F528C2E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.5\33438.crx.vir"
sh=A4BFD809873E09D63CBB41E2BC28F8AF90478AB1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-2.5\33438.xpi.vir"
sh=95D8C7F2851240F836D46EBD0DCB0BBAE3C9C3C8 ft=1 fh=c39b2415a29978f2 vn="Variante von Win32/ELEX.AD evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\IePluginService\PluginService.exe.vir"
sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Local\genienext\nengine.dll.vir"
sh=9D7E00EC736140394D5885417303D94D44553A41 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194.js.vir"
sh=558386320B8441891EF80A69E8986B4D737DDFDF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Roaming\Mozilla\Firefox\Profiles\r5bdjt1m.default-1402150023995\Extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91.js.vir"
sh=731FD074CCE94C1B6EE53BFE5E02E87457E32CA6 ft=1 fh=88eaa63364a03904 vn="Win32/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Witali\AppData\Roaming\SupTab\SupTab.dll.vir"
sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\102_dealply_m.js.vir"
sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\105_corticas_m.js.vir"
sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\117_coupons_intext_ads_5_m.js.vir"
sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\119_similar_web_m.js.vir"
sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\120_luck_m.js.vir"
sh=E106EF12FBA54AD37717391E3A2A8B7416B0A30E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\123_intext_adv_m.js.vir"
sh=6376FE6DF3E7E394FAE45C47A1FDE1CF41CAFBFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js.vir"
sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\125_arcadi2_m.js.vir"
sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\126_revizer_ws_m.js.vir"
sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\127_revizer_p_m.js.vir"
sh=97C406784CD0DEA751BE4E02EB82633F1F88CA1F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\128_superfish_pricora_m.js.vir"
sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\135_arcadi3_m.js.vir"
sh=8BD506BDCB470B73FE581B4DA1769AD9FBCAF0D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\138_getdeal_m.js.vir"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\141_corticas_ru_m.js.js.vir"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\142_intext_fa_m.js.vir"
sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\159_cortica_rollover_m.js.vir"
sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\171_arcadi2_sourceID_m.js.vir"
sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js.vir"
sh=220B01F705C009D135199A26C85EB536B16C9D6E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\175_coolmirage_m.js.vir"
sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"
sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\179_revizer_p_dynamic_m.js.vir"
sh=C9A8D5AE55FA65E00EE75767C5D2E9B56041858D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\180_bpo_serp_m.js.vir"
sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\184_noproblemppc_m.js.vir"
sh=8D569DDCE3A3E2CB97D920A1744F1AE16C2CE3B3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\189_active_sanity.js.vir"
sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\190_pops_5_m.js.vir"
sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\191_ciuvo_m.js.vir"
sh=F913C9EE03B4CCE8680961DBF505FA17BAC140F0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js.vir"
sh=28F70DF1D28964084CCA8382AE4ADA97EF0C4C0A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js.vir"
sh=CE36251B85631AF0D145BF086D14272593AB253A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\194_retargeting_bi_m.js.js.vir"
sh=71B07387F9271CF80E8CC3C65ACB4873025E47BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\195_icm_convertmedia_m.js.vir"
sh=0A113BDC19C5B96609992E6C9D972B814B918109 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\197_kreapixel_pops_m.js.vir"
sh=9A67AB016B12405F2FF8E65A64A035E46421F243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js.vir"
sh=6DF0914CB2A51AA8E7F1BDDEC414B8969C38A6F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\199_superfish_no_coupons_plushd_m.js.vir"
sh=61DB672F16D1D9053F6B8D591E51C53BA3165770 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\200_foxydeal_m.js.vir"
sh=392B3EB529AF22E57C2AC4076E7702176010694C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\204_pricedetect_m.js.vir"
