Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Popup Werbung beim Surfen

Popup Werbung beim Surfen


Log-Analyse und Auswertung: Popup Werbung beim Surfen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 13.05.2015, 19:48   #1
Mugel80
 
Popup Werbung beim Surfen - Standard

Popup Werbung beim Surfen


Hallo,

ich habe von meinem Arbeitkollegen seinen PC bekommen.
Er hat folgendes Problem:

Nach der Installation von einem Youtube-Downloader bekam er beim Surfen Werbung eingeblendet. Das Internet wurde dann auch langsamer. Unter Systemsteuerung -> Programme und Funktionen fand ich folgende unerwünschte Programme: istartsurf und omniboxes

Folgende Aktionen habe ich gemacht:

1. Unter Programme istartsurf und omniboxes deinstalliert
2. Mit der Botfrei-DVD gebootet, gescant und Schädlinge entfernt. Log als Anhang angefügt.
3. Den Rechner mit AdwCleaner gescant und gereinigt.
Hier die Logs:
Code:
ATTFilter
# AdwCleaner v4.204 - Bericht erstellt 13/05/2015 um 19:52:03
# Aktualisiert 12/05/2015 von Xplode
# Datenbank : 2015-05-12.2 [Lokal]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : Alex - ALEX-PC
# Gestarted von : F:\Neuer Ordner\AdwCleaner_4.204.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : cherimoya
[#] Dienst Gelöscht : globalUpdate
[#] Dienst Gelöscht : globalUpdatem
[#] Dienst Gelöscht : tammgF119
[#] Dienst Gelöscht : tammgR119
[#] Dienst Gelöscht : WindowsMangerProtect

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\WindowsMangerProtect
Ordner Gelöscht : C:\ProgramData\SecurityUtility
Ordner Gelöscht : C:\Program Files (x86)\PepperZip
Ordner Gelöscht : C:\Users\Alex\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Alex\AppData\Local\Crossbrowse
Ordner Gelöscht : C:\Users\Alex\AppData\Local\UnicoBrowser
Ordner Gelöscht : C:\Users\Alex\AppData\Local\00000000-1427918451-0000-0000-448A5B6300F1
Ordner Gelöscht : C:\Users\Alex\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
Ordner Gelöscht : C:\Users\Alex\AppData\Roaming\RHEng
Ordner Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\qbsxkpxq.default\Extensions\sparpilot@sparpilot.com
Ordner Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\Extensions\sparpilot@sparpilot.com
Ordner Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\Extensions\searchengine@gmail.com
Ordner Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\Extensions\quick_searchff@gmail.com
Datei Gelöscht : C:\END
Datei Gelöscht : C:\claraInstaller.txt
Datei Gelöscht : C:\Windows\patsearch.bin
Datei Gelöscht : C:\Windows\shost.bin
Datei Gelöscht : C:\Windows\System32\drivers\tammgf119.sys
Datei Gelöscht : C:\Windows\System32\drivers\tammgr119.sys
Datei Gelöscht : C:\Windows\System32\drivers\Msft_Kernel_webTinstMKTN_01009.Wdf
Datei Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\searchplugins\istartsurf.xml
Datei Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\qbsxkpxq.default\user.js
Datei Gelöscht : C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\searchplugins\omniboxes.xml

***** [ Geplante Tasks ] *****

Task Gelöscht : globalUpdateUpdateTaskMachineCore
Task Gelöscht : globalUpdateUpdateTaskMachineUA
Task Gelöscht : Run_Browser

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [searchengine@gmail.com]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Schlüssel Gelöscht : HKCU\Software\Classes\PepperZip
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CF50C82-4C4B-43E9-B1B2-15CB1BD0C193}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9582D7B-F24A-441D-9D26-450D58F3CD17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B5C4833B-847B-49CD-8EBE-CDD9B43C882F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{14EF423E-3EE8-44AE-9337-07AC3F27B744}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2299856A-6506-42E3-A34F-CD35A47C1B19}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A9582D7B-F24A-441D-9D26-450D58F3CD17}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}
Schlüssel Gelöscht : HKCU\Software\Boost
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\PepperZip
Schlüssel Gelöscht : HKCU\Software\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}
Schlüssel Gelöscht : HKCU\Software\Crossbrowse
Schlüssel Gelöscht : HKCU\Software\UnicoBrowser
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\SOFTWARE\Boost
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\istartsurfSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\Clara
Schlüssel Gelöscht : HKLM\SOFTWARE\omniboxesSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\Crossbrowse
Schlüssel Gelöscht : HKU\.DEFAULT\Software\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:50561;hxxps=127.0.0.1:50561
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17728

