| |
| |||||||
Log-Analyse und Auswertung: Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station ProblemWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
09.06.2015, 15:19
| #1 |
 |  Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Hallo zusammen, ich habe mehrere Anliegen. 1. mein Notebook ist sehr langsam beim Start und auch bei allen anderen Prozessen. Weiterhin lädt Firefox Seiten nur sehr verzögert oder bricht ab. 2. Ich erhalte stets die Meldung (nach Windows start), dass die Toshiba Service Station nicht mehr funktioniert. (Siehe jpg anbei) 3. durch die Avast Free Version wurden zudem zahlreiche Dateien (auch teilweise wichtig für mich) in Quarantäne verschoben und als "infizierte Dateien" betrachtet, die es ggf. nicht sind (z.B. private Videos). U.a. wurden auch Dateien mit dem Namen "AnyProtectScannerSetup.exe" dorthin verschoben, die mir nichts sagen. Ich habe auch hier einen Screenshot gemacht mit nur einem Bruchteil der in Quarantäne befindlichen Dateien. Ich habe alle gewünschten Berichte zusammengestellt und hoffe auf Eure Hilfe. Vielen Dank vorab und viele Grüße Carlos defogger_disable Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:24 on 09/06/2015 (Suffian)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:08-06-2015
Ran by Suffian (administrator) on SUFFIAN-TOSH on 09-06-2015 14:37:01
Running from C:\Users\Suffian\Desktop\PC Problem
Loaded Profiles: Suffian (Available Profiles: Suffian)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
(Bandoo Media Inc.) C:\Users\Suffian\AppData\Local\iLivid\iLivid.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Dropbox, Inc.) C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2120808 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566184 2010-09-28] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)
HKLM\...\Run: [SmartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-10-19] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-05-30] (Toshiba Europe GmbH)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2967352 2012-11-06] (Synaptics Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [NBAgent] => c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248 2011-01-07] (Nero AG)
HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)
HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-10-06] (TOSHIBA Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NPSStartup] => [X]
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [fst_de_89] => [X]
HKLM-x32\...\Run: [fst_de_92] => [X]
HKLM-x32\...\Run: [AnyProtect Scanner] => "C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe"
HKLM-x32\...\Run: [fst_de_60] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-12-04] (AVAST Software)
HKLM-x32\...\Run: [gmsd_de_251] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-20\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-11-23] (Google Inc.)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [iLivid] => C:\Users\Suffian\AppData\Local\iLivid\iLivid.exe [6827008 2013-09-09] (Bandoo Media Inc.)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [Browser Infrastructure Helper] => C:\Users\Suffian\AppData\Local\Smartbar\Application\Smartbar.exe startup
HKU\S-1-5-18\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll File not found
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File not found
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => "C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll" File not found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2013-11-21]
ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk [2011-05-30]
ShortcutTarget: Toshiba Places Icon Utility.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Toshiba)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-05-30]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-05-30]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2013-08-02]
ShortcutTarget: Dropbox.lnk -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-12-04] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:51335;https=127.0.0.1:51335
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/places?touch=4&cat=1
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=387D7C4FB5D24855&affID=119357&tsp=4983
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {A311D5B2-E19C-42D8-9AEE-22F8F27397B7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> bProtectorDefaultScope {FE388172-4AE5-4838-BE63-14794AD20150}
SearchScopes: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbH0,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M6780AAF6-AC7D-4269-8C43-9651A4F01F5E&SearchSource=58&CUI=&UM=8&UP=SPA57F1156-728B-472C-8FC8-14F0DE2BFCCE&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: No Name -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-04] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-04-02] (Google Inc.)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File
BHO-x32: No Name -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> No File
BHO-x32: No Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-04] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-02] (Google Inc.)
BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-04-02] (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-02] (Google Inc.)
Toolbar: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-04-02] (Google Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27] (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1395090730&from=tugs&uid=TOSHIBAXMK3275GSX_61MRTAPFTXX61MRTAPFT
FireFox:
========
FF ProfilePath: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: https://www.google.com/?trackid=sp-006
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-04-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-03] ()
FF Plugin-x32: @ei.TelevisionFanatic.com/Plugin -> C:\Program Files (x86)\TelevisionFanaticEI\Installr\1.bin\NP64EISB.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\searchplugins\google-avast.xml [2015-03-01]
FF SearchPlugin: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\searchplugins\trovi.xml [2015-02-26]
FF SearchPlugin: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\searchplugins\Web Search.xml [2014-07-09]
FF Extension: Avira Browser Safety - C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\Extensions\abs@avira.com [2014-11-20]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-12-06]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-06-03]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: HP Smart Print - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-10-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-04]
FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi
FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [speedtest4354@BestOffers] - C:\Users\Suffian\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers
FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [{99B4F990-D204-37B8-C801-85D7530020EC}] - C:\Program Files (x86)\di1BlockAndSurf\175.xpi
FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-12-06]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M6780AAF6-AC7D-4269-8C43-9651A4F01F5E&SearchSource=55&CUI=&UM=8&UP=SPA57F1156-728B-472C-8FC8-14F0DE2BFCCE&SSPV=
CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M6780AAF6-AC7D-4269-8C43-9651A4F01F5E&SearchSource=55&CUI=&UM=8&UP=SPA57F1156-728B-472C-8FC8-14F0DE2BFCCE&SSPV=", "https://www.google.com/?trackid=sp-006"
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSearchURL: Default -> https://www.google.de/search?q={searchTerms}?trackid=sp-006
CHR DefaultSuggestURL: Default -> https://www.google.com/complete/search?client=chrome&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.93\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (TelevisionFanatic Installer Plugin Stub) - C:\Program Files (x86)\TelevisionFanaticEI\Installr\1.bin\NP64EISB.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Profile: C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browser Safety) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-03-01]
CHR Extension: (Avast Online Security) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-01]
CHR Extension: (BattlelogPlus) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphojmgkbcmdjpaepolkjeienkacpjpi [2015-02-02]
CHR Extension: (Quick start) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2015-03-01]
CHR HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [epojlgbehpaeekopencdagbdamnkppci] - C:\Program Files (x86)\LyriXeeker\130.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-04]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-03-17]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-04] (AVAST Software)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [1811456 2010-08-27] (Realsil Microelectronics Inc.) [File not signed]
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 51cdb72; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.11\OptProCrash.dll",ENT
S2 Update PlurPush; "C:\Program Files (x86)\PlurPush\updatePlurPush.exe" [X]
S2 Util Browser Good; "C:\Program Files (x86)\Browser Good\bin\utilBrowserGood.exe" [X]
S2 Util PlurPush; "C:\Program Files (x86)\PlurPush\bin\utilPlurPush.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-04] ()
S3 Impcd; C:\Windows\System32\DRIVERS\Impcd.sys [158976 2010-02-27] (Intel Corporation) [File not signed]
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1514568 2013-05-02] (Realtek Semiconductor Corporation )
S3 SPPD; C:\Windows\system32\drivers\SPPD.sys [21976 2015-02-26] ()
R2 webinstr; C:\Windows\system32\Drivers\webinstr.sys [57528 2014-07-07] (Corsica)
S1 qrnfd_1_10_0_9; system32\drivers\qrnfd_1_10_0_9.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-09 14:33 - 2015-06-09 14:37 - 00000000 ____D C:\FRST
2015-06-09 14:24 - 2015-06-09 14:35 - 00000000 ____D C:\Users\Suffian\Desktop\PC Problem
2015-06-09 14:24 - 2015-06-09 14:24 - 00000000 _____ C:\Users\Suffian\defogger_reenable
2015-06-03 17:03 - 2015-06-08 12:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-02 07:07 - 2015-06-02 07:13 - 00000000 ____D C:\Users\Suffian\Desktop\Crew Pics
2015-05-31 15:07 - 2015-05-31 15:10 - 00000000 ____D C:\Users\Suffian\Desktop\Kids Bergen Enkheim
2015-05-14 14:40 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 14:40 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 13:57 - 2015-05-05 03:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 13:57 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 13:57 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 13:57 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 13:57 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 13:57 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 13:57 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 13:57 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 13:57 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 13:57 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-13 13:57 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-13 13:57 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-13 13:57 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 13:57 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-13 13:57 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 13:57 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 13:57 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 13:57 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 13:57 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 13:56 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 13:56 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 13:56 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 13:56 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 13:56 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 13:56 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 13:56 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 13:56 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 13:56 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 13:56 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 13:56 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 13:56 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 13:56 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 13:56 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 13:56 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 13:56 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-13 13:56 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 13:56 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 13:56 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-13 13:56 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 13:56 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 13:56 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 13:56 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 13:56 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 13:56 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-13 13:56 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-13 13:56 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 13:56 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-13 13:56 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-13 13:56 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 13:56 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-13 13:56 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 13:56 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 13:56 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 13:56 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-13 13:56 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 13:56 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 13:56 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 13:56 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 13:56 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-13 13:56 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 13:56 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 13:56 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 13:56 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 13:56 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-13 13:54 - 2015-04-27 21:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-13 13:54 - 2015-04-27 21:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-13 13:54 - 2015-04-27 21:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 13:54 - 2015-04-27 21:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-13 13:54 - 2015-04-27 21:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-13 13:54 - 2015-04-27 21:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-13 13:54 - 2015-04-27 21:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-13 13:54 - 2015-04-27 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-13 13:54 - 2015-04-27 21:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-13 13:54 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-13 13:54 - 2015-04-27 21:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-13 13:54 - 2015-04-27 21:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-13 13:54 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-13 13:54 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-13 13:54 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-13 13:54 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-13 13:54 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-13 13:54 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-13 13:54 - 2015-04-27 21:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-13 13:54 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-13 13:54 - 2015-04-27 21:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-13 13:54 - 2015-04-27 21:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-13 13:54 - 2015-04-27 21:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-13 13:54 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-13 13:54 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-13 13:54 - 2015-04-27 21:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 13:54 - 2015-04-27 20:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-13 13:54 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 13:53 - 2015-04-27 21:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-13 13:53 - 2015-04-27 21:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-13 13:53 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 19:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-13 13:53 - 2015-04-27 19:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-13 13:53 - 2015-04-27 19:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-13 13:53 - 2015-04-27 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-13 13:53 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 13:53 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 13:53 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 13:53 - 2015-04-20 04:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 13:53 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 13:53 - 2015-04-08 05:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 13:53 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-13 13:53 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-13 13:53 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-13 13:53 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 13:53 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-13 13:53 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-13 13:53 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-13 13:53 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-13 13:53 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-13 13:53 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 13:53 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 13:53 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-09 14:34 - 2009-07-14 06:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-09 14:34 - 2009-07-14 06:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-09 14:30 - 2013-08-02 11:06 - 00000000 ___RD C:\Users\Suffian\Dropbox
2015-06-09 14:30 - 2013-08-02 10:59 - 00000000 ____D C:\Users\Suffian\AppData\Roaming\Dropbox
2015-06-09 14:30 - 2012-10-05 22:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-09 14:24 - 2011-09-08 10:40 - 00000000 ____D C:\Users\Suffian
2015-06-09 14:21 - 2014-04-30 15:26 - 00000000 ____D C:\Users\Suffian\Desktop\RdJKids
2015-06-09 14:20 - 2011-07-18 19:46 - 01609282 _____ C:\Windows\WindowsUpdate.log
2015-06-09 13:58 - 2014-07-18 18:51 - 00000424 _____ C:\Windows\Tasks\BlockAndSurf Update.job
2015-06-09 13:58 - 2014-07-18 18:51 - 00000404 _____ C:\Windows\Tasks\BlockAndSurf_wd.job
2015-06-09 13:58 - 2014-03-17 23:14 - 00001582 _____ C:\Windows\Tasks\media enhance-updater.job
2015-06-09 13:58 - 2014-03-17 23:14 - 00001436 _____ C:\Windows\Tasks\media enhance-enabler.job
2015-06-09 13:58 - 2014-03-17 23:13 - 00003104 _____ C:\Windows\Tasks\media enhance-chromeinstaller.job
2015-06-09 13:58 - 2014-03-17 23:13 - 00002366 _____ C:\Windows\Tasks\media enhance-firefoxinstaller.job
2015-06-09 13:58 - 2014-03-17 23:13 - 00001538 _____ C:\Windows\Tasks\media enhance-codedownloader.job
2015-06-09 13:58 - 2014-03-17 23:12 - 00003088 _____ C:\Windows\Tasks\free ven-chromeinstaller.job
2015-06-09 13:58 - 2014-03-17 23:12 - 00002262 _____ C:\Windows\Tasks\free ven-firefoxinstaller.job
2015-06-09 13:58 - 2014-03-17 23:12 - 00001502 _____ C:\Windows\Tasks\free ven-updater.job
2015-06-09 13:58 - 2014-03-17 23:12 - 00001458 _____ C:\Windows\Tasks\free ven-codedownloader.job
2015-06-09 13:58 - 2014-03-17 23:12 - 00001356 _____ C:\Windows\Tasks\free ven-enabler.job
2015-06-09 13:58 - 2013-10-10 12:08 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc.job
2015-06-09 13:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-09 13:58 - 2009-07-14 06:51 - 00176745 _____ C:\Windows\setupact.log
2015-06-08 16:50 - 2013-08-23 12:50 - 00000298 _____ C:\Windows\Tasks\Dealply.job
2015-06-08 12:13 - 2010-11-21 08:50 - 00700134 _____ C:\Windows\system32\perfh007.dat
2015-06-08 12:13 - 2010-11-21 08:50 - 00149984 _____ C:\Windows\system32\perfc007.dat
2015-06-08 12:13 - 2009-07-14 07:13 - 01622236 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-08 12:05 - 2014-12-04 17:31 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-08 12:03 - 2014-08-08 10:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-08 12:03 - 2010-11-21 05:47 - 00217738 _____ C:\Windows\PFRO.log
2015-06-05 19:56 - 2013-08-27 18:42 - 00000000 ____D C:\Users\Suffian\Desktop\Bodylanguage
2015-06-02 07:15 - 2013-11-14 17:17 - 00000000 ____D C:\Users\Suffian\Desktop\Lg
2015-05-31 15:08 - 2014-12-10 17:51 - 00000000 ____D C:\Users\Suffian\Desktop\xmas show 2014 noch bearbeiten
2015-05-31 14:08 - 2015-04-28 19:04 - 00154002 _____ C:\Users\Suffian\Desktop\Freestyle Kids 2014 Welcome Party.MMM
2015-05-21 11:33 - 2011-09-08 11:15 - 00000000 ____D C:\Users\Suffian\AppData\Roaming\SoftGrid Client
2015-05-20 19:30 - 2014-01-10 14:43 - 00000000 ____D C:\Users\Suffian\Desktop\Welcome Partyshows
2015-05-20 19:04 - 2015-04-07 13:23 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-20 19:04 - 2015-04-07 13:23 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-16 12:07 - 2009-07-14 06:45 - 00396928 _____ C:\Windows\system32\FNTCACHE.DAT
2015-05-15 20:15 - 2010-11-21 09:00 - 00000000 ____D C:\Program Files\Windows Journal
2015-05-15 20:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-05-15 17:26 - 2011-09-08 11:14 - 01649854 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-05-15 17:26 - 2011-09-08 11:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2015-05-14 12:53 - 2013-06-02 12:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-05-14 12:32 - 2013-08-15 14:50 - 00000000 ____D C:\Windows\system32\MRT
2015-05-14 12:24 - 2012-03-10 21:15 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-14 12:15 - 2013-06-02 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-14 12:14 - 2013-06-02 12:45 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-05-12 13:56 - 2013-08-02 11:06 - 00001035 _____ C:\Users\Suffian\Desktop\Dropbox.lnk
2015-05-12 13:56 - 2013-08-02 11:00 - 00000000 ____D C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
==================== Files in the root of some directories =======
2014-07-15 01:39 - 2014-07-15 01:39 - 0000320 _____ () C:\Users\Suffian\AppData\Roaming\aps.uninstall.scan.results
2013-12-19 13:50 - 2014-10-21 19:50 - 0000201 _____ () C:\Users\Suffian\AppData\Roaming\WB.CFG
2014-07-15 01:38 - 2014-07-14 14:11 - 0573339 _____ (ClickMeIn Limited) C:\Users\Suffian\AppData\Local\AnyProtectScannerSetup.exe
2013-10-09 19:22 - 2013-10-09 19:22 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-03-10 21:50 - 2012-03-10 21:50 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
Some files in TEMP:
====================
C:\Users\Suffian\AppData\Local\Temp\2cedfc8d-10f8-498f-8e56-6c2bc70b001e.exe
C:\Users\Suffian\AppData\Local\Temp\6_Offer_13.exe
C:\Users\Suffian\AppData\Local\Temp\AskSLib.dll
C:\Users\Suffian\AppData\Local\Temp\avgnt.exe
C:\Users\Suffian\AppData\Local\Temp\BackupSetup.exe
C:\Users\Suffian\AppData\Local\Temp\dlLogic.exe
C:\Users\Suffian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1td4le.dll
C:\Users\Suffian\AppData\Local\Temp\FreeStudio.exe
C:\Users\Suffian\AppData\Local\Temp\GCVerifier.dll
C:\Users\Suffian\AppData\Local\Temp\GdiPlus.dll
C:\Users\Suffian\AppData\Local\Temp\InstallerMessageBox.exe
C:\Users\Suffian\AppData\Local\Temp\install_reader11_en_gtbp_chrd_aih.exe
C:\Users\Suffian\AppData\Local\Temp\NPSInstallerProxy.exe
C:\Users\Suffian\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll
C:\Users\Suffian\AppData\Local\Temp\nsb5034.exe
C:\Users\Suffian\AppData\Local\Temp\nsb8539.exe
C:\Users\Suffian\AppData\Local\Temp\nsb897E.exe
C:\Users\Suffian\AppData\Local\Temp\nsv4C1D.exe
C:\Users\Suffian\AppData\Local\Temp\ptjclqrn.dll
C:\Users\Suffian\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Suffian\AppData\Local\Temp\spstub.exe
C:\Users\Suffian\AppData\Local\Temp\tmd_34012981.exe
C:\Users\Suffian\AppData\Local\Temp\uninst1.exe
C:\Users\Suffian\AppData\Local\Temp\Uninstall.exe
C:\Users\Suffian\AppData\Local\Temp\unwise.exe
C:\Users\Suffian\AppData\Local\Temp\verifier.exe
C:\Users\Suffian\AppData\Local\Temp\vlc-2.1.5-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-21 13:20
==================== End of log ============================
Addition [CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:08-06-2015
Ran by Suffian at 2015-06-09 14:37:30
Running from C:\Users\Suffian\Desktop\PC Problem
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-454062802-4211535203-1480594490-500 - Administrator - Disabled)
Gast (S-1-5-21-454062802-4211535203-1480594490-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-454062802-4211535203-1480594490-1002 - Limited - Enabled)
Suffian (S-1-5-21-454062802-4211535203-1480594490-1001 - Administrator - Enabled) => C:\Users\Suffian
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Amazon.de (HKLM-x32\...\{A74F16FA-1D5B-405B-8D8D-1BC6F9DAED8B}) (Version: - Amazon EU S.a.r.L.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.4.2.241 - Online Media Technologies Ltd.)