sh=CEFE3720E5F8912F0E75E7966BA64F23C0DAA130 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Witali\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfakeonomonapccoamcmdgpoaicnpnoo\1.25.124_0\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=50734BE26157FCF2996922F76B9AF0A0088EFD2A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\2sfzx2xn.default-1387402583828\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\91_monetizationLoader.js.js"
sh=723D315206A52C4CE6BE51080EAE93F13ACDBD86 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\2sfzx2xn.default-1387402583828\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194_retargeting_bi_m.js.js"
sh=50734BE26157FCF2996922F76B9AF0A0088EFD2A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\2sfzx2xn.default-1387402583828\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91_monetizationLoader.js.js"
sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\102_dealply_m.js"
sh=FC28D62EDB6C0C353E97185BB4B6DC87F5EDED14 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\103_intext_5_m.js"
sh=1AA56806D2545B3773D7C5CCEAE82353BDBB575F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\104_jollywallet_m.js"
sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\105_corticas_m.js"
sh=30AFCC1D03C04E68202593C239C4964A29BA2E15 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\108_icm_m.js"
sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\117_coupons_intext_ads_5_m.js"
sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\119_similar_web_m.js"
sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\120_luck_m.js"
sh=AB97A715437A6FC107817A76C99ED8FBCC81BBAD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\123_intext_adv_m.js"
sh=B0DF9F21E3E69C188775A6F9C466B19932C9238A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js"
sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\125_arcadi2_m.js"
sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\126_revizer_ws_m.js"
sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\127_revizer_p_m.js"
sh=28ECD06AF56EB424F74BB63563BC79E57C15C2D9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\128_superfish_pricora_m.js"
sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\135_arcadi3_m.js"
sh=8BD506BDCB470B73FE581B4DA1769AD9FBCAF0D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\138_getdeal_m.js"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\141_corticas_ru_m.js.js"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\142_intext_fa_m.js"
sh=943F60E8E3F306CF4EE6E844D06FAC7552EE1856 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\155_ibario_pops_m.js"
sh=0CEB1A073B87956FD1F21F8425B8F76015B1BCD8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js"
sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\159_cortica_rollover_m.js"
sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\171_arcadi2_sourceID_m.js"
sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js"
sh=220B01F705C009D135199A26C85EB536B16C9D6E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\175_coolmirage_m.js"
sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\178_revizer_ws_dynamic_m.js"
sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\179_revizer_p_dynamic_m.js"
sh=73374EAD120BC84FC9C0C827196BCAEB3C20EEB6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\180_bpo_serp_m.js"
sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\184_noproblemppc_m.js"
sh=C450AA599E6408FB93F66538C89B8D8B7799642D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\189_active_sanity.js"
sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\190_pops_5_m.js"
sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\191_ciuvo_m.js"
sh=4629F05E0B2C52EA9DD470252C07E2B5EB1FCDF7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js"
sh=D164DC4FA3FF51AB25A3EA8E4E916AC5D11E69DD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js"
sh=F614992AE877F819DE4A2E45D424DDF5A0DC6F4C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\194_retargeting_bi_m.js.js"
sh=25D0BBF53504FF0F057FCD6656A4672F28744BCF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\91_monetizationLoader.js.js"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\34f57b0c-8cdb-4914-818c-928df47c6c4f@3a243122-a6fc-40c9-a1e6-ba11e930da09.com\extensionData\plugins\93_superfish_no_coupons_m.js"
sh=B5ED1E639B7D9AD3C0F3C81E5AA2E9F88DDFEB65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\102_dealply_m.js"
sh=0B21E41A47E579081215969619861996F43524B1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\105_corticas_m.js"
sh=7F7359D9F0900191297BFDF5B85D5CDF588CD9EA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\117_coupons_intext_ads_5_m.js"
sh=FE3704EEF2BFB9DCA552518E7AEC9D6AFC1ED15C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\119_similar_web_m.js"