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v37.0.2 (x86 de)

[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("browser.search.defaultenginename", "omniboxes");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.alias", "omniboxes");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.iconURL", "hxxp://www.omniboxes.com/favicon.ico");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.name", "omniboxes");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.url", "hxxp://www.omniboxes.com/web/?type=ds&ts=1427912391&from=obw&uid=ST1000DX001-1CM162_Z1DBNT6AXXXXZ1DBNT6A&q={searchTerms}");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("browser.search.selectedEngine", "omniboxes");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("extensions.aMGKN37049485ACPSC11936960com61365.61365.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22anthrop[...]
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("extensions.aMGKN37049485ACPSC11936960com61365.61365.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%[...]
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("extensions.crossrider.bic", "14d2580fbf9a1fb804ba62e712fb46a8");
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[uwb9h88o.default-1409761155422\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [4929 Bytes] - [01/10/2014 16:13:38]
AdwCleaner[R1].txt - [14287 Bytes] - [13/05/2015 19:50:36]
AdwCleaner[S0].txt - [3764 Bytes] - [01/10/2014 16:15:59]
AdwCleaner[S1].txt - [13029 Bytes] - [13/05/2015 19:52:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [13089  Bytes] ##########
4. Den Rechner mit JRT gescant und gereinigt.

Hier die Logs:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.0 (05.09.2015:1)
OS: Windows 7 Professional x64
Ran by Alex on 13.05.2015 at 19:54:41,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\wininit.ini



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\uwb9h88o.default-1409761155422\extensions\toolbar@web.de
Successfully deleted the following from C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\uwb9h88o.default-1409761155422\prefs.js