awesomehp uninstaller (HKLM-x32\...\awesomehp uninstaller) (Version: - awesomehp) <==== ATTENTION
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
BorderlineEdit (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{1394843d}) (Version: - Software Publisher) <==== ATTENTION
Chicken Invaders 3 - Revenge of the Yolk (x32 Version: 2.2.0.95 - WildTangent) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DMUninstaller (HKLM-x32\...\DMUninstaller) (Version: - ) <==== ATTENTION
Dropbox (HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Dropbox) (Version: 3.4.6 - Dropbox, Inc.)
eBay (HKLM-x32\...\{FDE58148-57E7-43BF-879A-29CCE818C078}) (Version: 1.1.9 - eBay Inc.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
free ven (HKLM-x32\...\free ven) (Version: 1.34.3.17 - freeven) <==== ATTENTION
Free Audio Converter version 5.0.46.820 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.46.820 - DVDVideoSoft Ltd.)
Free Studio version 6.4.0.1122 (HKLM-x32\...\Free Studio_is1) (Version: 6.4.0.1122 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
High-Definition Video Playback (x32 Version: 7.1.13900.47.0 - Nero AG) Hidden
HP Deskjet 2510 series - Grundlegende Software für das Gerät (HKLM\...\{AB38332B-A2C0-4FE7-9A5E-454BCF6B7031}) (Version: 27.0.847.0 - Hewlett-Packard Co.)
HP Deskjet 2510 series Hilfe (HKLM-x32\...\{07B48D2C-E60D-41E6-B546-11D128F633EC}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 2510 series Setup Guide (HKLM-x32\...\{216C7F38-4BBC-4E9A-8392-C9FA21B54386}) (Version: 27.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.3341 - HP Photo Creations Powered by RocketLife)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
iLivid (HKLM-x32\...\iLivid) (Version: 5.0.0.4151 - Bandoo Media Inc) <==== ATTENTION
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.7.1002 - Intel Corporation)
Java(TM) 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LibreOffice 4.0.4.2 (HKLM-x32\...\{FE88323B-9F0E-4596-8F56-37757C6918E9}) (Version: 4.0.4.2 - The Document Foundation)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (HKLM-x32\...\MAGIX_{CF12A0ED-3C13-420E-A9B7-D1DE8C2E1A3D}) (Version: 4.3.2.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG) Hidden
MAGIX Music Maker Hip Hop Edition 5 (HKLM-x32\...\MAGIX_{792C52C2-B4B1-4BE1-8B54-A6F33E31E5C2}) (Version: 19.0.5.57 - MAGIX AG)
MAGIX Music Maker Hip Hop Edition 5 (Version: 19.0.5.57 - MAGIX AG) Hidden
MAGIX Music Maker Hip Hop Edition 5 Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
media enhance (HKLM-x32\...\media enhance) (Version: 1.34.3.17 - freeven) <==== ATTENTION
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
Mp3tag v2.59a (HKLM-x32\...\Mp3tag) (Version: v2.59a - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.6.11500.16.100 - Nero AG)
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10500.1.102 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.2.10400.5.100 - Nero AG)
Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.2.13300.36.100 - Nero AG)
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{0FF68F26-416C-4954-ACA5-6AD5F9DE99C1}) (Version: 10.5.14800 - Nero AG)
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.2.10800.9.100 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.10300.25.0 - Nero AG)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Photo Service - powered by myphotobook (HKLM-x32\...\eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1) (Version: 1.2.0-545 - myphotobook GmbH)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.23.623.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30111 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.)
Samsung New PC Studio (HKLM-x32\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
Shopping Helper Smartbar (HKLM-x32\...\{96F1EBE2-6BF6-44E8-84AC-DB577BAD1DD5}) (Version: 11.49.63.16848 - ReSoft Ltd.) <==== ATTENTION
simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)
Skype Toolbars (HKLM-x32\...\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}) (Version: 5.0.4126 - Skype Technologies S.A.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Studie zur Verbesserung von HP Deskjet 2510 series Produkten (HKLM\...\{48CEEC7F-1D7D-4906-9F5D-B80A55163B49}) (Version: 27.0.847.0 - Hewlett-Packard Co.)
SupTab (HKLM-x32\...\SupTab) (Version: 1.1.1.0 - ) <==== ATTENTION
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.21.0 - Synaptics Incorporated)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.01.00 - TOSHIBA CORPORATION)
TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{43DBC64B-3DD1-47E2-8788-D3C3B110C574}) (Version: 2.1.10.64 - TOSHIBA Corporation)
TOSHIBA ConfigFree (HKLM-x32\...\{38C52F7D-A6CB-4CE7-A189-8AABE8774D8A}) (Version: 8.0.38 - TOSHIBA CORPORATION)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.2 for x64 - TOSHIBA Corporation)
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)
TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.11C - TOSHIBA CORPORATION)
TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.30C - TOSHIBA CORPORATION)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)
Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.02 - TOSHIBA)
TOSHIBA Media Controller (HKLM-x32\...\{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}) (Version: 1.0.80.8.64 - TOSHIBA CORPORATION)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.5.11 - TOSHIBA CORPORATION)
TOSHIBA Online Product Information (HKLM-x32\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 4.01.0000 - TOSHIBA)
TOSHIBA Places Icon Utility (HKLM-x32\...\{461F6F0D-7173-4902-9604-AB1A29108AF2}) (Version: 1.1.1.4 - TOSHIBA Corporation)
TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.5 x64 - TOSHIBA Corporation)
TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.17.64 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.40 - TOSHIBA)
TOSHIBA Supervisorkennwort (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.0.10C - TOSHIBA CORPORATION)
TOSHIBA TEMPRO (HKLM-x32\...\{F082CB11-4794-4259-99A1-D91BA762AD15}) (Version: 3.35 - Toshiba Europe GmbH)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.19.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.1.5 - TOSHIBA Corporation)
TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{5BA99779-6E12-49EF-BE49-F35B1EDB4DF9}) (Version: 1.0.4 - TOSHIBA CORPORATION)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Utility Common Driver (x32 Version: 1.0.52.2C - TOSHIBA) Hidden
Vita Bass Machine (Version: 1.0.0.0 - MAGIX AG) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Wedding Dash 2 - Rings Around the World (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (Toshiba Games) (x32 Version: 4.0.5.5 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent toshiba Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{00000001-0E3A-4123-8B32-4B68A91E104A}\InprocServer32 -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIBasePlace.dll (Toshiba Corporation)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{00000002-0E3A-4123-8B32-4B68A91E104A}\InprocServer32 -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIBasePlace.dll (Toshiba Corporation)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{00000003-0E3A-4123-8B32-4B68A91E104A}\InprocServer32 -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIBasePlace.dll (Toshiba Corporation)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-454062802-4211535203-1480594490-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
==================== Restore Points =========================
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00FC080C-1051-4F0A-8D1E-5691B87E5610} - System32\Tasks\BlockAndSurf Update => C:\Program Files (x86)\di1BlockAndSurf\Z7BlockAndSurfE91.exe <==== ATTENTION
Task: {097B1ED3-7892-4261-B10F-C595668C7B5C} - System32\Tasks\free ven-enabler => C:\Program Files (x86)\free ven\free ven-enabler.exe
Task: {09ACC738-8AF4-4FD8-A09F-8395B1950923} - System32\Tasks\Dealply => C:\Users\Suffian\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {1731EE43-B465-4A65-9571-2ADFB43A37C8} - System32\Tasks\BrowserDefendert => Sc.exe start BrowserDefendert <==== ATTENTION
Task: {2DE5CE2B-7C62-469C-952B-24EE4E6166BC} - System32\Tasks\media enhance-updater => C:\Program Files (x86)\media enhance\media enhance-updater.exe <==== ATTENTION
Task: {2E859FEC-5192-4AB0-84C8-B37AEC779A97} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {35ED5F93-742A-4EB0-9AC1-DB7B44042FA7} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {3E51E1BA-8B3E-46B0-9277-9181299350EA} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION
Task: {436AF852-274A-4DAF-9EC3-D174C53707A2} - System32\Tasks\Run_Bobby_Browser => C:\Users\Suffian\AppData\Local\BoBrowser\Application\bobrowser.exe [2015-02-04] (The BoBrowser Authors) <==== ATTENTION
Task: {4933262A-193C-4EC3-9189-BD7440F57C4A} - System32\Tasks\avastBCLRestartS-1-5-21-454062802-4211535203-1480594490-1001 => Firefox.exe
Task: {4D99A0D6-7F29-4091-976E-622153AC0BC6} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-12-03] (TOSHIBA CORPORATION)
Task: {536F23A4-DA4E-494B-8147-82E4FE4D7237} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-10] (Microsoft Corporation)
Task: {53A102E3-4C58-41D0-9604-6A9605827C13} - System32\Tasks\ASP => C:\Program Files (x86)\RCP\systweakasp.exe
Task: {58B1F81B-6C94-4C01-B326-A0FADD3402DC} - System32\Tasks\media enhance-enabler => C:\Program Files (x86)\media enhance\media enhance-enabler.exe <==== ATTENTION
Task: {69DB6A8C-8EC4-4CAC-9246-7448D955D477} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {6E53A078-ADDF-47A9-A6E4-9D078AF4D7A0} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {7374006F-5657-4861-A99F-9653E891FB9E} - System32\Tasks\media enhance-firefoxinstaller => C:\Program Files (x86)\media enhance\media enhance-firefoxinstaller.exe <==== ATTENTION
Task: {777A5581-C4DF-45F3-832A-60D3F17D99E7} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {7FCCCA4A-039A-43D3-A959-2201E72529F4} - System32\Tasks\free ven-codedownloader => C:\Program Files (x86)\free ven\free ven-codedownloader.exe
Task: {82F49FCF-A093-4E97-9664-B9FB76C24CAC} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-04] (AVAST Software)
Task: {9613DD28-7702-482F-8963-E03FB908B012} - System32\Tasks\free ven-updater => C:\Program Files (x86)\free ven\free ven-updater.exe
Task: {9BB0F478-2A0B-4888-9560-0920675666CC} - System32\Tasks\media enhance-codedownloader => C:\Program Files (x86)\media enhance\media enhance-codedownloader.exe <==== ATTENTION
Task: {A8602E62-98E8-457C-B289-71FC2FBF9A09} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {B1EE521D-2923-46E9-8917-E1382AD76183} - \LyricXeeker Update No Task File <==== ATTENTION
Task: {C52A5A2C-17C4-4FDB-9641-D15FF6362091} - System32\Tasks\BlockAndSurf_wd => C:\Program Files (x86)\di1BlockAndSurf\G8BlockAndSurfR.exe <==== ATTENTION
Task: {CEBBB6CD-05B6-4482-BD0F-FD3759FE5266} - System32\Tasks\media enhance-chromeinstaller => C:\Program Files (x86)\media enhance\media enhance-chromeinstaller.exe <==== ATTENTION
Task: {D72C64E1-C977-4B2C-BAA2-2D65EDFB8E26} - System32\Tasks\{51CA06CC-CDC9-459D-8B04-22040B24848B} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{E65C7D8E-186D-484B-BEA8-DEF0331CE600}\setup.exe" -c -runfromtemp -l0x0407
Task: {E77334A1-CCEA-4FC6-B79D-89CB849FAEB1} - System32\Tasks\free ven-firefoxinstaller => C:\Program Files (x86)\free ven\free ven-firefoxinstaller.exe
Task: {EE1CBC41-278C-40FF-BD92-5404BC2B8F0F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {F0276272-1DA3-473B-8939-D33872AA1301} - System32\Tasks\free ven-chromeinstaller => C:\Program Files (x86)\free ven\free ven-chromeinstaller.exe
Task: {F9D96F55-B8E6-4435-8B7C-28A1C95479F7} - System32\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-05] (Google Inc.)