sh=35CE3B76158991DDEA79CAF0C1F826A7EE18A820 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\120_luck_m.js"
sh=E106EF12FBA54AD37717391E3A2A8B7416B0A30E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\123_intext_adv_m.js"
sh=6376FE6DF3E7E394FAE45C47A1FDE1CF41CAFBFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js"
sh=D295E3F253D0942BD3114F61DEF5D78DD0FC5BFB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\125_arcadi2_m.js"
sh=3CFE90E3825BB08EB9B4222552FAC05360188207 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\126_revizer_ws_m.js"
sh=031F6CD140ED363E0F137E627AE1FE4DED5714E2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\127_revizer_p_m.js"
sh=97C406784CD0DEA751BE4E02EB82633F1F88CA1F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\128_superfish_pricora_m.js"
sh=BB2946641B9FEB2F76D281220A52220336E454E1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\135_arcadi3_m.js"
sh=8BD506BDCB470B73FE581B4DA1769AD9FBCAF0D8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\138_getdeal_m.js"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\141_corticas_ru_m.js.js"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\142_intext_fa_m.js"
sh=441E98540BDEC21B7E534C2B317AE91925F6CEE7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\159_cortica_rollover_m.js"
sh=C8B01A1511A63AEC3D40B1D045034D76B1E85EFD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\171_arcadi2_sourceID_m.js"
sh=078C314715CCC0DE7547172AD4B810FD754115C6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js"
sh=220B01F705C009D135199A26C85EB536B16C9D6E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\175_coolmirage_m.js"
sh=CFFCA6A4EE3A0DF2319440491BB297ADEC6EEF37 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\178_revizer_ws_dynamic_m.js"
sh=ADB54DE323736C99B4191A45B478B70DF1B7B945 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\179_revizer_p_dynamic_m.js"
sh=C9A8D5AE55FA65E00EE75767C5D2E9B56041858D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\180_bpo_serp_m.js"
sh=24E6E5A06D24A5CC24C0B705FDB089FD4FEC70AC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\184_noproblemppc_m.js"
sh=C98AEA90C3721B5A74EEAA39FD98797405C0187B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\189_active_sanity.js"
sh=6B3C17F9D4BD40BFCF87831196C40DBA3C4DB14C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\190_pops_5_m.js"
sh=9F07ACC96BC246F25975479E9382CDF88E7D8711 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\191_ciuvo_m.js"
sh=F913C9EE03B4CCE8680961DBF505FA17BAC140F0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js"
sh=28F70DF1D28964084CCA8382AE4ADA97EF0C4C0A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js"
sh=CE36251B85631AF0D145BF086D14272593AB253A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\194_retargeting_bi_m.js.js"
sh=DA00D43895202044AAF7EFA3BD388B190B155367 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\195_icm_convertmedia_m.js"
sh=0A113BDC19C5B96609992E6C9D972B814B918109 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\197_kreapixel_pops_m.js"
sh=9A67AB016B12405F2FF8E65A64A035E46421F243 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js"
sh=6DF0914CB2A51AA8E7F1BDDEC414B8969C38A6F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\199_superfish_no_coupons_plushd_m.js"
sh=61DB672F16D1D9053F6B8D591E51C53BA3165770 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\200_foxydeal_m.js"
sh=392B3EB529AF22E57C2AC4076E7702176010694C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\204_pricedetect_m.js"
sh=25D0BBF53504FF0F057FCD6656A4672F28744BCF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\91_monetizationLoader.js.js"
sh=0C5AC30A082628E85A9A8B68EF5E5EAFA46F0CC7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Witali\Desktop\Alte Firefox-Daten\uc1kfz02.default\extensions\4fdacf00-e9c4-4ad5-b4cf-bf9800f184f6@36857116-74e0-4973-936f-860cd2a102a9.com\extensionData\plugins\93_superfish_no_coupons_m.js"
sh=3947DC53990D4C0F5E5F655818233800CF9F601B ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\f762f.msi"
|
|
07.07.2014, 20:56
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | V9.com enfernen TFC - Temp File Cleaner Lade dir  TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
Sieht soweit ok aus  Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Ist aber nur optional. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden. Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie ) Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird. Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
Linear-Darstellung