user_pref(browser.search.searchengine.desc, this is my first firefox searchEngine);
user_pref(browser.search.searchengine.ptid, obw);
user_pref(browser.search.searchengine.uid, ST1000DX001-1CM162_Z1DBNT6AXXXXZ1DBNT6A);
user_pref(extensions.aMGKN37049485ACPSC11936960com61365.61365.internaldb.__ICM_LITE__fifty_test_rules.value, %7B%22DE%22%3A%7B%22ALL%22%3A%5B%22anastasiadate.com%22%2C%22ww
Emptied folder: C:\Users\Alex\AppData\Roaming\mozilla\firefox\profiles\uwb9h88o.default-1409761155422\minidumps [61 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.05.2015 at 19:57:10,59
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
5. Den Rechner mit MBAM gescannt und gereinigt.
Hier die Logs:
mbam Log
Code:
ATTFilter
<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2015/05/13 20:00:22 +0200</date>
<logfile>mbam-log-2015-05-13 (20-00-20).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.01.6.1022</version>
<malware-database>v2015.05.13.04</malware-database>
<rootkit-database>v2015.04.21.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x64</arch>
<username>Alex</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>356568</objects>
<time>542</time>
<processes>1</processes>
<modules>0</modules>
<keys>21</keys>
<values>2</values>
<datas>0</datas>
<folders>20</folders>
<files>192</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<process><path>C:\ProgramData\eazyzoom\1.1.0.30\unawpui.exe</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>delete-on-reboot</action><pid>5660</pid><hash>b771187b4446d0665af9a5c3cc3920e0</hash></process>
<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>84a4d9ba3c4ebb7b3ee391b8649ea759</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>84a4d9ba3c4ebb7b3ee391b8649ea759</hash></key>
<key><path>HKLM\SOFTWARE\Ebon</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>f63262316327e056f7c872f814f1c040</hash></key>
<key><path>HKLM\SOFTWARE\Ebonmedia</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>6eba2d663d4d7abc358cadbd53b228d8</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\EbonHTML</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>9b8d0f84cebca096e787b2b926df5fa1</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\EbonURL</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>f236246f7713fb3be28dc7a472933ac6</hash></key>
<key><path>HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\EBON.EXE</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>f92f98fb0684d4628de4f27919ecdd23</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\Ebon</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>69bfd3c0404af93db9065317e421d828</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\ebon.org</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>14144251a1e905316e52fb6fd332718f</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider.C</vendor><action>success</action><hash>4adeccc74a400432b3da6b68fe05ce32</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\EbonHTML</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>9c8ccdc66c1ee1556e0089e2f70e6799</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\EbonURL</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>aa7edfb43a50ba7c6708ce9db84d27d9</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\EBON.EXE</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>e246e1b232582f0788e91c4fc93ce11f</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\RHOQIMRUGA</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>3cec3a592f5b3afce1723137ed184db3</hash></key>
<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UBUJNOBRIN</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>b771187b4446d0665af9a5c3cc3920e0</hash></key>
<key><path>HKU\S-1-5-19\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}</path><vendor>PUP.Optional.Shopperz.A</vendor><action>success</action><hash>85a3375c2268f541f5c28752b74c5fa1</hash></key>
<key><path>HKU\S-1-5-20\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}</path><vendor>PUP.Optional.Shopperz.A</vendor><action>success</action><hash>d652494a8dfd6fc771468a4f15ee9769</hash></key>
<key><path>HKU\S-1-5-21-1515967457-1878534284-2956187301-1000\SOFTWARE\I - Cinema-nv-ie</path><vendor>PUP.Optional.ICinema.A</vendor><action>success</action><hash>81a7d6bdb6d4e5514d42a4557a89f50b</hash></key>
<key><path>HKU\S-1-5-21-1515967457-1878534284-2956187301-1000_Classes\EbonHTML</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>0820c2d10486c96d86e8db9057ae5ea2</hash></key>
<key><path>HKU\S-1-5-21-1515967457-1878534284-2956187301-1000_Classes\EbonURL</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>68c0c0d30684a39391dea3c8b35258a8</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F13419A7-9DED-4BF6-9F3F-172B673847C5}</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></key>
<value><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\rhoqimruga</path><valuename>ImagePath</valuename><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><valuedata>&quot;C:\ProgramData\eazyzoom\1.1.0.30\unaapui.exe&quot; /ts2=1</valuedata><hash>3cec3a592f5b3afce1723137ed184db3</hash></value>
<value><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ubujnobrin</path><valuename>ImagePath</valuename><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><valuedata>&quot;C:\ProgramData\eazyzoom\1.1.0.30\unawpui.exe&quot; -scm</valuedata><hash>b771187b4446d0665af9a5c3cc3920e0</hash></value>
<folder><path>C:\Users\Alex\AppData\Roaming\00000000-1427911178-0000-0000-448A5B6300F1</path><vendor>PUP.Optional.MultiPlug.A</vendor><action>success</action><hash>9f898112652590a6d72bb2b4e0259769</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\00000000-1427911182-0000-0000-448A5B6300F1</path><vendor>PUP.Optional.MultiPlug.A</vendor><action>success</action><hash>2ff960332565c86e7b87b4b2b64f56aa</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\defaults</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\defaults\preferences</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\userCode</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\locale</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\locale\en-US</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></folder>
<folder><path>C:\Users\Alex\AppData\Local\Temp\comh.330497</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>e3456a293b4fe0563701b401a75c9a66</hash></folder>
<folder><path>C:\Users\Alex\AppData\Local\Temp\comh.78836</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>ff29eca778121e189b9d15a0f013bf41</hash></folder>
<folder><path>C:\ProgramData\eazyzoom</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>delete-on-reboot</action><hash>9791771c65258caa900c626d748fc040</hash></folder>
<folder><path>C:\ProgramData\eazyzoom\1.1.0.30</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>delete-on-reboot</action><hash>9791771c65258caa900c626d748fc040</hash></folder>