Task: {FAD753BF-29D6-49BD-BB14-5FE551463A15} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\BlockAndSurf Update.job => C:\Program Files (x86)\di1BlockAndSurf\Z7BlockAndSurfE91.exe <==== ATTENTION
Task: C:\Windows\Tasks\BlockAndSurf_wd.job => C:\Program Files (x86)\di1BlockAndSurf\G8BlockAndSurfR.exe <==== ATTENTION
Task: C:\Windows\Tasks\Dealply.job => C:\Users\Suffian\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\free ven-chromeinstaller.job => C:\Program Files (x86)\free ven\free ven-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\free ven-codedownloader.job => C:\Program Files (x86)\free ven\free ven-codedownloader.exe4/reinstallapp /runfrom=task /agentregpath='free ven' /appid=51682 /srcid='001082' /subid='0' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installerfullversion=1.34.3.17 /installationtime=1395090735 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /codedownloaddomain=http:/app-static.crossrider.com /defbro=ie /allusers /autoupdateulr='http:/update.srvstatsdata.com/ie_code_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\free ven-enabler.job => C:\Program Files (x86)\free ven\free ven-enabler.exe/enablebho /agentregpath='free ven' /appid=51682 /srcid='001082' /subid='0' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installationtime=1395090735 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /bhoguid=11111111-1111-1111-1111-110511161182 /defbro=ie /useiepol /allusers /autoupdateulr='http:/update.srvstatsdata.com/ie_enable_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\free ven-firefoxinstaller.job => C:\Program Files (x86)\free ven\free ven-firefoxinstaller.exeÄ/installxpi /agentregpath='free ven' /extensionfilepath C:\Program Files (x86)\free ven\51682.xpi' /appid=51682 /srcid='001082' /subid='0' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installerfullversion=1.34.3.17 /installationtime=1395090735 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=e49d3f99-7c89-4eb4-99f3-ff903e2189b2@5288754a-7a48-41a0-a10f-e98c9ac12040.com /extensionversion=0.94 /prefsbranch=ae49d3f997c894eb499f3ff903e2189b25288754a7a4841a0a10fe98c9ac12040com51682 /updateurl=https:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/51682.rdf /extensionname='free ven' /extensiondesc='Feven Shopping Companion' /publishername='freeven' /defbro=ie /allusers /allprofiles /checkfflist /autoupdateulr='http:/update.srvstatsdata.com/ff_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\free ven-updater.job => C:\Program Files (x86)\free ven\free ven-updater.exeQ/runupdater /agentregpath='free ven' /appid=51682 /srcid='001082' /subid='0' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installationtime=1395090735 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /geoserviceurl=http:/ipgeoapi.com/ /updatejsondomain=http:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http:/stats.mstatsserv.com /autoupdateulr='http:/update.srvstatsdata.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\media enhance-chromeinstaller.job => C:\Program Files (x86)\media enhance\media enhance-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-codedownloader.job => C:\Program Files (x86)\media enhance\media enhance-codedownloader.exeT/reinstallapp /runfrom=task /agentregpath='media enhance' /appid=44150 /srcid='000555' /subid='verticals-ads,shopping,intext' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installerfullversion=1.34.3.17 /installationtime=1395090806 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /codedownloaddomain=http:/app-static.crossrider.com /defbro=ie /allusers /autoupdateulr='http:/update.srvstatsdata.com/ie_code_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-enabler.job => C:\Program Files (x86)\media enhance\media enhance-enabler.exe(/enablebho /agentregpath='media enhance' /appid=44150 /srcid='000555' /subid='verticals-ads,shopping,intext' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installationtime=1395090806 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /bhoguid=11111111-1111-1111-1111-110411411150 /defbro=ie /useiepol /allusers /autoupdateulr='http:/update.srvstatsdata.com/ie_enable_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-firefoxinstaller.job => C:\Program Files (x86)\media enhance\media enhance-firefoxinstaller.exeó/installxpi /agentregpath='media enhance' /extensionfilepath C:\Program Files (x86)\media enhance\44150.xpi' /appid=44150 /srcid='000555' /subid='verticals-ads,shopping,intext' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installerfullversion=1.34.3.17 /installationtime=1395090806 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com /extensionversion=0.94 /prefsbranch=a0c822a17a68f40669257d229458d21ca9c178d17dc614aafb2da1425ac7300accom44150 /updateurl=https:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/44150.rdf /extensionname='media enhance' /extensiondesc='MediaPlayerEnhance Extension' /publishername='freeven' /defbro=ie /allusers /allprofiles /checkfflist /autoupdateulr='http:/update.srvstatsdata.com/ff_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-updater.job => C:\Program Files (x86)\media enhance\media enhance-updater.exeq/runupdater /agentregpath='media enhance' /appid=44150 /srcid='000555' /subid='verticals-ads,shopping,intext' /zdata='0/' /bic=E4D8F904F345409DA111DF8983DBB7BFIE /verifier=d56ae8973337cd55f7222814675667ba /installerversion=1_34_3_17 /installationtime=1395090806 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /geoserviceurl=http:/ipgeoapi.com/ /updatejsondomain=http:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http:/stats.mstatsserv.com /autoupdateulr='http:/update.srvstatsdata.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
==================== Loaded Modules (Whitelisted) ==============
2011-03-03 23:21 - 2011-03-03 23:21 - 03420584 _____ () C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll
2010-04-07 16:07 - 2010-04-07 16:07 - 09468728 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2009-11-03 13:26 - 2009-11-03 13:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll
2010-03-03 14:15 - 2010-03-03 14:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll
2010-03-03 14:15 - 2010-03-03 14:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll
2011-05-30 10:12 - 2010-08-31 15:21 - 00017272 _____ () C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll
2009-03-12 19:08 - 2009-03-12 19:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll
2009-07-25 16:38 - 2009-07-25 16:38 - 00017800 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
2012-01-10 22:12 - 2012-01-10 22:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-05-30 10:23 - 2011-02-22 11:16 - 00559104 _____ () C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\de\Humphrey.resources.dll
2011-05-30 10:42 - 2011-12-15 16:56 - 00022400 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\de\TosDILangPack.resources.dll
2011-05-30 10:42 - 2011-12-15 16:55 - 00063360 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIInternal.XmlSerializers.dll
2010-02-05 17:44 - 2010-02-05 17:44 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2015-06-08 12:04 - 2015-06-08 12:04 - 02952192 _____ () C:\Program Files\AVAST Software\Avast\defs\15060800\algo.dll
2015-06-09 14:16 - 2015-06-09 14:16 - 02952192 _____ () C:\Program Files\AVAST Software\Avast\defs\15060900\algo.dll
2015-06-09 13:59 - 2015-06-09 13:59 - 00043008 _____ () c:\users\suffian\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1td4le.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00750080 _____ () C:\Users\Suffian\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00047616 _____ () C:\Users\Suffian\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00865280 _____ () C:\Users\Suffian\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-03-04 23:45 - 2015-03-04 23:45 - 00200704 _____ () C:\Users\Suffian\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2014-12-04 17:38 - 2014-12-04 17:39 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F7B5355B-3902-4C5B-963B-59311AB96153}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D6C4DC47-E8D4-4649-AF3E-AC644C1299DE}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{35AEB4FB-0433-4D02-BC94-CBEB9B00F24A}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{16BCB685-073A-4864-9F84-6E8BECE533B7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CC25E516-9371-4AF0-9DD4-2FE37D3E32CE}] => (Allow) LPort=2869
FirewallRules: [{8C72C6C9-3A14-4E8C-887F-4EEABE604EC9}] => (Allow) LPort=1900
FirewallRules: [{C756F06D-ECC5-4E0D-9556-5E146BD275B5}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{16905ED1-0090-4B65-BBC1-3344EC7EA9AE}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{D5F9D30A-DC26-417E-BF91-4BA8FAEB2AF4}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsasvr.exe
FirewallRules: [{8413B799-B4F9-42E4-BA0E-47A171C08E47}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsasvr.exe
FirewallRules: [{A252107E-6FBA-4003-B546-B7BFA37A1ECF}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsvsvr.exe
FirewallRules: [{0F4F0C59-F515-414A-B332-7C1F978022B3}] => (Allow) C:\Program Files (x86)\Samsung\Samsung New PC Studio\npsvsvr.exe
FirewallRules: [{6A5A9BF5-E98C-4576-A4A5-FF27AC380C76}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{35A4FE65-1D16-4DD9-B370-B61196A1DB86}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{E7273828-18E2-42B3-8205-2F5341322021}] => (Allow) LPort=26675
FirewallRules: [{AFE1A49B-C213-4F49-A429-871B58A562D5}] => (Allow) C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{FC595C55-6ECF-4A1A-82D5-398EC3F0FFE5}] => (Allow) C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{589BD4AE-2A35-4423-BCAA-B93A2DC3D59D}] => (Allow) C:\Program Files\HP\HP Deskjet 2510 series\Bin\USBSetup.exe
FirewallRules: [{936BD27E-6CE5-4AC5-ADC7-B0DB9497EDE3}] => (Allow) C:\Users\Suffian\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{83850734-6577-4F77-895E-A8FBB4F0C260}] => (Allow) C:\Users\Suffian\AppData\Local\iLivid\iLivid.exe
FirewallRules: [TCP Query User{E8BFFE02-4EB1-4538-8D93-7D495619A76A}C:\users\suffian\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\suffian\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{D0ADEA88-0590-4E29-A8FA-45D14610DF55}C:\users\suffian\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\suffian\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{6D20C6A1-839C-4C7E-899D-ED81110F7B67}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A2B4705A-6A0E-4CDB-9095-8B61DC2E6C46}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{280EF1BA-5C80-448D-BF6E-5BE4CFF83B57}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Faulty Device Manager Devices =============
Name: qrnfd_1_10_0_9
Description: qrnfd_1_10_0_9
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: qrnfd_1_10_0_9
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/09/2015 02:32:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifest.
Error: (06/09/2015 02:19:15 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x8004231f).
Error: (06/09/2015 01:59:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/08/2015 04:54:04 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (06/08/2015 04:44:40 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Fehler bei der Registrierung des Click-2-Run-Pakets.
Error: (06/08/2015 04:44:39 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
Description: {tid=E80}
Application Virtualization Client konnte keine Verbindung mit der Datenstrom-URL 'hxxp://c2r.microsoft.com/ConsumerC2R/de-de/14.0.4763.1000/ConsumerC2R.de-de_14.0.7143.5001.sft' herstellen (Rückgabecode 24600F0A-10000001, ursprünglicher Rückgabecode 24600F0A-10000001).
Error: (06/08/2015 04:43:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/08/2015 00:06:47 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Nur zur Information.
Fehler bei der Registrierung des Click-2-Run-Pakets.
Error: (06/08/2015 00:06:47 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
Description: {tid=1184}
Application Virtualization Client konnte keine Verbindung mit der Datenstrom-URL 'hxxp://c2r.microsoft.com/ConsumerC2R/de-de/14.0.4763.1000/ConsumerC2R.de-de_14.0.7143.5001.sft' herstellen (Rückgabecode 2460420A-40002EFD, ursprünglicher Rückgabecode 2460420A-40002EFD).
Error: (06/08/2015 00:05:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/09/2015 01:59:29 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
qrnfd_1_10_0_9
Error: (06/09/2015 01:59:28 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Client Virtualization Handler" ist vom Dienst "Application Virtualization Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1053
Error: (06/09/2015 01:59:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Application Virtualization Client" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/09/2015 01:59:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Application Virtualization Client erreicht.
Error: (06/09/2015 01:58:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util PlurPush" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/09/2015 01:58:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Util Browser Good" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/09/2015 01:58:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update PlurPush" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/09/2015 01:58:49 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.
Error: (06/09/2015 01:58:14 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126
Error: (06/08/2015 04:44:06 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
qrnfd_1_10_0_9
Microsoft Office:
=========================
Error: (06/09/2015 02:32:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifestC:\Users\Suffian\Downloads\Softonic_downloader_mozilla-firefox.exe
Error: (06/09/2015 02:19:15 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x8004231f
Error: (06/09/2015 01:59:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/08/2015 04:54:04 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
Error: (06/08/2015 04:44:40 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Fehler bei der Registrierung des Click-2-Run-Pakets.
Error: (06/08/2015 04:44:39 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
Description: {tid=E80}
hxxp://c2r.microsoft.com/ConsumerC2R/de-de/14.0.4763.1000/ConsumerC2R.de-de_14.0.7143.5001.sft24600F0A-1000000124600F0A-10000001
Error: (06/08/2015 04:43:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/08/2015 00:06:47 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Fehler bei der Registrierung des Click-2-Run-Pakets.
Error: (06/08/2015 00:06:47 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: )
Description: {tid=1184}
hxxp://c2r.microsoft.com/ConsumerC2R/de-de/14.0.4763.1000/ConsumerC2R.de-de_14.0.7143.5001.sft2460420A-40002EFD2460420A-40002EFD
Error: (06/08/2015 00:05:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Percentage of memory in use: 43%
Total physical RAM: 3890.67 MB
Available physical RAM: 2179.89 MB
Total Pagefile: 7779.55 MB
Available Pagefile: 5458.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (WINDOWS) (Fixed) (Total:149.04 GB) (Free:0.13 GB) NTFS
Drive d: (Data) (Fixed) (Total:148.65 GB) (Free:105.81 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 90B4D6F9)
Partition 1: (Active) - (Size=400 MB) - (Type=27)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=148.7 GB) - (Type=07 NTFS)
==================== End of log ============================
Gmer Text folgt gleich |
|
09.06.2015, 15:25
| #2 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem GMER
__________________Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-06-09 14:59:09
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.GT00 298,09GB
Running: Gmer-19357.exe; Driver: C:\Users\Suffian\AppData\Local\Temp\pwriypoc.sys
---- User code sections - GMER 2.1 ----
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExW + 17 00000000756a1401 2 bytes JMP 76e4b21b C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!EnumProcessModules + 17 00000000756a1419 2 bytes JMP 76e4b346 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 17 00000000756a1431 2 bytes JMP 76ec8f29 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetModuleInformation + 42 00000000756a144a 2 bytes CALL 76e2489d C:\Windows\syswow64\kernel32.dll
.text ... * 9
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!EnumDeviceDrivers + 17 00000000756a14dd 2 bytes JMP 76ec8822 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameA + 17 00000000756a14f5 2 bytes JMP 76ec89f8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!QueryWorkingSetEx + 17 00000000756a150d 2 bytes JMP 76ec8718 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetDeviceDriverBaseNameW + 17 00000000756a1525 2 bytes JMP 76ec8ae2 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameW + 17 00000000756a153d 2 bytes JMP 76e3fca8 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!EnumProcesses + 17 00000000756a1555 2 bytes JMP 76e468ef C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetProcessMemoryInfo + 17 00000000756a156d 2 bytes JMP 76ec8fe3 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetPerformanceInfo + 17 00000000756a1585 2 bytes JMP 76ec8b42 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!QueryWorkingSet + 17 00000000756a159d 2 bytes JMP 76ec86dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetModuleBaseNameA + 17 00000000756a15b5 2 bytes JMP 76e3fd41 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetModuleFileNameExA + 17 00000000756a15cd 2 bytes JMP 76e4b2dc C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 20 00000000756a16b2 2 bytes JMP 76ec8ea4 C:\Windows\syswow64\kernel32.dll
.text C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe[2632] C:\Windows\syswow64\Psapi.dll!GetProcessImageFileNameW + 31 00000000756a16bd 2 bytes JMP 76ec8671 C:\Windows\syswow64\kernel32.dll
.text C:\Program Files\AVAST Software\Avast\AvastUI.exe[2980] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000076e28781 8 bytes [31, C0, C2, 04, 00, 90, 90, ...]
---- Processes - GMER 2.1 ----
Library C:\Users\Suffian\AppData\Local\iLivid\imageformats\qico4.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Local\iLivid\iLivid.exe [2524] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2013-12-02 14:38:44) 0000000073090000
Library C:\Users\Suffian\AppData\Local\iLivid\imageformats\qgif4.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Local\iLivid\iLivid.exe [2524] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2013-12-02 14:38:44) 0000000073080000
Library C:\Users\Suffian\AppData\Local\iLivid\imageformats\qjpeg4.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Local\iLivid\iLivid.exe [2524] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2013-12-02 14:38:44) 0000000073040000
Library c:\users\suffian\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp1td4le.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632](2015-06-09 11:59:20) 0000000002380000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5Core.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:24) 0000000068840000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\icuin52.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (ICU I18N DLL/The ICU Project)(2015-03-04 21:45:30) 000000004a900000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\icuuc52.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (ICU Common DLL/The ICU Project)(2015-03-04 21:45:30) 0000000005a50000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\icudt52.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (ICU Data DLL/The ICU Project)(2015-03-04 21:45:30) 000000004ad00000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5Widgets.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:28) 000000006b550000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5Gui.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000066f70000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\libGLESv2.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632](2015-03-04 21:45:30) 0000000066eb0000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5Network.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000066b00000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5WebKit.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000065b10000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5Quick.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 00000000658f0000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5Qml.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000065690000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5Sql.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 00000000714d0000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\libEGL.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632](2015-03-04 21:45:30) 00000000714c0000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5WebKitWidgets.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:28) 0000000071490000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5OpenGL.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000071450000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Qt5PrintSupport.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632] (C++ application development framework./Digia Plc and/or its subsidiary(-ies))(2015-03-04 21:45:26) 0000000071400000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632](2015-03-04 21:45:30) 00000000655b0000
Library C:\Users\Suffian\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll (*** suspicious ***) @ C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe [2632](2015-03-04 21:45:30) 0000000065570000
Process C:\Users\Suffian\Desktop\PC Problem\Gmer-19357.exe (*** suspicious ***) @ C:\Users\Suffian\Desktop\PC Problem\Gmer-19357.exe [2968](2015-06-09 12:44:10) 0000000000400000
---- EOF - GMER 2.1 ----
|
|
10.06.2015, 05:34
| #3 |
| /// the machine /// TB-Ausbilder    | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem hi,
__________________Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ |
|
11.06.2015, 15:18
| #4 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Hi Schrauber, danke für die Instruktionen. Ich habe alles erledigt, nur "media enhance" konnte nicht gefunden werden, der Rest wurde gelöscht. Und hier der Combofix.txt Code:
ATTFilter ComboFix 15-06-09.01 - Suffian 11.06.2015 15:40:53.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3891.2027 [GMT 2:00]
ausgeführt von:: c:\users\Suffian\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\SearchProtect
c:\program files (x86)\SearchProtect\EULA.txt
c:\program files (x86)\SearchProtect\Main\rep\cfi.bin
c:\program files (x86)\SearchProtect\Main\rep\edk.bin
c:\program files (x86)\SearchProtect\Main\rep\pni.bin
c:\program files (x86)\SearchProtect\Main\rep\SystemRepository.dat
c:\program files (x86)\SearchProtect\Main\rep\trn.bin
c:\program files (x86)\SearchProtect\SearchProtect\bin\RN32.dll
c:\program files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe
c:\program files (x86)\SearchProtect\UI\dialogs\Consent\consent.css
c:\program files (x86)\SearchProtect\UI\dialogs\Consent\consent.html
c:\program files (x86)\SearchProtect\UI\dialogs\Consent\consent.js
c:\program files (x86)\SearchProtect\UI\dialogs\Consent\defaults.js
c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-default.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-onclick.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\Apply-Rollover.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg-dia.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg-uninstall.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg-with-logo.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bg.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgNotif.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgSettings.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgSettingsDS.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\bgUninstall.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnBlue.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnClose.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\btnSilver.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\button-bg.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox_checked.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\checkbox_def.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\close-win-def.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\close-win-over-click.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\gray-bg.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez-def-grey.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez-def.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez-selected.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\hez.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\icon-win.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\info-icon.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\menu-rollover.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\menu-selected.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button-def.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button-selected.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\radio-button2.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\Settings-icon.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\SP_DialogBG.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\text-field.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\v.png
c:\program files (x86)\SearchProtect\UI\dialogs\Images\x.png
c:\program files (x86)\SearchProtect\UI\dialogs\libs\defaults.js
c:\program files (x86)\SearchProtect\UI\dialogs\libs\DialogAPI.js
c:\program files (x86)\SearchProtect\UI\dialogs\libs\dialogUtils.js
c:\program files (x86)\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js
c:\program files (x86)\SearchProtect\UI\dialogs\libs\json2.min.js
c:\program files (x86)\SearchProtect\UI\dialogs\libs\main.js
c:\program files (x86)\SearchProtect\UI\dialogs\protection\defaults.js
c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.css
c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.html
c:\program files (x86)\SearchProtect\UI\dialogs\protection\protection.js
c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\defaults.js
c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.css
c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.html
c:\program files (x86)\SearchProtect\UI\dialogs\protectionDS\protectionDS.js
c:\program files (x86)\SearchProtect\UI\dialogs\settings.html
c:\program files (x86)\SearchProtect\UI\dialogs\settings\defaults.js
c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.css
c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.html
c:\program files (x86)\SearchProtect\UI\dialogs\settings\settings.js
c:\program files (x86)\SearchProtect\UI\dialogs\style.css
c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\defaults.js
c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.css
c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.html
c:\program files (x86)\SearchProtect\UI\dialogs\uninstall\uninstall.js
c:\program files (x86)\TelevisionFanaticEI
c:\program files (x86)\TelevisionFanaticEI\Installr\1.bin\64EIPlug.dll
c:\programdata\11823381522227586273
c:\programdata\11823381522227586273\39878081d279d3e2a1e87191bacad1d8.ini
c:\programdata\11823381522227586273\4d2282916921c92aa1e87191bacad1d8.ini
c:\programdata\11823381522227586273\9cd174290c25fe97a1e87191bacad1d8.ini
c:\programdata\11823381522227586273\a0596c7c0b86160fa1e87191bacad1d8.ini
c:\programdata\11823381522227586273\d68029112ed52a1ea1e87191bacad1d8.ini
c:\programdata\11823381522227586273\fe7fa687de2172fba1e87191bacad1d8.ini
c:\programdata\600440862
c:\users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Browser Good_iels
c:\users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\PlurPush_iels
c:\windows\msdownld.tmp
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-05-11 bis 2015-06-11 ))))))))))))))))))))))))))))))
.
.
2015-06-11 13:50 . 2015-06-11 13:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-06-11 13:01 . 2015-06-11 13:01 -------- d-----w- c:\program files (x86)\VS Revo Group
2015-06-11 12:39 . 2015-06-11 12:39 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{630165CA-8615-4BA4-92E3-FFC5B942D8C4}\offreg.5480.dll
2015-06-11 10:25 . 2015-06-11 10:25 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{630165CA-8615-4BA4-92E3-FFC5B942D8C4}\offreg.5568.dll
2015-06-10 14:25 . 2015-05-22 18:18 1021440 ----a-w- c:\windows\system32\appraiser.dll
2015-06-10 14:24 . 2015-05-22 18:18 700416 ----a-w- c:\windows\system32\generaltel.dll
2015-06-10 14:24 . 2015-05-22 18:18 757248 ----a-w- c:\windows\system32\invagent.dll
2015-06-10 14:24 . 2015-05-22 18:18 423424 ----a-w- c:\windows\system32\devinv.dll
2015-06-10 14:24 . 2015-05-22 18:18 45568 ----a-w- c:\windows\system32\acmigration.dll
2015-06-10 14:24 . 2015-05-22 18:13 1119232 ----a-w- c:\windows\system32\aeinv.dll
2015-06-10 14:24 . 2015-05-21 13:19 193536 ----a-w- c:\windows\system32\aepic.dll
2015-06-10 14:24 . 2015-05-22 18:18 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-06-10 13:04 . 2015-04-11 03:19 69888 ----a-w- c:\windows\system32\drivers\stream.sys
2015-06-10 12:51 . 2015-06-10 12:51 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{630165CA-8615-4BA4-92E3-FFC5B942D8C4}\offreg.2648.dll
2015-06-09 12:33 . 2015-06-09 12:37 -------- d-----w- C:\FRST
2015-06-09 12:19 . 2015-05-03 03:16 12214312 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{630165CA-8615-4BA4-92E3-FFC5B942D8C4}\mpengine.dll
2015-05-14 12:40 . 2015-05-01 13:17 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 12:40 . 2015-05-01 13:16 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 11:54 . 2015-04-13 03:28 328704 ----a-w- c:\windows\system32\services.exe
2015-05-13 11:53 . 2015-04-27 19:16 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-06-10 17:49 . 2012-03-10 19:15 140135120 ----a-w- c:\windows\system32\MRT.exe
2015-04-27 19:04 . 2015-05-13 11:54 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-04-03 10:08 . 2012-05-31 15:59 778928 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-04-03 10:08 . 2011-11-17 12:48 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-25 03:24 . 2015-04-15 14:17 98304 ----a-w- c:\windows\system32\wudriver.dll
2015-03-25 03:24 . 2015-04-15 14:17 37376 ----a-w- c:\windows\system32\wups2.dll
2015-03-25 03:24 . 2015-04-15 14:17 35328 ----a-w- c:\windows\system32\wups.dll
2015-03-25 03:24 . 2015-04-15 14:17 3298816 ----a-w- c:\windows\system32\wucltux.dll
2015-03-25 03:24 . 2015-04-15 14:17 2553856 ----a-w- c:\windows\system32\wuaueng.dll
2015-03-25 03:24 . 2015-04-15 14:17 191488 ----a-w- c:\windows\system32\wuwebv.dll
2015-03-25 03:24 . 2015-04-15 14:17 696320 ----a-w- c:\windows\system32\wuapi.dll
2015-03-25 03:24 . 2015-04-15 14:17 60416 ----a-w- c:\windows\system32\WinSetupUI.dll
2015-03-25 03:23 . 2015-04-15 14:17 12288 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:23 . 2015-04-15 14:17 36864 ----a-w- c:\windows\system32\wuapp.exe
2015-03-25 03:23 . 2015-04-15 14:17 135168 ----a-w- c:\windows\system32\wuauclt.exe
2015-03-25 03:00 . 2015-04-15 14:17 92672 ----a-w- c:\windows\SysWow64\wudriver.dll
2015-03-25 03:00 . 2015-04-15 14:17 566784 ----a-w- c:\windows\SysWow64\wuapi.dll
2015-03-25 03:00 . 2015-04-15 14:17 29696 ----a-w- c:\windows\SysWow64\wups.dll
2015-03-25 03:00 . 2015-04-15 14:17 173056 ----a-w- c:\windows\SysWow64\wuwebv.dll
2015-03-25 03:00 . 2015-04-15 14:17 33792 ----a-w- c:\windows\SysWow64\wuapp.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOPI.EXE"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe" [2011-05-16 846936]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-11-23 39408]
"AutoStartNPSAgent"="c:\program files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe" [2010-07-04 95576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NBAgent"="c:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2011-01-07 1406248]
"HWSetup"="c:\program files\TOSHIBA\Utilities\HWSetup.exe" [2010-03-04 423936]
"KeNotify"="c:\program files (x86)\TOSHIBA\Utilities\KeNotify.exe" [2010-08-15 34160]
"ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2009-10-06 1294136]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-12-04 5225064]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"TOPI.EXE"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [2011-05-16 846936]
.
c:\users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-5-5 43374104]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
simplicheck.lnk - c:\program files (x86)\simplitec\simplicheck\simplicheck.exe -timer [2012-10-22 2936168]
Toshiba Places Icon Utility.lnk - c:\program files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [2011-5-30 1492352]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-1 481184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R1 qrnfd_1_10_0_9;qrnfd_1_10_0_9;c:\windows\system32\drivers\qrnfd_1_10_0_9.sys;c:\windows\SYSNATIVE\drivers\qrnfd_1_10_0_9.sys [x]
R2 51cdb72;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 Update PlurPush;Update PlurPush;c:\program files (x86)\PlurPush\updatePlurPush.exe;c:\program files (x86)\PlurPush\updatePlurPush.exe [x]
R2 Util Browser Good;Util Browser Good;c:\program files (x86)\Browser Good\bin\utilBrowserGood.exe;c:\program files (x86)\Browser Good\bin\utilBrowserGood.exe [x]
R2 Util PlurPush;Util PlurPush;c:\program files (x86)\PlurPush\bin\utilPlurPush.exe;c:\program files (x86)\PlurPush\bin\utilPlurPush.exe [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192Ce.sys [x]
R3 SPPD;SPPD;c:\windows\system32\drivers\SPPD.sys;c:\windows\SYSNATIVE\drivers\SPPD.sys [x]
R3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe;c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [x]
S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 webinstr;webinstr;c:\windows\system32\Drivers\webinstr.sys;c:\windows\SYSNATIVE\Drivers\webinstr.sys [x]
S3 CeKbFilter;CeKbFilter;c:\windows\system32\DRIVERS\CeKbFilter.sys;c:\windows\SYSNATIVE\DRIVERS\CeKbFilter.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys;c:\windows\SYSNATIVE\DRIVERS\pgeffect.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter;c:\windows\system32\DRIVERS\rtwlane.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlane.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-01-27 16:33 1086280 ----a-w- c:\program files (x86)\Google\Chrome\Application\40.0.2214.93\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-06-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-05 20:47]
.
2015-06-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-05 20:47]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-12-04 15:39 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 185824 ----a-w- c:\users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Toshiba TEMPRO"="c:\program files (x86)\Toshiba TEMPRO\TemproTray.exe" [2011-02-10 1546720]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-28 11101800]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-07-28 2120808]
"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-02-05 709976]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"Toshiba Registration"="c:\program files\TOSHIBA\Registration\ToshibaReminder.exe" [2011-05-30 150992]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-10 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-10 392984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-10 417560]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.com/?trackid=sp-006
mStart Page = https://www.google.com/?trackid=sp-006
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
mSearch Bar = https://www.google.com/?trackid=sp-006
uSearchAssistant = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbH0,&q={searchTerms}
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Zu TOSHIBA Bulletin Board hinzufügen - c:\program files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\
FF - prefs.js: browser.search.defaulturl - hxxps://www.google.com/search/?trackid=sp-006
FF - prefs.js: browser.search.selectedEngine - Google (avast)
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/?trackid=sp-006
FF - prefs.js: keyword.URL - hxxps://www.google.com/search/?trackid=sp-006
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{31ad400d-1b06-4e33-a59a-90c2c140cba0} - (no file)
BHO-{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - (no file)
BHO-{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-Browser Infrastructure Helper - c:\users\Suffian\AppData\Local\Smartbar\Application\Smartbar.exe
Wow6432Node-HKLM-Run-NPSStartup - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-mobilegeni daemon - c:\program files (x86)\Mobogenie\DaemonProcess.exe
Wow6432Node-HKLM-Run-fst_de_89 - (no file)
Wow6432Node-HKLM-Run-fst_de_92 - (no file)
Wow6432Node-HKLM-Run-AnyProtect Scanner - c:\program files (x86)\AnyProtectEx\AnyProtect.exe
Wow6432Node-HKLM-Run-fst_de_60 - (no file)
Wow6432Node-HKLM-Run-gmsd_de_251 - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
BHO-{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file)
Toolbar-Locked - (no file)
HKLM-Run-TosNC - c:\program files (x86)\Toshiba\BulletinBoard\TosNcCore.exe
HKLM-Run-TosReelTimeMonitor - c:\program files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
HKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
HKLM-Run-SmoothView - c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe
HKLM-Run-00TCrdMain - c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
HKLM-Run-SmartFaceVWatcher - c:\program files (x86)\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-3D BubbleSound - c:\program files\BubbleSound\3D BubbleSound.exe
AddRemove-Activeris AntiMalware_is1 - c:\program files (x86)\Activeris AntiMalware\unins000.exe
AddRemove-I - Cinema - c:\program files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-06-11 15:53:48
ComboFix-quarantined-files.txt 2015-06-11 13:53
.
Vor Suchlauf: 95.977.472 Bytes frei
Nach Suchlauf: 3.954.167.808 Bytes frei
.