<folder><path>C:\ProgramData\eazyzoom\1.1.0.30\content</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></folder>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\tammg.sys</path><vendor>Rootkit.Agent.A</vendor><action>success</action><hash>23056d268bff5adc9a8770dbc73b07f9</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\tammgF.sys</path><vendor>Rootkit.Agent.A</vendor><action>success</action><hash>6fb9cdc60b7f3df98b964a018280639d</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\tammgR.sys</path><vendor>Rootkit.Agent.A</vendor><action>success</action><hash>53d5cec5a8e25ed82100b49791719a66</hash></file>
<file><path>C:\$Recycle.Bin\S-1-5-21-1515967457-1878534284-2956187301-1000\$RPCB3R4\krios64.dll</path><vendor>PUP.Optional.Shopperz.A</vendor><action>success</action><hash>5fc98d06becce254f15bff5773934db3</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\GoogleCrashHandler.exe.old2ae70c9</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>67c10c87e0aa60d6f62b202926dc1ae6</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\GoogleUpdate.exe.old2ae70ba</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>b2765c377119cc6a63beed5c46bcd729</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\goopdate.dll.old2ae70ba</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>5dcbd7bc9eec9d994fd2292092704fb1</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\goopdateres_en.dll.old2ae70c9</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>8c9c3a59c0ca64d21e03e3660101c23e</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\mytmpinstaller.exe.vir</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>b771c1d283074ee8b32c6dd5b54d4db3</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\nsn6A28.tmp</path><vendor>Trojan.Downloader</vendor><action>success</action><hash>66c24251ddadd066865da99a748f09f7</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\bes6C0A.exe</path><vendor>PUP.Optional.OfferInstaller.C</vendor><action>success</action><hash>1c0c771cf298df57134191ab9f6354ac</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\nsx6A18.tmp</path><vendor>Trojan.Downloader</vendor><action>success</action><hash>b5736b28553537ffd013360d60a3c13f</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\psmachine.dll.old2ae70e9</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>70b8fa995634f83e9f82e465738ff50b</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\psuser.dll.old2ae70d9</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>fc2cb3e00387ce68c55ce465cf33748c</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\3663.exe</path><vendor>PUP.Optional.Crossbrowse.C</vendor><action>success</action><hash>13157b188109ad89658ac68fd72b7d83</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\8052.exe</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>54d4484b35553ff7bdca59eb8c76bf41</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\8989.exe.vir</path><vendor>PUP.Optional.Crossbrowse.C</vendor><action>success</action><hash>a5839ff49feb8caad817e96cfa08857b</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\6667.exe</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>0a1e058e5b2fa5918afdb490669cb749</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\1037406.Uninstall\uninstaller.exe</path><vendor>PUP.Optional.InstallCore</vendor><action>success</action><hash>83a51281fe8c54e2803f451f92707a86</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\nsoDD73.tmp\xzjso.dll.vir</path><vendor>PUP.Optional.OutBrowse</vendor><action>success</action><hash>7aaefe95fa90112506d91a2804fe4fb1</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\777758.Uninstall\uninstaller.exe</path><vendor>PUP.Optional.InstallCore</vendor><action>success</action><hash>a2862e6503875dd9edd277ed62a0966a</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\e75c0b4a-8fda-4440-9cda-9c66c253c46f\cloud_backup_setup.exe.vir</path><vendor>PUP.Optional.MyPCBackup.SID.A</vendor><action>success</action><hash>d45490037911e84e6199e27326e0ef11</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\is1597349865\3307321_stp\uninstaller.exe</path><vendor>PUP.Optional.InstallCore</vendor><action>success</action><hash>64c4b9da107ab482437ca8bcb54d37c9</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\525200c4-c162-4558-9cae-805e63dfaa69\boost_790001_0101.exe</path><vendor>PUP.Optional.Boost.A</vendor><action>success</action><hash>f731484b0c7ebf7728aea4aa7a86f50b</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\55904989-ffe4-4eb9-ae6c-80cd2dbf507d\installer.exe</path><vendor>PUP.Optional.Crossbrowse.C</vendor><action>success</action><hash>091f31620f7b0c2af8f792c3c53da957</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\598451.Uninstall\uninstaller.exe</path><vendor>PUP.Optional.InstallCore</vendor><action>success</action><hash>db4d9102bdcd3bfb9a25273d1ae8956b</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\601571.Uninstall\uninstaller.exe</path><vendor>PUP.Optional.InstallCore</vendor><action>success</action><hash>39ef860d0e7c4ee88a352a3a32d0e41c</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\7bdcaf62-ad2b-4926-a1d2-f4458564cef6\lly_istartsurf.exe</path><vendor>PUP.Optional.IStartsurf.A</vendor><action>success</action><hash>a8804f44a7e3d85ed958c193679fd729</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\852982.Uninstall\uninstaller.exe</path><vendor>PUP.Optional.InstallCore</vendor><action>success</action><hash>c6622f64cac06fc70ab5194b7a88669a</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\872950.Uninstall\uninstaller.exe</path><vendor>PUP.Optional.InstallCore</vendor><action>success</action><hash>e04896fd0585bf7713accc989072c838</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\99a9be86-b277-4371-9810-e4568beabcb8\unicobrowser.exe</path><vendor>PUP.Optional.Clara.A</vendor><action>success</action><hash>cf59cfc44149999dc62df7ec40c1827e</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\GoogleCrashHandler.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>b0783b58107a330347dac1880df57888</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\GoogleUpdate.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>84a4d9ba3c4ebb7b3ee391b8649ea759</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\GoogleUpdateBroker.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>fa2e9df63258bf7750d195b414ee0ef2</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\GoogleUpdateOnDemand.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>a187840f404ab77fc061450499698080</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\goopdate.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>2bfd6f243a502115f22f86c3ac56926e</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\goopdateres_en.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>71b7365d484244f2021fec5d25ddac54</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\npGoogleUpdate4.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>54d4157edbafa98da87983c6dd25649c</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\psmachine.