- - End Of File - - F397A8A91E4C2AFB23A2DC6C4F454F35
|
|
12.06.2015, 16:48
| #5 |
| /// the machine /// TB-Ausbilder | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.06.2015, 17:26
| #6 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Hallo Schrauber, ich habe alles durchgeführt und sende nun alle Berichte: Mbam.txt - Teil 1 Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 15.06.2015 Suchlauf-Zeit: 16:56:41 Logdatei: mbam.txt Administrator: Ja Version: 2.01.6.1022 Malware Datenbank: v2015.06.15.04 Rootkit Datenbank: v2015.06.15.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Suffian Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 383319 Verstrichene Zeit: 29 Min, 4 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 584 PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [60a09724aedc4cead28936710cf726da], PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [60a09724aedc4cead28936710cf726da], PUP.Optional.Delta.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [60a09724aedc4cead28936710cf726da], PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3408AC0D-510E-4808-8F7B-6B70B1F88534}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, , [b54bb9027b0f79bd4e969b0ff60dba46], PUP.Optional.Snapdo.T, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [22de03b81f6bf34388599e0ca75c0cf4], PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, , [22de03b81f6bf34388599e0ca75c0cf4], PUP.Optional.SearchProtect.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, , [cb35b209b0da4aec76b78ae4d72c7090], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31ad400d-1b06-4e33-a59a-90c2c140cba0}, , [32cec9f2acded46243a71e88c73ca65a], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, , [32cec9f2acded46243a71e88c73ca65a], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, , [32cec9f2acded46243a71e88c73ca65a], PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IESmartBar.BHO, , [32cec9f2acded46243a71e88c73ca65a], PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [2ed28e2d6426c86e82ffbbb71be827d9], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{079E2F0F-FCA0-4163-BC82-5355B879E86E}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4CA94303-9DBE-40E2-ACDD-AE966657FD91}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66A9AAEF-9AD3-4336-A8C2-BDF384CCB553}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F0F6B50E-100C-4839-A519-D812A5A57EA1}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4CA94303-9DBE-40E2-ACDD-AE966657FD91}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66A9AAEF-9AD3-4336-A8C2-BDF384CCB553}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F0F6B50E-100C-4839-A519-D812A5A57EA1}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4CA94303-9DBE-40E2-ACDD-AE966657FD91}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{66A9AAEF-9AD3-4336-A8C2-BDF384CCB553}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F0F6B50E-100C-4839-A519-D812A5A57EA1}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{079E2F0F-FCA0-4163-BC82-5355B879E86E}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.SoftCoup.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{079E2F0F-FCA0-4163-BC82-5355B879E86E}, , [e02011aa7e0c3006e7e54143fc09ff01], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, , [ef116d4ed2b83afcc54792a227ddca36], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{205FB1F1-CAAD-4670-B9A8-02E40EF5517D}, , [7a86605b008a2511c6d18efb010422de], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79C6BDB5-F53E-4BDA-89FB-DCD1F55FCD3F}, , [df2125967812b1851386008907fef010], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F13537E-0EFF-422F-8196-3DA13715A819}, , [59a7863506841c1a6435d1b8c540916f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BBD0E1A7-0AB4-40B6-87E7-FE1797AA48E1}, , [f709bdfeb7d360d6e3b4a7e29c693ec2], PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\VC32LDR, , [e41c8b30dfab50e67c573a520bfa27d9], PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, , [16ea9e1d8a0050e629d5c5b2f015e41c], PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, , [6d93f9c218722c0add20e2954db87a86], PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [956b209b8bffe84e9bdb2f5d22e3cd33], PUP.Optional.Awesomehp.A, HKLM\SOFTWARE\WOW6432NODE\awesomehpSoftware, , [6e923f7c3b4fff375065b18b768ed62a], PUP.Optional.DealPly.A, HKLM\SOFTWARE\WOW6432NODE\DealPlyLive, , [1de34f6c642665d1b40ae4727590f50b], PUP.Optional.FreeSoftToday.A, HKLM\SOFTWARE\WOW6432NODE\FrEeSoFtOdAy, , [a35d02b90d7d0630657a33eace36cb35], Adware.EoRezo, HKLM\SOFTWARE\WOW6432NODE\FrEeSoFtToDaY, , [b14f9c1f2f5bd46284c55704de2755ab], PUP.Optional.Eorezo.A, HKLM\SOFTWARE\WOW6432NODE\FREE_SOFTTODAY, , [728e2b9093f7d95daa4096898c787e82], PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\GAMESDESKTOP, , [1ae6bb00d5b59f97eadb09fc44c006fa], PUP.Optional.MediaEnhance.A, HKLM\SOFTWARE\WOW6432NODE\media enhance, , [fe028239a4e6f83e7d2dcd60b74d33cd], PUP.Optional.QuickRef.A, HKLM\SOFTWARE\WOW6432NODE\QuickRef_1.10.0.9, , [a35d79426a20b680da960ff00201b947], PUP.Optional.TelevisionFanatic.A, HKLM\SOFTWARE\WOW6432NODE\TelevisionFanaticEI, , [f40ccdee8efc171f30a862a6bd47817f], PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [cf314a71fc8e68ce7607424c40c5b848], PUP.Optional.SuperOptimizer.C, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, , [748c85366b1f44f26c12ef9ffe07ab55], PUP.Optional.Lyrics.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\epojlgbehpaeekopencdagbdamnkppci, , [e41c19a292f87bbbbb7ea592ba4aff01], PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pelmeidfhdlhlbjimpabfcbnnojbboma, , [f40cc7f46b1f310504920a2a8f7533cd], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21636, , [9f618833b8d256e0cc404aeaa3615fa1], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{205FB1F1-CAAD-4670-B9A8-02E40EF5517D}, , [7b85b9025a30b87ed0c7b5d40203e719], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79C6BDB5-F53E-4BDA-89FB-DCD1F55FCD3F}, , [926efcbf3c4efc3a0e8ba2e7f80d21df], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F13537E-0EFF-422F-8196-3DA13715A819}, , [eb151f9c8dfd1a1c6831474219ecbc44], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BBD0E1A7-0AB4-40B6-87E7-FE1797AA48E1}, , [2ed2d7e4e8a21d194e49e1a858ad7c84], PUP.Optional.TelevisionFanatic.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@ei.TelevisionFanatic.com/Plugin, , [24dc05b6b2d832041abd1aee05ffaa56], PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [b44c219a9af0ed4985f17913e91cc63a], PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT, , [bd43358624661a1cb02a46da4aba738d], PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [46ba5368f6946acc3cc1d8464cb8b24e], PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, , [946c744766245bdb93933848e81d966a], PUP.Optional.QuickRef.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\qrnfd_1_10_0_9, , [0bf5ba018efc9a9c2b486699f01340c0], PUP.Optional.PlurPush, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update PlurPush, , [c63a3784e7a396a03ceb4fe94aba6c94], PUP.Optional.BrowserGood.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util Browser Good, , [f20e5d5e0c7eb87e81c342c2f80cc13f], PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD, , [dd23d8e39bef6cca6a891efc5ea6f10f], PUP.Optional.AddLyrics, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WEBINSTR, , [37c92a915e2c23137b2a24eeed1702fe], PUP.Optional.SuperOptimizer.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [d52bbefd2862e650e3990589a263ae52], PUP.Optional.BlockAndSurf.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\BlockAndSurf, , [a858e0db83078bab80fbe436bf456f91], PUP.Optional.Feven.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\free ven, , [f20efac1365448ee9201f834bd47df21], PUP.Optional.MediaEnhance.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\media enhance, , [b050704b9feb241237752c01ea1a4eb2], PUP.Optional.BoBrowser.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\BoBrowser, , [1ce4b00b890158deea08d8288a7ad12f], PUP.Optional.DataMngr.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\DataMngr_Toolbar, , [ac544c6f35553cfa2e175104d332d62a], PUP.Optional.DealPly.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\DealPlyLive, , [17e95a6197f3c076cbf657ff9d68d32d], PUP.Optional.FileScout.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\FileScout, , [2ad695266921c96d4e3cf19dff06847c], PUP.Optional.FreeSoftToday.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\freesofttoday, , [0df3803bc1c9bf777c66e78eac5907f9], PUP.Optional.InstallCore.C, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\InstallCore, , [738d12a9dab096a02d4b8d0139cc38c8], PUP.Optional.SmartBar, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\SmartbarBackup, , [c33d53685d2dda5c0e3c77f6de27ef11], PUP.Optional.SmartBar, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\SmartbarLog, , [fc04b803d8b267cfbb8e9cd116ef58a8], PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\TutoTag, , [38c8536862287eb833df9fd83ec735cb], PUP.Optional.AnyProtect.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\ANYPROTECT, , [36ca29923b4fd5612ff7147a06fffa06], PUP.Optional.SuperOptimizer.C, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [46baa219dfab82b49ede315d6a9b32ce], PUP.Optional.BlockAndSurf.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\APPDATALOW\SOFTWARE\BlockAndSurf, , [718fddde51390c2ac6b57b9f39cb18e8], PUP.Optional.Feven.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\APPDATALOW\SOFTWARE\free ven, , [d42c7d3ec3c742f492012408b84c23dd], PUP.Optional.MediaEnhance.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\APPDATALOW\SOFTWARE\media enhance, , [4ab62b904f3b181e06a6191432d2dd23], PUP.Optional.GamesDesktop.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\GAMESDESKTOP, , [ec1424971674a4921309473f2adbad53], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, , [21df1aa16b1ffa3c4d15f41eed177888], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1021EDCD-FA29-4C64-854E-A779F5E6B06C}, , [3fc1ffbc76141d193d581673ae57c63a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1180554A-7E8F-4CE4-B357-75B3153D6643}, , [748c17a4c0cad462286ef29700055fa1], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{124202BB-FB20-4523-86B7-947276274D43}, , [827eccef96f49e98e6b0a1e87d88dc24], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{125708AD-663C-4A1A-8F9D-7ACD894C88CC}, , [aa56bdfe0882211580153e4b3ec7857b], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{129F595C-D856-4334-A7E3-5B826B68A821}, , [25dbd7e4830722143f57aedb0ff6ea16], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13B56BE9-27CB-43C9-8237-32925FD1C228}, , [7a860cafa2e878be4c4a7712dc291be5], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{143454E2-A840-48D7-96DF-411C65F3A520}, , [fc04ccef1377e254b3e33059db2ad22e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1444B4A7-45C5-4D50-A475-26CAC345C696}, , [9e624b70a0ea2c0ae6af73168a7b4bb5], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{151BA68B-F1A0-4CA7-9BFA-198E3D45848F}, , [4eb274477e0cb87ebadbfd8ccb3aae52], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{15BA93C3-E97C-441B-B1D6-4D6424A3F240}, , [6c946e4dacde02344f478900f213d030], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{179CCAE6-2A49-4FA7-911E-55B280687DF3}, , [4cb49d1ed2b846f0a9ed206939ccb24e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{17BDB229-E1FD-4C8C-AE61-7AFC3A2EE2F7}, , [2cd40face9a180b613827b0e5ea7f30d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{17ED4307-8F3B-41F5-AD95-F132C2AD4440}, , [7d83c3f8bbcfaf87f1a57f0aed18619f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{185123E4-4498-447D-94BC-DF4DEDA713E8}, , [c13f47745b2f8ea895001871c540f40c], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1928A4A3-564C-411E-AC1F-F1AB19212E64}, , [e818902b5436c07636601c6d06ff5fa1], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{194B5319-5D43-47DB-BB3A-4E71E13362D9}, , [28d814a7f4961b1b3e585d2cb550f907], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1955DEA9-286F-4C1C-ADB6-7B848B813497}, , [e31d9526addd9f97d7bf3950f90cf20e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A3E3F37-AD62-4400-B831-CFF515A24E77}, , [8d73d7e44d3db3839bfb1376ab5a3cc4], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A8B2477-DFED-448C-BD68-5D56ED249071}, , [c040fcbf94f6f0468e071d6cd3327e82], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B0AD898-3FD6-440C-9D63-A9B94CE1B169}, , [f9074f6cd3b749ed6f266a1f58ad4fb1], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1BDB711F-EA36-437C-9878-571F223829DE}, , [c43ce5d6f99182b49bfb59301ce95ba5], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CDDDCD0-6F4B-4870-B7AC-E9C6C6FFF379}, , [c23e4e6d9eece452e6af741559accf31], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D168C00-37DC-4675-8CA1-6D2372972721}, , [a759c0fb672349ed34618900ab5aef11], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DA0BDD1-DE9C-4198-AED3-A1AC47416D27}, , [06fabefd7218c4724253b9d02ed741bf], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DA7107E-AFED-4AA8-BA7F-29D62A17AF25}, , [0bf512a9761457df7b1af79243c2669a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DBE8071-183D-4397-BCA7-4A444F8A9CB3}, , [57a993282e5c999d5b3b17729a6b20e0], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DF47CAF-DB7E-420E-B0A4-E3CA404D6F2D}, , [15eb7c3f523823135c39a9e0c14437c9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E696AAF-C3FA-4DE9-96C5-6D97DC8AFBC6}, , [ca36e6d58efcb6802b6ab0d9b64f3ec2], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1F15820F-FE3B-41AB-A6D1-21F7D57DAACC}, , [fa066d4eed9de4527224b5d4a75edb25], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2047B49E-7F6A-4BB4-87EC-12163DAC91BB}, , [2cd43586e7a3270ffd998207de27b34d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{204C0598-5F91-45CF-A3DB-3C6C59836F30}, , [a0604e6d0387c2741b7a325754b1d32d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{205FB1F1-CAAD-4670-B9A8-02E40EF5517D}, , [7c84e1da008a6bcb3b59bfcaaa5b7b85], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20DEBED1-C3C4-4BAC-BCA8-89361BBD8984}, , [31cf1d9e533726106f26563321e435cb], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20E66F3D-5DA7-4111-B34A-6C2456EB90CD}, , [6c948d2e1f6b063030658ffad92c6898], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21048106-F7AF-4AEE-99BA-F878A355E2F0}, , [e7196b50bbcfe74f98feb4d52bda42be], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{211693F3-6E81-4829-AB69-CFB46A2E1766}, , [926e66550288e4523362cdbcdc2919e7], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21A5C8E4-8454-4B3D-827E-CB8013797EA8}, , [3cc434875832fd39a5f17e0bd62fda26], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2253C3F2-E64C-4D96-AF84-BF43264273B0}, , [5ba5d4e78efca49253426524dd28cd33], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{22A1C91E-C887-415C-BA69-7CAC7C2CAEEB}, , [2cd452698bffb77f5c3992f7a46136ca], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{22CE5E88-8DCD-49C6-929B-30F34A9463B6}, , [53adc5f688021c1adabbe7a2699c728e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{236D1955-42B8-4A76-807B-908D1FC4C1DD}, , [827eb506e2a8092d1f76a4e59a6b36ca], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{24865684-D35E-42AD-A05A-7CA9E849B165}, , [37c97a41a0ea9e9810856c1d56af8e72], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{24C4C167-EDB7-41FA-A5B0-356E32C9A76F}, , [a45c2b90fd8da88ec8cee9a009fc3ac6], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2509A1CA-8113-44BD-A9A0-478C14B08D58}, , [23dddae187030d299bfbee9bf114e818], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{253E392E-5CAC-4BA3-9737-C6AC5A93D52F}, , [f20e67543e4cba7c088eaadf22e35ca4], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25AD320D-3650-4F31-8D8F-EBDC5A50EFA3}, , [90700ab1701aac8afa9c2267bd48dd23], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25EDC3C1-40A9-4FED-AB84-219930DC364E}, , [2ad63f7c701a2412296c1e6b65a0857b], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26177595-4985-49AF-AE39-5680C12456CB}, , [728ef4c7503a37ffdcb9127743c2ce32], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26B006DA-D3D5-4106-BDC0-4E3736AF55A4}, , [40c015a6c8c2bc7aeaac7b0e8e77d12f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{290BEBD4-3F42-436C-8B83-BE31A1EE25B8}, , [5ca4912a1476b680d9bc5e2b798c936d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2917CFA6-2EB2-4830-82C0-38A7FDB6BE55}, , [3ac62d8e3258f046c8cdb3d6b451e31d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29303AEB-EB00-4AA9-8F16-F1881723459B}, , [728ed9e2f694ae8897ffdaafed186898], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{297F5647-8C57-4AFC-BE95-8EA8F957C0CD}, , [1ae68b30aae05cda2c69a8e1ba4b21df], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29ABA46C-21C2-4511-9687-C5331D6B4FD6}, , [bf417843a4e6b87e1c793a4f30d53ec2], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BAAEAEC-6E73-494A-9CFE-421CFC5DF8FA}, , [9f61803b2e5cd95da7ee46433ec7629e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BC2C563-3BA9-4395-B8AD-4540A55FB111}, , [fd03318adbaf38feeca91a6f25e0e61a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C154086-4703-4FE4-A32B-5A367DBD1472}, , [17e9b00b0f7b63d370253c4d5aabf10f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C58F281-BA52-4C60-9DAA-9CB938FC21D8}, , [3fc12a91afdbcc6aa1f4cfba59ac2bd5], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CA5D04C-9569-49ED-B71A-3151643C18F2}, , [46bac1fadfab79bd365ff39653b27f81], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CB55055-F64D-4072-A2BD-C8AD26F7B44E}, , [6f91cbf07a1071c5eaac2b5e27de04fc], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D6C3C8A-E078-4EC1-9DD6-F222161EEE1C}, , [b64afdbeccbe87af385d1a6f867f7b85], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2DE790C5-AB5D-4A13-B0A9-AE86F16610A2}, , [847c5e5d6f1b87af4d480188ab5a46ba], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F3DF88A-9571-4C52-9497-87E690E5D580}, , [9868219ae9a1c571b1e4157461a4827e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3058D678-6870-4A08-BCE7-A7691BBCEA8B}, , [8d7301baccbe49ed365fdfaa26dfea16], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32368DAC-49E5-4484-A3FE-79F0159966C4}, , [9e620caf355574c250455c2d08fd4ab6], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32802F6D-6A98-4B3C-9E55-E85B784BDC70}, , [a957a912256516202274177236cf5da3], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{335F8FC3-E21C-4576-9681-D818FBA94D86}, , [19e7d7e40e7cee484253eb9eec19926e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3370C822-8245-446C-9241-236533326E6B}, , [1ae6d1ea3f4b59dd2174642514f1c63a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{337A5F75-6DBB-4E4C-BF21-F91AC9F2F62E}, , [926e605b583265d1425341487e8739c7], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3390C5DF-1A4D-4D14-A5D8-F67E62EB9A80}, , [6b95b00bc9c1181e7421bbceb55059a7], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33956AA2-81F6-4FB0-BF97-44CB6720805F}, , [dd23704b0f7b72c497ffaddc47beae52], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{347692A4-2DA4-4752-8227-89A7E5319772}, , [718f26956921ab8b197dbfca29dc4cb4], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34C40D1B-FBD2-4607-AFD6-3B9452DBF4CA}, , [b64a2596a4e6a393395d35540302b14f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34F8D572-8455-4A50-ADE9-CF73D6F959B4}, , [0af63388a8e211259bfa64258e779f61], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3597A40C-A0CC-4B07-8DA4-6F6D7B4A45CB}, , [8e72407bd0bafe381a7b513839cc7090], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36513638-6BFC-4037-A84A-E2FB6D60668D}, , [cc340dae82086ec86b2a0584d332639d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{365A73FF-19FF-48DA-9DF7-86F01261FF4B}, , [09f7febdcebc3402d4c14346c34224dc], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36AA846C-E940-4EF8-9FC9-7B313586C221}, , [e9179d1ef2987cba276f5930ba4be11f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36EBA426-DE22-403E-81D6-AEFA898340D7}, , [49b76358d9b1082ef1a4addc9b6a08f8], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{377C642B-21CF-417A-B1C8-364CA65DC8C4}, , [d62afac19befef47593c1772df266898], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{37C9A61D-19C2-4089-8686-30206673E6C1}, , [97690daef793e94dd7bf0980b5501ce4], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{380D6B95-32D8-40C3-9E95-C43576AA7FF2}, , [649c02b9f19945f1a8ee75141ce9db25], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3896437F-2296-45A7-8FA9-2FDD9081AF48}, , [4db36f4c513995a1b1e54a3f4cb97e82], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39010470-5036-4DFE-8279-44E2A0F57FB2}, , [6e92f9c26723da5c296cb4d5c4417a86], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3912117D-7B2F-4BD6-8987-A37A758BCF1D}, , [8080d4e7d3b70e289ef7c6c3798c0cf4], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39369967-1B99-4FBD-A71F-352172ADF77A}, , [b050516aabdfcf6794025d2c3ec709f7], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{399C2F51-2C71-40F5-A367-36F38FFB5B7B}, , [e21ed9e21b6f63d3870eed9c12f39070], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39FDA0B9-D210-41DF-9483-FCF76FCEAF46}, , [10f08f2cdab051e5e4b11574f213c33d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A0A0C5E-2CFA-4D66-8528-6CBBBA4ECC56}, , [8e721ba091f99c9a1b7a098040c531cf], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A26A537-8370-4864-818A-C62965D0334D}, , [80801aa18604f3437d191d6c9e67ee12], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A602BCD-19D6-4EE5-A26C-B9BE2CF64B44}, , [9e62407b325865d1c1d55d2ced1844bc], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A66999B-FEA6-41F1-82B9-1DB13140ABBD}, , [80809e1db0da74c2e5b1d9b0b154f30d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C60779D-1867-4E82-BD8A-C65374BC5651}, , [2ed26c4fd9b1c76f0491b9d0d72e1be5], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C9D8BDF-52F1-415B-8D21-2DD7EEADEE4E}, , [3dc3caf1abdfbe78068fabdea85df50b], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D941302-FA4D-4933-B8B3-4D814D577672}, , [04fc368585050b2b880eb6d3ad588c74], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E279E76-AB0F-4DFC-A1D8-46862180617A}, , [c040cdee662490a69501bacfa95ce719], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E30E37C-8CCE-4F97-ABF1-5D2AE1E27EA6}, , [36ca992297f39a9cdcb97316f21343bd], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3ECFF52C-6868-4D9F-87D2-C0508042D4C8}, , [9e62219af49676c031658603a75ee11f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F01291D-2912-4FA8-8EE1-4BEEB4A38351}, , [8e729f1cf694c373465038512bdaa35d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F2E331D-E4D6-4B4E-90F7-2A21EE93969A}, , [4cb412a9cebcc472fd99494074911ee2], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FE27179-592E-40C7-B025-BEB93CA64741}, , [5da33d7e95f5e84ebdd8771265a034cc], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40877374-8816-48E7-9BA4-7D859C46C3A2}, , [4eb204b7ff8b0f27d7bf860357ae9769], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40B88E5E-9826-4E22-BC4F-57F46EF6F487}, , [3dc3447799f157df73220a7fce3710f0], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40C06F1C-CE78-4A65-9F24-F6E76AF52564}, , [19e70daed0badf571481d0b9bd4843bd], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40DAD0EC-2780-4118-A680-D71EA0B1DD1C}, , [af51f5c6e1a99b9b464f77125aabd42c], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F3BE69-E1C1-492F-A07F-772A27C346CE}, , [c63a7a41dbaf6ccaf0a50485d4315da3], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F3FA52-1078-4C8C-BD70-3557214B73F4}, , [3cc44e6d81096ec8682e8ffa55b0d030], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F606CE-A955-46D7-93A5-ECE2C83AED18}, , [53adf9c2642677bf7025d1b80bfa817f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{417307CE-C403-4111-8BA6-42798865758C}, , [b9477f3cb0dae3530f86a2e79f66f30d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{41F4B5EC-14FD-4C1B-ACE1-A9E8FF96872D}, , [966ac3f83a5068ce375e1a6f3acb08f8], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{425DC106-6846-4616-A490-F0BF4C781AF6}, , [c43cc7f456346acc51458504fe0713ed], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{42CFD7BB-3645-4AA7-ADAF-D4F2EFDBF2F7}, , [05fb6259d7b3ec4a682d3554838257a9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43C45F00-C043-45EE-85F1-3C261CA5BBF8}, , [9a664f6c56343006583dcdbcd62f8878], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43F8E10F-C6E8-442D-8F96-229AD3829851}, , [5ba508b3e9a1bc7aa2f398f18f762dd3], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{444C051E-1186-4F31-A876-2D1FBD855684}, , [2cd4427917730d29c1d53c4d25e047b9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{444C213D-E4AA-4B10-AFB7-E3A267E26782}, , [728ef6c54347eb4b3c5a6f1a4eb7768a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44614D28-6E2D-43E7-B517-AB46A167312E}, , [ab5552695e2c40f6f5a16722a65f3cc4], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4463E24B-57FD-4BEB-B788-27C672A7D7E7}, , [f8085b60eaa0b680266f98f158ad16ea], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4469D10E-E198-48B8-A5DB-4331E8E99F91}, , [db25f1ca1d6d0432ecaa8aff11f4c937], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44E681B2-6136-41B1-9DB5-49A7407DF1BF}, , [1ee2f2c96f1b989ef89dd6b325e044bc], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44E84548-26C9-4377-8DFB-2129ADA2BFC3}, , [d42cb704d7b33afc1f761a6ff411c53b], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{451567AA-EB56-4020-9088-8EF017F993BB}, , [22ded6e5731764d27d18b6d3d92c59a7], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{452B5122-61B9-40DA-9786-54B61DC0F131}, , [6c94bdfeec9e2610ebab49409b6ac040], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45B8E93B-3B62-4C23-B96A-50E59B64B8AD}, , [41bf8a313456cf67bfd6187140c5e61a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45E40EBF-32E7-4BDA-B19F-8BD3E87D301C}, , [916f06b529616dc9682eb3d6b253e61a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4648289D-EB99-4854-BD74-C24A126CC735}, , [a55b605b35550234afe6c5c463a25da3], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4691114F-5B95-4AA6-98A7-95DAA1EDD19D}, , [04fc13a8bbcf70c6623412775ca9b947], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46B107E8-959B-42A1-9AD5-A49C4C13FCB0}, , [31cf7f3cacde73c3dabb7d0c02032ad6], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46B667BF-54C5-43E5-A221-FA27845BD813}, , [df2187344c3eae883b5b7e0bc83d0000], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4700FF18-9F02-4975-8073-48399FEA19AB}, , [847c84377f0b290dfd9899f02dd88c74], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4712D6A7-F560-4E03-AA6F-C18F7C64197D}, , [b24e6d4eb0da1323bed82f5add2827d9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4760E792-E1E5-4D13-9F21-4BEDAEA53684}, , [31cf407ba3e7a690b5e1f396db2a0ef2], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48F91CBF-C7E1-4681-A44C-412C4FA4CA74}, , [926eeccf3b4fad89badb0188679e5ea2], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4911DADF-14D3-4E9E-895C-36F054DC1869}, , [51aff4c76b1fe5517c1a0a7ff60fc13f], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{495EC4FC-4F5B-442A-9650-194D96E21DC7}, , [0cf42695cebcf34333633e4bf312b947], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{495F0D3A-FA4D-4603-B04C-E9BEC7521CC6}, , [58a822995d2d4aec61341a6f90755aa6], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A012ACD-23DD-4F3E-BA7A-3A357C5B47FA}, , [4db302b9f199171ff89ea2e7966ff60a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B3108A5-3CF0-4A2C-878A-8B1774695FB5}, , [f80834873d4d60d651457c0d19ec55ab], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B5E11A8-ACCF-4B85-8A7D-C1E26ACDCAD2}, , [46ba219a7e0ce155068fee9bd43157a9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BB6686C-FB75-4528-8182-22327F14B5BE}, , [7b8508b3c5c575c199fd91f8ee1713ed], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C306DAD-E072-42C4-B761-A7F8A1BFCF44}, , [2fd108b39feb63d3b5e06326f80df40c], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CE2FEB9-59BB-47C9-98E5-A6472BE4E2D0}, , [3bc5eccf6f1b2016b6e0b4d5ad586b95], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D124C1A-95F1-4614-99BD-DEFDEF3063AB}, , [2bd52497cbbfd0664b4b0188e025c040], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D234840-6FEB-429E-9292-8E4C963C524D}, , [748ce7d42c5e63d3890d8306d82d7789], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4DFBF97B-29B3-40E5-BB7A-688043AE1593}, , [e020eecd395155e18c0afc8deb1acd33], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E08ABCC-1D75-4ED3-98DB-1AE1BB2A1BE2}, , [7888d8e3ec9e7db90294a2e7d233b050], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E3CF3D4-E41A-4F3A-9D73-8381708A36F9}, , [1fe10fac93f759ddf4a11c6df60f57a9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F07268D-46D9-4B7F-B618-5C91F5DB2F3A}, , [4eb2d9e2ee9c48eeeaac3257897cd42c], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F236143-ABC1-4603-BC2D-21EC157386FE}, , [50b02398454557df97fea3e664a19d63], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FB042DB-5C74-465A-85A5-76D1A2251980}, , [e51bfebdb7d39c9a781d6722e91cb947], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FE1E31B-71EB-444D-BDAC-F587B5C5DDA8}, , [fd03516a1c6ee1553a5cd7b2d2331de3], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FE356D2-474D-45AD-A0EE-1071D5AD3452}, , [659b3f7cf99193a3b0e5098008fd2fd1], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{500B7DCA-B7A8-417E-803A-9EF1637DC251}, , [e9176556fe8c77bfb6e015742bda6997], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{508C818E-8CE1-45A1-89A7-15E32A19F1D1}, , [6f91e5d66921ed4905900683ea1b1fe1], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{51508C08-C4E4-447F-B578-64919FBC99ED}, , [5da3803b187252e431650188ed181ee2], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{517B88C9-6825-4485-BF83-57DAF95591B0}, , [a35d8833fb8f5dd934611e6bf60f06fa], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{518E82FD-15B5-44ED-9582-B465E92D111B}, , [6c94cceff1994de923730c7de12437c9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52B7D57C-E281-4E7C-8C48-705EE0334A95}, , [758b289396f4ce687a1b127727de45bb], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52FB4F43-1BE9-460D-9086-859AF9421540}, , [be428c2f01891026395d6b1e35d047b9], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{54C35502-6292-47E9-A01D-EBA9B8E552E8}, , [d42c912aa2e8d264583ef198957004fc], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{55167FD7-81CC-46F3-A867-7BE49EAB5E85}, , [2ed2ab10523866d09afc4e3b2fd6f20e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{56422C4D-1E15-4140-B574-A14F9662DAE4}, , [1be53487fa902115fe97f5948f7648b8], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{56AD6F4E-B490-40DD-9E6A-2917E1B778C2}, , [cd338f2ceb9f8fa77a1b7f0a18ed50b0], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{571EF17B-E5FD-4A8C-AD28-225546174C1C}, , [c23e318afb8f6fc7b3e23257679e4cb4], PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5884D158-4DEE-4340-AFD0-812013FE7233}, , [52aedbe0d7b356e0801578112cd97789], |
|
15.06.2015, 17:28
| #7 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Mbam.txt - Teil II Code:
ATTFilter PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58DC0F98-B0F1-4FDD-989E-F85D70EDAE54}, , [18e8912a2169c76febab2465bd4823dd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58DD63B5-FA3E-48D3-A268-EBF5D8C0E471}, , [9f61dfdc1179f640890c41489d689d63],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A3743D8-A86A-4A28-BF3C-39448889F882}, , [d927e3d8c6c41323cfc7b6d3fe07c838],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A6F8D3B-F9A7-4F11-8D5B-21CB29B96E6D}, , [0ef2209b3555e5510690e5a4a362dd23],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BF00754-2F2B-4B47-8DA6-C489266D155B}, , [0af69625a9e17abc12845534996c9a66],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BFD83F2-E39B-4BD0-A9CD-E4D335F3B964}, , [46ba8734d7b3ad89cacc5138bb4afb05],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CAC977C-1932-4D0F-969F-CCD8D93D9FEF}, , [f808fdbebfcbf145fa9bd3b626df58a8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D62B321-F982-4C19-B5E2-A7682FF5E385}, , [87795c5fe4a63bfb4c4a4247679e8f71],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D6B0E23-2B3D-4D8C-B19B-49983775C930}, , [05fbe1daf39744f220760a7f50b512ee],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D811819-93A2-4153-91DC-7B749EC4CBF2}, , [c33d3a81d3b7ed49078fcdbc37ce926e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D8488D8-35BD-4006-A5CC-58EC3E47714E}, , [a7598833206a43f324716d1cca3b7a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E54C23C-2B6A-4DA6-AF5C-807D2148E9D5}, , [1ce40eadcdbd7db9167fd1b81fe6d12f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F0B8716-1E4D-4F4B-A313-3295C01D2343}, , [d0304e6d7a10cb6b7f1737526e979b65],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60326210-C79B-4993-ADD2-E8A3EE9E4E79}, , [cf31e2d95733f541ace95f2a7590eb15],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6147E82E-6197-42C9-865F-C66C164997A6}, , [22de3f7cfb8fb680e6af87026d989868],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{615E6C2E-5A90-4B6E-8ABC-AEAA1664C97B}, , [36caf4c7deac3ff7d3c263263fc61be5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6277242F-C033-4F58-A6E0-77B683AD8C88}, , [cf3167547218a195afe75336cf366d93],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63A86240-33F8-496F-AD1C-90C22C93A774}, , [7888516a3f4b45f19204cdbc5baa5ca4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64F3FBE9-CAB9-4026-8D4B-78ECE0965A5B}, , [b0508635ddadd6606e282a5f788d39c7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{650E6769-2FF6-4BFB-8271-DDF648F322C9}, , [6a9667543d4d59dd078ebccda4612dd3