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>d15796fd523881b568b9f950f60c39c7</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\psuser.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>7cac157e107a5ed828f9ce7bf1119e62</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\GoogleCrashHandler.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>d15782118cfef343958cb3966c96a65a</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\GoogleUpdate.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>c266efa4b5d591a5f42d78d11be731cf</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\GoogleUpdateBroker.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>a4849102a3e7162052cfb594b151956b</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\GoogleUpdateOnDemand.exe</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>ed3b4d464e3c92a46bb6b495b1510cf4</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\goopdate.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>6eba9ef5a4e660d6ae73b49506fc60a0</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\goopdateres_en.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>5fc992018a00da5c68b959f011f142be</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\npGoogleUpdate4.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>f1372a69b5d51f17c75ad376dc26d12f</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\psmachine.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>e048cdc64446f0464ed31633e9197888</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\psuser.dll</path><vendor>PUP.Optional.ModGoog</vendor><action>success</action><hash>2efa286b0f7b3bfb5dc41b2e4eb4c13f</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\d29945e4-a56f-47aa-817f-02219cc16de2\3333-2080_speedchecker.exe</path><vendor>PUP.Optional.VeriBrowse.A</vendor><action>success</action><hash>83a50390d5b5102638150633fe04da26</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\6edfd1f8-dc50-46e6-9df2-a471e410c060\wie_2.19.2.6.exe</path><vendor>PUP.Optional.Wajam.A</vendor><action>success</action><hash>bb6d2e65dfab43f3a1793026d5315fa1</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\752f3b18-983a-4a2d-83c8-d37df8d76392\lly_istartsurf.exe</path><vendor>PUP.Optional.IStartsurf.A</vendor><action>success</action><hash>d4547122b9d15fd7270a66ee8581847c</hash></file>
<file><path>C:\Users\Alex\Downloads\youtube_downloader(1).exe.vir</path><vendor>PUP.Optional.DomalIQ.SID.A</vendor><action>success</action><hash>5bcdbed5a9e1fa3cf9085bfb6b9b669a</hash></file>
<file><path>C:\Users\Alex\Downloads\youtube_downloader.exe.vir</path><vendor>PUP.Optional.DomalIQ.SID.A</vendor><action>success</action><hash>51d71c77d6b4fe38ad54a7afd531b947</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\00000000-1427911178-0000-0000-448A5B6300F1\vnst78F6.tmp</path><vendor>PUP.Optional.MultiPlug.A</vendor><action>success</action><hash>9f898112652590a6d72bb2b4e0259769</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\00000000-1427911178-0000-0000-448A5B6300F1\Uninstall.exe</path><vendor>PUP.Optional.MultiPlug.A</vendor><action>success</action><hash>9f898112652590a6d72bb2b4e0259769</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\00000000-1427911182-0000-0000-448A5B6300F1\vnsi87F5.tmp</path><vendor>PUP.Optional.MultiPlug.A</vendor><action>success</action><hash>2ff960332565c86e7b87b4b2b64f56aa</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\00000000-1427911182-0000-0000-448A5B6300F1\Uninstall.exe</path><vendor>PUP.Optional.MultiPlug.A</vendor><action>success</action><hash>2ff960332565c86e7b87b4b2b64f56aa</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\crossrider_statusbar.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\button1.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\button2.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\button3.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\button4.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\button5.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\icon128.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\icon16.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\icon24.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\icon48.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\panelarrow-up.png</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\popup.html</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\skin.css</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\skin\update.css</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome.manifest</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\install.rdf</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\2bc94de33eb0d7e737a3ca3b27e02da7.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\3e40f29b1e8339b62c97e6d9507d372a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\5c4aba8261b9aacae26e47b400e9b45d.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\7ecfdfec86d637543d27ab3407fe450c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\background.html</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\browser.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\cb6a30fedc22e58e0c55f3f767236dff.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\dialog.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\e6d7e75a3209408bc46fbc8abf6c157a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\ffCoreFilesIndex.txt</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\options.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\options.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\search_dialog.xul</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\a024aff2c898bb211f0335b3f80af993.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\09c624189e57b387feab9a6a4d8c4a26.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\26df724b65e09a52f33d05e292b91c5a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\32e6e82eaffd8801c6eeeadef2754bb4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\3811ded8317ec4d8b14a7a468492f31a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\48bec52f404ccfc6ff195fa9a21cddb2.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\5781fa9ca542aeb81c6f0dddba2b794c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\5af0459bddb51d265abdcbd28813d6ff.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\95d76c882cfc895726ac69f0ef6d0334.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\a7f627cf54f331f452f0a0879d61ec2c.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\b768362a5a7e94f22572e8dc20c9146e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\b7f75d21a7e3136228888f81d51171a4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\c2f054e204e135ff322e153c62f1e85a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\dad5399110815b6167471ec206d0f554.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\f41b12b63191cf9cc69e0b7e979fbe26.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\api\f61573f31fe87ffb98a7b27e98d292ef.