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65FFDA3D-F541-45A6-903A-C310CEEF5DF4}, , [2bd5417aa8e2c86e1b7aef9ac83da25e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{664DE5F9-ABF7-46C1-9AC3-F323A610A427}, , [1ee25368048661d5890d32570cf99967],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{666A8E09-32B3-4575-BCAF-C3E464789873}, , [40c043780a80d95db3e3a1e8be4739c7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{675F7F52-9A67-455F-AB51-B638F32354A3}, , [9f61e6d5acdec76fbbdb4f3a22e39b65],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{67FCAEFB-2D45-440F-A0BA-9678FF498075}, , [30d02c8f4c3ea98da8ee7c0da75e1ee2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68677F4D-858D-4B66-B46B-3577F13D51E5}, , [c53bc8f37812f73f1680226712f39868],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68699C06-6D95-4D42-87D9-DAF82BC44CE4}, , [18e86358a9e1ca6c8115f7922dd88f71],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68EB37CA-40A5-4103-AE40-D483ADB49D61}, , [7f81c8f3256503335442d0b912f30bf5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{694D3757-5FB1-4F36-A2C8-FDF9113DD760}, , [47b9b5069feb6ccabfd6d8b18f76a55b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A818642-8AF0-4A93-81C6-CFBAB4513222}, , [2fd1784329619c9a870e6a1f966f43bd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B0B5B0B-5A60-4A47-B251-938A54CC55B0}, , [2bd53685deac48eedfb60f7ac93cd42c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B0BEA79-8D3E-4025-B71F-C9AA2C592885}, , [8d736d4e0d7d8da93d596d1c5ca9e41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6BFBAB61-90B1-4ECD-80A2-24DB8EFCEA7D}, , [19e72299d4b6cf67910402874abbfc04],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E1C4B03-450F-44BC-BE40-13D2166D1F13}, , [12eebdfeb6d4bd7931645d2c0cf97a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E3E1DAE-333B-4996-B9CC-524C846047A8}, , [30d0714a99f157df7b1bef9a04010bf5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E91DDB0-5A7C-473A-8AC6-D4805CAF2539}, , [b64a27949af053e3870ec7c2699c916f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EAD6C88-8476-4826-8846-FC6B677C5B2A}, , [30d02b90296142f4b1e58dfcf70ef709],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F16044F-813A-4E17-BA10-32BE63D84BE9}, , [a55b3f7c2e5c9e985b3acfba27def808],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F4B22C7-B668-47B5-8F54-45E02070E36C}, , [916fcaf15b2fce68870e34551ce9ed13],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F631DB5-B127-4A05-A51D-B5334EA632A2}, , [2bd5bcffe9a1ba7c2d681a6f30d5b64a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F7B30D9-EDBA-4A79-87DE-C458DF7CF47F}, , [a15f0cafb5d5ba7c1482117854b1d729],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{709DECCE-7430-4BD3-B2F5-F8F41A81A9F1}, , [5ea26853f298bf77eda8daaff70eda26],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{70F35E13-5845-4AFE-8395-7B916A45D3C0}, , [1be583389eec5fd7abeb3158e1243cc4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{717E2152-A8BF-45E9-BBFA-5F949CF9BCF8}, , [8f71e7d44347dc5abdd801889c6909f7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7198A9E2-699D-47FA-BA24-B64979207BA1}, , [17e9dddeec9ea88e1e775633cd38d030],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71AC30B0-82C3-4881-A6EA-2045A58FCE14}, , [649ccfeccdbd5fd7b0e5fc8d6b9a9e62],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{730280BA-DF5E-4D05-B33E-DA8082672C99}, , [0cf4e4d7ec9e1d1940567c0d2bda16ea],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{734F4F75-8303-4060-96CE-B6213BE7A5ED}, , [f20e6259f09ae650445128615ea70ef2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{744FE35E-321D-432B-9A2A-F3A0F588D4D3}, , [ce32ddde5b2f77bfeaac93f625e0926e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7545A6DD-CF81-41A0-9E6F-EF9843A6D99B}, , [23dd754693f794a2672f018816ef24dc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75700006-BCBE-4267-8853-D3F32A2144B4}, , [f50be6d5385262d4a0f64b3ebd48d22e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76CBC017-ECEF-4CE7-ADA5-F0E8CAFAEE9E}, , [7a86caf11c6eb77ff1a4761363a21ae6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76F61A25-ABB7-48D4-99CA-60EFA995ADC1}, , [4ab618a3276362d48a0ca9e073929868],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7726E115-A313-4B3C-8465-9432466019C5}, , [9a66ba0139514ee8c4d10485778ef20e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{777A973C-910D-4E2A-A9FC-9FEFE2C022E1}, , [1be58a31a6e41e18c0d6b0d99d68e21e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77AD753C-DCA5-4896-B258-BFFBBED445EB}, , [09f72893d9b13ef8bed85a2f50b58977],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77BD9456-623D-4811-9AFB-7DCDA1AC52E2}, , [27d91c9f7c0ec571593db9d0a16409f7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{78FD115F-73F7-4229-81CC-3B6B5D1BDAC7}, , [f30d506bf298bb7bd9bc4f3a669f5ca4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{796A06C9-4BDF-46B4-A33E-EA2CFB449663}, , [2dd3bcff8604171fa7ef03861beae020],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79B59F00-26D7-46EA-8341-BBD177693DBC}, , [46ba14a72862aa8c6431820730d58c74],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79C6BDB5-F53E-4BDA-89FB-DCD1F55FCD3F}, , [8f71893289010135f4a24d3cb94c58a8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A241364-82DC-4552-B4B0-BA2558D5BAB2}, , [768a1aa1cdbd0b2bebaa2d5c2dd823dd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A6AEE92-3B1D-4A76-A55B-7CAA37468586}, , [a25e5f5cbecc3ff771248bfeb15415eb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A9CBFEE-B39F-40B0-8D76-917CFEBEE6F3}, , [d42c53682664bd7951450f7a1fe60ef2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AC8B7D3-82EF-4FAA-A627-5B78D55621F6}, , [35cbead1aedc8aacacead3b6e02545bb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7B4DFAB9-5A05-4335-A2DA-1EA0DDB3A514}, , [d22e47748dfdba7c187e9beecb3a1ce4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7BCC2F16-C341-4B83-86DA-96BC69BF287C}, , [0cf426959eec23134f46f792be47728e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7C30017A-24F6-4A35-BF18-5CDFF14E7AFB}, , [bd43f0cb4c3eae881f769decc73eda26],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CC0AD79-1A11-4DC7-A9A7-2DE389AB1CA8}, , [11efa417eaa00234efa64c3dbd48af51],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CDB7E76-9CEC-4505-9B2D-6412B7C2695B}, , [ba46ceedd7b3e056d3c3a0e946bfde22],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F13537E-0EFF-422F-8196-3DA13715A819}, , [6a9610abb9d137ff0e881277bb4a4ab6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F543CDE-5A0F-4ED5-99C3-B3F87220C958}, , [e51b803b8406bd797c19ff8a020330d0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7FA0DC5C-BDFE-416E-8916-47EF97393156}, , [28d8813a4743c6709303b3d64bba966a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7FD6CCF6-74BB-4C6E-B833-F717AB38C26D}, , [58a8f0cb0e7c80b6f5a07f0a6f96718f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80195548-99E2-4C07-AC87-76136A96DB38}, , [b54b714a2a605bdb9bfb08811bea4db3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8042195C-9329-4CB7-9955-F56C344E37C5}, , [d030912a4c3e60d6c4d2127739cc29d7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8042D009-64A7-46F7-A76D-6E37CAD7F4A6}, , [a55b3685dfaba195672f137660a534cc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8069CE64-A333-45A8-8CD3-114025FC8798}, , [ad53dfdc9feb36009cf92960788d37c9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{810F0B86-7E06-4D73-ACDF-707EE0DF31A0}, , [1ae6fcbf95f5f6409afbc6c3fc09fa06],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{823CCB8F-A561-4D7C-9214-5CA62D109180}, , [03fdb704a3e7ea4c692dddacd233629e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{827E1432-1E48-4DAF-A3F2-ED43E1EFFF29}, , [e8182e8d474395a198fe7415a65f38c8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82C58B57-AD63-48BF-8322-AA5C2F1B20F1}, , [857b6259dbafc4721b7b0a7fc93ce818],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{838BC365-C332-4123-931C-ACA54CFB2922}, , [8878c4f736548aacdeb70980e81dae52],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83ABDD3F-3ACE-4B62-B8B2-3C2F30EA2991}, , [40c0ddde602a60d68412395015f0768a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83E9DA5B-A02C-4CA1-AB2D-EBA445FA51D8}, , [e31d794241494fe7a1f53d4c7590e917],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8532E44C-32A7-4658-AC20-5211B0F25383}, , [738d0cafd5b5c175563f14759e67bb45],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{85EF4DE6-D0B0-4E52-993C-712FE4C47CAF}, , [0ff1516af595d2641c7998f118ed2ad6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88440B10-848A-4622-8354-BA4AD4AD78D6}, , [639dc3f8404a3105b1e4731611f47a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8886B45A-74C3-4366-B18F-B94F7FCEF2FF}, , [9a669c1f6a20290d75218702bb4a6799],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88BDCD7F-B77B-41BA-959C-6BF2B3D4FD2F}, , [1ee24a71c2c882b45540d2b7b84d2bd5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88EFC2D1-12B8-4B94-AA82-6F5C4BECAE98}, , [d12ffbc0800a9b9bcbca6227c342659b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{890625D1-AC60-49E7-A8A4-FA22D9F49F7C}, , [a65ad2e92565bf77672eb6d3c93cfa06],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{894609AD-8AE9-46F6-BB69-35ACBBDB895D}, , [00007a41ff8b86b0c0d6008916ef3ac6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89507460-18C3-423E-AE3B-2B837B7E4771}, , [a45cc2f98dfd53e38c098dfc42c315eb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A82E664-E552-463E-AD50-6F16847AC846}, , [6c9458636e1c45f17f16e2a72fd6e719],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AE4192C-49F4-48D6-AC24-65ACECD1E4D1}, , [619fab1084063600e4b17118ad58a45c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AE88A50-D466-4EEC-906D-EA91C175C3A8}, , [09f7714a0486b77fe0b6bfca57aec838],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AF3252A-95F5-48D3-B424-2C324136E0BF}, , [25dbe1da206af93d455097f26b9adf21],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AFDAD1D-33CB-423C-96C3-9ED8FDC0F51D}, , [d52b67542565a98d5e384643e71e18e8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B0616BC-8E2B-4C76-9019-E3C14F943638}, , [49b70bb06426ff37d5c07811e61fdf21],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B252B7B-285B-4F49-B779-D57F614CA4CC}, , [bb452d8e9feb49ede6b0b6d3f80d23dd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C049C3F-91EC-482C-B924-7F9CD8B7EBF9}, , [0000d8e343472e087223bdccd82d9967],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C37454C-EAE0-4107-8CEA-2FC1C1F78D2C}, , [3ac61e9d39513ff7672fea9fb94cc43c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C46AE13-842B-4928-A186-58686C8618F9}, , [4cb40caf07834ee80195acdd887dbd43],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8CC2E057-BB82-4587-8155-5BC3F740DFFA}, , [d729b407e6a438fe52435930679ef808],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DACFAB7-F53B-40EE-A871-C946A83FE512}, , [b749f6c596f4a0963e57addc27deb14f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DEBD75C-61EF-4CE5-90E8-C67DD193CAB1}, , [ba46ead13258ba7c781df297b4518779],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8E8E3E56-2764-4BD6-9156-8DE765CA39B4}, , [54ac6f4c46445bdb8f065237976ebd43],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8ECB06CF-1F4D-4359-A89E-80E614FDF867}, , [966a308b7c0e320460363455d3323cc4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8EEE3E05-B6B8-460C-8F46-2DFF30B98E68}, , [d12f6556a3e72e083263deabc93c8779],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2C2640-C410-4B13-ADD1-B0E5465CF971}, , [b749c5f6e0aac1756c2ac8c1a85d5ea2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8FFFBF69-A9E7-4A86-868F-A27C8FB8662B}, , [bb4546754248b680346299f04abb07f9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90B16843-C63C-4959-B619-BEA4107CB667}, , [1be52f8c90fae94d464f4a3f55b013ed],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90D44214-1562-4690-A3E2-E1684B6BF6EF}, , [f50b2398cebc40f6494c6524e1246d93],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{913E6C09-E077-41F5-9750-DAAC12C6A7B6}, , [e61ae5d66525f83e9bfb3c4dc93cce32],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91A96C7B-C67D-48E5-A8A5-55E9EC719013}, , [97694d6eb6d4072f4d497d0c95705fa1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91D34243-15D6-491A-8F99-22896495A332}, , [ca36c5f62e5c7cbad1c4b0d99b6a8e72],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9209AF03-274A-4CA4-A130-84D2F86C135B}, , [5ca4516aeaa062d4662fddacd72ee61a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9340FD7D-9CC2-4E69-A01F-F5B77299F7C2}, , [15ebd3e8315972c4eea78efb12f317e9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{934FDCE5-9C24-427D-8B20-24D0348983B9}, , [44bcc5f62a60f1456e27daafc342cb35],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93F1503A-4782-4A28-BC97-D13936256B1B}, , [02fe685361292610276f0d7c72932ad6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F0AD6D-8E04-47B6-9CC7-EAC865F8F438}, , [4fb12a91b3d7bc7a3b5a573239cce020],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F94018-4DAE-40C1-9C2E-BF1A9D90348D}, , [857b8e2d1377fe384650880130d59f61],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{951B631F-6E17-4C3B-8427-8A9E68455C2C}, , [c04052698efc39fda6f04b3ee81d659b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9627F012-15C4-4AEC-A453-541EDB823CC6}, , [2bd5f2c98307fb3bfd995138c83de917],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96496360-8BD5-48DE-A2D8-FCD61574161A}, , [88782e8d6327a492f4a206839b6a4eb2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96721C5F-DF7B-4924-B8EC-D09763D9A653}, , [2ed228932268d36396ffaadfff06c23e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9672E7CB-57DD-4A7D-B7C2-D9634852ACE9}, , [fe02b407fa90cc6af3a3543507fedc24],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96D3E6A4-E418-40FB-A4C9-4F6CF248B7F9}, , [5ca4d5e69febcb6b4f479aefd2336e92],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96F74177-760D-4435-AF20-EBB08C524E45}, , [bc44ac0f107aa492a8eeb1d884819c64],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97771177-EE6B-43D3-BB17-54FA8346F9A3}, , [e11f516a701a3204c7ce5c2de5206d93],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98752313-9F09-4A98-9792-1274F1C8A930}, , [48b873487f0b89adb4e2addcd92cef11],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{988AEAE1-7443-4F1B-9952-A0B24A2C3EA7}, , [da263784434755e105911d6c50b5bc44],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99495101-47ED-4BE4-BFF4-59BC7F169B7B}, , [a15fd3e8741677bf98fe840545c0a957],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99504741-40E8-4AA2-BFD0-F6484BD884CF}, , [e61a2596fc8e3bfb5540cabfb45133cd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A0EE8F8-56C0-40B0-9DC6-EDC4963BB2F5}, , [c23e1e9dc8c273c38c0998f144c1ca36],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B296212-70C4-451C-A538-702B5637EF16}, , [8779caf11872ca6c276f6c1d60a58779],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B43C93E-1873-486A-AC7B-77F6C1B12F3D}, , [9b650ab1a9e17abc593cc5c49174af51],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B5A3559-1DA4-482B-9E11-6E668D5E9B4C}, , [a060dae1890187af0e881772a362a060],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B886A70-9119-434D-A66D-5B8A9ADBC562}, , [b94705b6c2c895a1375f64252bdab749],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9BCF6548-A524-4886-B3A8-4197398A35CB}, , [24dc77440288f442c8ce345559ac9a66],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9BEBFC45-8905-4790-99DC-FAA35056EE96}, , [8878358655352214870e048560a57888],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9CE04C28-6037-42A9-9B49-2FA92C8EBB48}, , [03fdddde3e4c5dd9682d67228a7bde22],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9CF35F82-805E-4032-91F3-E3C046D9E1D0}, , [60a0c9f25931ed4973236e1b3fc66d93],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D24E8A4-EB4B-4C89-9BFA-1345A22E4EB1}, , [52ae803bc8c23501d8bd1d6c43c2827e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D54F76D-9D54-41BC-9D22-FE15DC5FC336}, , [778957649eecb87eafe6a0e9d431837d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9ED22ECE-A23E-4C34-8FA8-53D2F397A185}, , [ce32c0fb5e2cf3433b5abacf976e6898],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EE53437-AD98-4D04-A3BC-A42D206926E7}, , [916fbb007f0b68cecbca721762a35aa6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9F7AE10E-5694-44FD-A398-4DCC92BFE883}, , [15ebaf0cdfaba88e8b0b59309e67fe02],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A04E99C9-A6D5-460C-9F43-27D635545078}, , [c53b8734b7d38ea8c5d0e1a85ca9ef11],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A120FC9A-F5DE-4A1C-8FEA-D8D41BFE7C6C}, , [de22b00b03871125187ea6e3ee1746ba],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1555852-7F6B-4278-B7E2-1CB1C7E97710}, , [aa56a8138ffbaa8c7d190485e61f748c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1662C60-1307-4E15-A8B3-