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\c42dbfd1f90f41d0bd87effeefdea478.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\0c5cc511cc777dc3ec9ffcea07c61ec4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\11dd8326120af40e46f2123363b7a0e6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\308ab9194001ad6333d006b265760a7a.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\3332ed9a2feab17e2e20af742dfddbbf.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\4c1413ccef8f21bd7349a52abb1b4e41.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\64bfc66524f5b4f6da830e6c0db75ae6.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\6750709134133427ae4efe69190db921.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\8a7914e04083db8ce8a248305af3e50e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\8ff97392339b8c8c63411b4bc505e634.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\ad08802dc654977dab6bbf03343f2c39.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\ae58454954dd1d5a9d5fb457be34804b.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\beaa0fc9e368809ab7b36941d2d2b06e.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\c3114715fe37fb917d7b0c181530a8d2.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\c57b8a79d9c2d2cf0835ee8d3acd64fc.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\ca34fc3b4476e5218c30a9ffe24eee31.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\ca7220d4f765b147bf3ed77eb64ce070.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\d2a1f50299361de4878fe6fb440a3611.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\dd882962529afe715ca55e0f9517ff8b.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\e720b898098b2830e48a4b513653731b.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\chrome\content\core\installer.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\defaults\preferences\prefs.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\manifest.xml</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins.json</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\102.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\13.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\14.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\16.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\17.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\180.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\192.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\195.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\200.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\220.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\223.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\233.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\246.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\253.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\273.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\281.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\288.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\289.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\337.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\339.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\345.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\354.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\376.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\378.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\380.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\390.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\391.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\397.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\399.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\4.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\47.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\64.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\7.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\78.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\9.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\plugins\91.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\userCode\background.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\extensionData\userCode\extension.js</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\uwb9h88o.default-1409761155422\extensions\MGKN37049485@ACPSC11936960.com\locale\en-US\translations.dtd</path><vendor>PUP.Optional.CrossRider.A</vendor><action>success</action><hash>899fcdc69ceecf67d62e1353c83d16ea</hash></file>
<file><path>C:\Windows\System32\Tasks\EbonmediaUpdater</path><vendor>PUP.Optional.Ebon.C</vendor><action>success</action><hash>65c3256e6a20f24468545a10867f936d</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\unawpui.exe</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>delete-on-reboot</action><hash>b771187b4446d0665af9a5c3cc3920e0</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.330497\GoogleUpdateHelper.msi</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>e3456a293b4fe0563701b401a75c9a66</hash></file>
<file><path>C:\Users\Alex\AppData\Local\Temp\comh.78836\GoogleUpdateHelper.msi</path><vendor>PUP.Optional.GlobalUpdate.A</vendor><action>success</action><hash>ff29eca778121e189b9d15a0f013bf41</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\fakaisefg.xpi</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\logo.ico</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\rirnuct.dat</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\rirnuct.lnk</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\tammg.sys</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\tammgF.sys</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\tammgR.sys</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\una3pui.dll</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\una3pui.exe</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\una3puid.dll</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\una6pui.dll</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\una6pui.exe</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\una6puid.dll</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\unadpui.exe</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\unadpuiu.dll</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\Uninstaller.exe</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\utils.exe</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\content\civoote.js</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\content\gegbieut.js</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\content\jquery4toolbar.js</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\content\nagoturfo.js</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
<file><path>C:\ProgramData\eazyzoom\1.1.0.30\content\tovvujeqh.js</path><vendor>PUP.Optional.EazyZoom.A</vendor><action>success</action><hash>9791771c65258caa900c626d748fc040</hash></file>
</items>
</mbam-log>

 

Themen zu Popup Werbung beim Surfen
fehlercode 0x5, fehlercode 0xe0434352, fehlercode 80073712, fehlercode windows, gelöscht, install.exe, installation, internet, popup werbung, pup.optional.crossbrowse.c, pup.optional.crossrider.a, pup.optional.domaliq.sid.a, pup.optional.eazyzoom.a, pup.optional.modgoog, rootkit.agent.a, schädlinge, this device cannot start. (code10), win32/elex.bh, win32/systweak.g, win32/toolbar.conduit.r, win32/toolbar.tnt2.i, win32/wajam.k, win64/advancedsystemprotector.a, win64/adware.pennybee.d, win64/systweak.a


« Windows Registry Schäden... | IE spinnt/flackert/hängt, Maus auch »


Ähnliche Themen: Popup Werbung beim Surfen


  1. Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe
    Plagegeister aller Art und deren Bekämpfung - 11.11.2015 (28)
  2. Beim surfen ständig Werbung, trotz Popupblocker - Interstat?
    Plagegeister aller Art und deren Bekämpfung - 16.06.2015 (7)
  3. Windows 8.1 beim Surfen öffnet sich ständig Werbung
    Log-Analyse und Auswertung - 18.02.2015 (11)
  4. Ständig Werbung und Popup Fenster und verlangsamtes Surfen
    Plagegeister aller Art und deren Bekämpfung - 24.01.2015 (6)
  5. Polizei.Warnung! Popup-Fenster öffnete sich beim Surfen
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (10)
  6. Windows 7, Google Chrome, neue Tabs (Werbung) öffnet sich dauernd beim Surfen
    Log-Analyse und Auswertung - 11.12.2014 (1)
  7. Ständige Werbung / Tabs beim Surfen
    Plagegeister aller Art und deren Bekämpfung - 18.11.2014 (3)
  8. Ständig Werbung beim Surfen
    Plagegeister aller Art und deren Bekämpfung - 03.10.2014 (5)
  9. Ich werde oft beim Surfen auf Seiten mit Werbung umgeleitet & Pop-Up-Fenster erscheinen
    Plagegeister aller Art und deren Bekämpfung - 02.09.2014 (31)
  10. Windows 7: Beim Surfen öffnet sich ständig Werbung etc.
    Log-Analyse und Auswertung - 07.06.2014 (5)
  11. Windows 7: Beim Surfen öffnen sich ungewollt neu tabs/Fenster mit Werbung
    Log-Analyse und Auswertung - 08.05.2014 (10)
  12. Auswertung HIJACK - IE Öffnet Werbung beim Surfen
    Log-Analyse und Auswertung - 09.10.2013 (11)
  13. Windows 7 : Computer ist langsam und zeigt beim Surfen übermäßig Werbung an
    Log-Analyse und Auswertung - 03.09.2013 (5)
  14. Windows Updates funktionieren nicht mehr, zusätzlich überall Werbung beim surfen
    Plagegeister aller Art und deren Bekämpfung - 08.08.2013 (25)
  15. Internet Explorer öffnet Werbung beim Surfen
    Log-Analyse und Auswertung - 23.09.2008 (0)
  16. Beim Surfen (IE 7 // Firefox) öffnen sich automatisch Werbung-/Erotikseiten =(
    Log-Analyse und Auswertung - 22.08.2008 (17)
  17. Verschiedenste Werbung beim Surfen
    Log-Analyse und Auswertung - 23.09.2007 (7)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Popup Werbung beim Surfen - Hallo, ich habe von meinem Arbeitkollegen seinen PC bekommen. Er hat folgendes Problem: Nach der Installation von einem Youtube-Downloader bekam er beim Surfen Werbung eingeblendet. Das Internet wurde dann auch - Popup Werbung beim Surfen...
Archiv
Du betrachtest: Popup Werbung beim Surfen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131