CB723D2066B4}, , [df21befd05852e08c5d1b5d47f8660a0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1AAD27A-C81F-4ECA-A742-82A91924B21A}, , [c23e4972eaa0d5613b5a8dfc976ebd43],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1DBC718-5F42-49FA-B96F-BBE7A88B50B8}, , [31cf7a41c6c42016efa7e1a814f106fa],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A37B1AC0-D55F-4CDF-B755-D5E1F45F3650}, , [fd030daebad0d660e9ad494071942ad6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3C37BE8-D6A5-4E5D-B88A-4EEEAF615381}, , [d42cb10ae3a794a22472048551b437c9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3CEB07C-7D31-4052-A59A-B3343D503F73}, , [40c0a8138cfece686e270d7ce2239967],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3E22BA5-C8BF-4166-A87B-D74B99F54232}, , [57a9ccef92f8f1458e07eb9eff06c13f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4086DA2-2BE2-44E3-B8CD-BA8E6D6BF3FD}, , [4eb29f1c47432e082a6c1e6bf60f2dd3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4CAF2F6-E1B0-45B6-A814-F1FC68E0C317}, , [32ceedce3a50b87e8e07cfbac3426c94],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A741949C-9157-4195-B417-A3A15AB19285}, , [00005b608ffb8aac4f47ec9d9273867a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A75A6B22-2569-4B4F-BC26-B1134E3D961C}, , [b0503586e8a2aa8ccfc661287f8616ea],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7E4157A-CFE9-4D39-99D9-D1D5552A6692}, , [c13f2695553573c3781d89009372f40c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A967747A-DC1C-4FF3-A6E9-59BF5A23623B}, , [db257744d1b9e3539ff62c5d16ef629e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A96C0EB0-EF2F-42F0-9D4E-A81DF33FF12B}, , [25dbac0f55356ec801958405e322e818],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A985EAB2-732E-45F4-B04D-2AFC1092BC9D}, , [a15f6f4c6b1f1620b4e2a8e131d45da3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AAA90A10-BB47-4057-8E26-78624B984689}, , [f60a37843a5057dfdabcb8d1c63f5ca4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AAD4D602-7AAC-4837-84A5-D38F3AE9B1DD}, , [9d633d7ec7c3e74ffc9a59306b9af907],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ABDED7F2-DF8B-4854-8FC2-9C5836C074ED}, , [43bd8635315987af9600c3c6fd0832ce],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC560070-DD9C-43D6-8EE0-D527EC63BCDA}, , [18e8f1ca167489adfe98d4b5eb1adf21],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC7FA1C6-6246-48BB-B761-7224181C9B20}, , [39c7f9c24347d95d9afcfc8d040122de],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC812F10-660E-4C04-8EAA-F75492871D5B}, , [b44c7942f694ec4ab0e6b5d4ec1947b9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE28422E-A81B-4840-97BE-5A3E99DF9F86}, , [6b952a91c9c1fd399bfa7316eb1a21df],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AF8AB311-9483-4BA7-A2B5-1596E8127D79}, , [bd43853695f5c96dbcda3a4fa164847c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B0276C27-4F71-4EF7-976E-C56295BC97DD}, , [4cb4407b7a105adc6e2748410ff636ca],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B047A4AA-D0AC-42D2-B0A3-FC3E278F1452}, , [21df8b3022680a2c1382b1d814f11ee2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1914AAD-634D-427B-A88F-1A6829B13DFA}, , [649cd7e42a60a492534290f9877e3ac6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1E901FC-3FBF-492E-B89B-3C8DEAF1B3E2}, , [fa06d2e9b2d8b87e7125deab28dde818],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B205E2CB-1355-4E68-80DE-AB2ED3A0474D}, , [2ad6c0fb7d0ddf57474e6029d5307090],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3C32D7A-EFF5-49F6-B1C8-99448DD089C0}, , [26da7e3d1e6cbe78a2f30089867fc63a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3D54888-174A-4EA2-A655-2E966DBB94FB}, , [0df3b704dfab40f6e4b2afda2cd96b95],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B42BD247-C56A-44B6-BAF5-A35E5598BE94}, , [9868e9d246446ec8395dc0c9cb3a06fa],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B42D3DAE-4BAB-4C89-99E7-C9348C504466}, , [7c84dfdc4941e74f682dcebb0ef758a8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4C989C9-F758-4F22-A7D0-8C722192AB8C}, , [09f7f4c75b2ff343b8dd20698085ff01],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4F24A95-6763-4EFD-A8B8-4A259AC661FB}, , [619f774478122a0cb3e24e3b36cff40c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5B9CE83-52DF-4E63-B0FC-EE71225C7F18}, , [31cf44774743a5915342a3e6fe0749b7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B789C282-C32E-42BE-A086-443647C18F2F}, , [05fbbdfe3b4f7bbb3165e2a7778e5ca4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B7E953B3-715D-47D2-A255-2231214BEE6C}, , [23ddaa11c1c9e6508d094346cf36da26],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B80ED1E0-F32F-4A8C-BACC-58D3B28CE522}, , [44bc7447f298280e722496f32bdae61a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B81C3B5B-3E99-4190-A0ED-1F68DCB69EB6}, , [9e62952697f35ed8d7bfb7d251b46898],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B81C4970-FBB6-4BBE-A653-51A9B8555DAD}, , [f7099526c0ca072f97ffec9d3dc8946c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8B992D1-9978-4F70-B756-AA1AC0F3B4B5}, , [42be87345b2fa78f286dd3b625e02fd1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8F544CD-70F4-476F-BD1E-2DEC9BDB41F7}, , [eb1507b434564fe73b5b7118d530728e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B93E0204-ED2D-4394-BADF-58E1EDF99F22}, , [12ee09b29febb87ecbca0980768f58a8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAD8EF9D-E088-4587-AE48-637A19BB175B}, , [e41c982359316fc71e774c3df70ec33d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BADC7027-CB49-4A31-A77D-882E13AFD395}, , [cc3402b9c0ca5cda791d8affc045dc24],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAF15069-CFF6-4533-A028-4C60595DF56C}, , [f20effbc6525a29435613653eb1a0ef2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BB1EBADC-5D9F-4013-A5BF-6B267D3BCF92}, , [60a0893297f3aa8c0096a7e29273b848],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BB457014-66C1-44E0-9C5A-CA44ADADA4DE}, , [a65ae8d3840613235540701950b528d8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BBD0E1A7-0AB4-40B6-87E7-FE1797AA48E1}, , [cb35d4e7c5c5dd591f75890024e109f7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC5B8ACF-CED0-4877-A630-22B26837C434}, , [23dddae10585d1651284206930d53cc4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC5E96E9-86E2-41AC-9FA3-E5FD8822849A}, , [bf415e5d5931999d088eddac759015eb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD8EC32F-C804-4E36-A4F3-AE4E85B9CBE5}, , [4fb1a714513992a4880d9fea7c894fb1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE3B9CA3-67B9-4785-9153-7DF7D079E7C5}, , [9b65e4d7bbcf2a0ccaccd9b016ef41bf],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE7DE77E-628B-4C25-AE36-30185874ADF8}, , [6a96516a890120161f7787029a6b629e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEEBD263-3F2C-42ED-8C74-1A50F2ABBEE3}, , [1be5506ba9e159dd1c7ab1d82bda2cd4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFFCFE2B-69D9-425E-967F-6B82BD6D4352}, , [2dd35e5d25656ec81e78533675909f61],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFFDD654-D68B-4888-BFC8-D2DE68EA6931}, , [ff01615aef9b11256e282564b64f7f81],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C02A682D-D8D7-456A-8811-DA38783FCA7A}, , [679962596228c670bfd61f6a8e77db25],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0C9943B-6526-41C9-9094-FB5E4D5A49AA}, , [ed1303b80e7c4fe72b6b8bfe37ce3bc5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C14D754B-21CB-4BE5-BB69-523EDBE65593}, , [49b75c5fb2d88aac95001c6d7e87c53b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C19C6157-B636-42B1-87EC-B54FAB2F515C}, , [fb055764e0aa81b596004e3bc540f709],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1B7C274-FD3B-417F-94CD-47178E1CEFF8}, , [827e3d7e4d3d3ff72c6a1574be476799],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C248BD84-461F-4C51-BE8A-31AC9BDA17EF}, , [d828d1eac2c8ca6c4d487c0d7095956b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2FB1AD4-1278-4301-A9BD-89563626CEC0}, , [966a5467f595290d31644445b352f60a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C36B4F7B-1DF0-46EB-A728-984B918F6DAC}, , [8a764378414994a2583d58311beaeb15],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3738C75-D3E8-4DC1-AFE9-577C746E4DF7}, , [8e728b302a6046f0f0a545440cf959a7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3A03BFB-5AF3-4176-8FA7-B74A45341E92}, , [fa06c2f9d2b8a88e9ff7eb9e19ec3bc5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3AA1677-8F0B-4B61-9E92-7C81F4DF856E}, , [3bc5e3d83a50c373f0a53752bd488e72],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4AA905D-A827-48BF-B345-824673409E4A}, , [8a768b304d3d81b5e4b2acdd1ce9ab55],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4D610BB-5416-4C6C-B559-A241FD67AE5E}, , [639d0bb0c6c477bfe6afc9c06a9b57a9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4ED99AB-A2F5-470B-8B5D-903B8FB868D8}, , [ff01863599f166d0badceb9eb84d748c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66BE517-AB5F-4437-B6CC-E149BF61141D}, , [46ba02b9b0da0e28d5c0c8c1f2137a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C6A5600B-CC62-4724-82B3-22704F8532A8}, , [55ab0ead52387eb8a6efe3a69d68a15f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C73B81E4-2CB8-4F65-9A21-4C1DFAA55FBB}, , [2dd3edcec9c14beba4f24d3c040159a7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7E7F6D1-390E-434D-B6FB-7B7A7BBA4032}, , [fb05f9c238526dc9fb9afb8eca3b47b9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C806DAAF-BE2A-447F-958C-573FABDB734F}, , [2bd5d6e535550a2c771f3752cb3a47b9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C86106CB-473B-4865-ADCA-37C8DE93C4F2}, , [ac546c4fd4b61c1ab7df31588184a759],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8A884BD-72FA-4CF7-A68E-D12FE229726F}, , [b947338854363bfb1383f396e3226f91],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8EB5C8F-707D-46A9-B0ED-69BD21DC3957}, , [2bd52f8c6a20ff379203d1b844c16898],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB1ABBB8-B697-4955-AFCD-53B7291F611E}, , [7b854873abdfdd59286dabdeef16b749],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB23302D-D42F-4195-9E6F-94F5AD11EF2F}, , [748ca91221690c2ad6bf4841818411ef],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB665313-C3DC-4B69-BC5B-5035CB3CA17F}, , [df2115a62862b086e3b3810837ce718f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB79D755-90FD-4BE8-BF47-6752D1138159}, , [44bc0eadb4d648ee286d5a2f7e87827e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC375C82-8516-4261-84DE-D44D5E59BCC7}, , [f40c14a7f991d3638d0823660cf98080],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD30F38E-EEA2-48BB-96B6-846BD0C58786}, , [e7198635dab03402ff966425ff068878],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CE826B38-4735-4C8E-9989-F12456EFB4DD}, , [b64a734852386fc7ccca1d6c19ec4bb5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CE8B6266-5E42-4C3D-AF33-9AEE22CADEA0}, , [fd03ead15d2d85b1e7afd8b1be4702fe],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CF171D6F-EF55-4D6C-B1D2-F6D64BDD1622}, , [0df3ccefc9c1b08697fe1277b64f7987],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CFD458FC-8931-479A-8BC4-29675965488F}, , [b64a7f3c7614191d8f06b3d62adb39c7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CFEB1620-80CF-492A-9194-4BF7B8A072CF}, , [a75904b7e5a5e452d2c432577392b14f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D030AF09-570E-44E1-BB6C-4ADAFF57AE6D}, , [8a760bb0b5d5a19506901b6e5ea71ae6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1134148-D0E6-4BE9-9085-9CEA52776677}, , [5ea29229147677bf0591a2e7c342a858],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D17B1FA4-888A-49CF-826E-5610C1E97C49}, , [54ac23988703f54153426227c83d43bd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1B1918C-E37B-41A8-A462-48105685EFEC}, , [04fce0dbd6b480b635608efbe22337c9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1CAEBEA-42C1-408F-B465-F62F2C711530}, , [5ba5f2c9cbbf79bdaee7632611f4cd33],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D21A71CE-AE56-4F83-9B2F-7FDD5BBF575F}, , [b44cfdbecbbf9c9a8c0ab0d9ef1610f0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D22C7223-A8D0-4F0B-9189-DEBF71202896}, , [a35df8c3deac83b38a0cbacf53b252ae],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2784AC2-60EC-4776-8085-672CB2F4D61B}, , [9868704b4c3e90a6f89e5930ac594fb1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2FEE64C-C9ED-4D0C-B022-9CD3FAFD4CA8}, , [619f7b40c0ca3afca6f03653ef16be42],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D30725BC-9793-4C59-B3C2-78FC90654EC4}, , [748c6457b9d12e08deb7ddac4fb6c13f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D31EF884-4BF6-4537-97D0-21ADD1ABFE44}, , [8c7429929eec0333a2f3c1c8ff06f20e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3D1E6D9-66AF-4767-9E89-68F524B93985}, , [ca368239c7c33ff7acea2a5fa560e31d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D42660A8-9F8D-43B4-9C7D-AE6DC5768FD2}, , [56aac1fa9ded6dc9494cbccd719456aa],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D437E6C8-7ECF-47F4-83E8-E0329D97718B}, , [f60a98238ffbea4cccc92f5a53b2a15f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D4AA422E-D4B5-4A78-A451-9458BBA1DC7F}, , [9967bcfffc8eb77fb4e1dbae778e9b65],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D4D44E2D-DF90-442D-B818-6EAA92DE9CC8}, , [2cd414a783078fa720765d2c3acbfe02],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D5EFD126-4C58-42D3-AAC4-18E5E7224768}, , [60a09a2169215ed880168bfe27dea35d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D63FD405-BA48-44AC-84E9-55F11549438C}, , [18e83d7e99f18fa71c7a3c4db74ef20e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D6A4AAB7-924C-4CF4-8B47-483A4E902A37}, , [30d0c6f5e8a233030a8c711816ef8e72],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D6D2A0EE-EEA4-425E-9F7C-10294BF7AD14}, , [cf312c8f3e4c48eecdc94643e81d5ea2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D715C0E4-A6A3-4517-9C1D-E3C273593482}, , [b7490daed2b8d264128374157590ec14],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7E2B9D6-CFCE-41E2-921B-38FB5BE71634}, , [88786556bbcf51e505912e5bdc294fb1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D83EB7AD-8283-47B3-9C9A-48386237F7F8}, , [c040813af397ca6cd7bec8c1bb4a8b75],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D87530A3-6635-43BA-8EAD-2F294946D3B4}, , [05fb3b80ee9c3df9b4e2b0d953b27a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D99F8455-2B38-44D8-88FB-C971EA9E769F}, , [1ae6cbf0464457dfbadce8a1aa5bf010],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA9B75AF-3C69-45CD-A76A-38217026FBDA}, , [0af68536f7936acc1481f396dd28cd33],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB8790CA-E6DF-46A8-B253-4D168B18D22E}, , [2cd41c9fc2c8ce68f0a6c3c6dc290ff1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DDDE9C13-6ABA-43D2-A31A-68C4F910C1E6}, , [0df3ead1afdb14220f87e6a3ff0629d7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E00E729F-FCFD-4E8B-B9DB-4F4618A9F712}, , [f60ae3d8ef9b003655413752dc2939c7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E02035CE-3A6E-4F28-BB2C-9E4C7DA7D990}, , [6898e2d9bbcf82b40f867514ec19768a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E0CDDC6E-657B-42C0-AC43-7432B8FAFBD2}, , [1fe12c8ff4963afc5b3bd7b2986d0af6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1F4A1FD-3BBA-45C8-95CA-FA32D5E0F217}, , [ad536556f6948caa6c293356b64fe41c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2B2E002-A267-4168-84E6-36DBF8E3995D}, , [fc043c7f5c2e0d297d18b9d01aeb8977],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2CC2111-723E-4899-A86B-D2627CAFB22C}, , [b64a00bb2169da5cb9dd5336ef1636ca],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2D2030D-ABEC-46EB-8CB7-42C5394A65B9}, , [7b85ccef0f7b1f1735605f2ad92cf40c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3104C78-77A1-41E8-B0BC-E0C6478516B4}, , [cf3129921d6d5adc464f0a7f1fe6fb05],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3729D1A-3395-4181-B82A-F9F3BD146FF3}, , [e21e06b56327d4622b6b96f33dc8f709],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3B8FAD5-6965-41CF-80E5-FCF428A6FDC6}, , [cd3319a2c5c5c76ff79ec0c9b25349b7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3EB0968-30FB-40FE-90FD-4E6CECC8E6A8}, , [68987843b4d6072f5e37bccd0ff6956b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4310BF2-6DA5-4AD9-B38B-595E36BC2795}, , [926e6655e2a8d660f89e7415f213bf41],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4606A97-F1A8-4347-A81D-B0BE17B59393}, , [39c7893291f981b5cec72c5ddb2a847c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E50527C6-7A32-4BA7-BEBA-59EF78C42958}, , [37c9338895f5e5517323ff8a6a9b54ac],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E527AB86-50F2-4606-8C33-46B934B6A1B9}, , [7f81af0c39512e08bed83c4d8a7bc13f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6198C05-310D-4BDE-9992-7C7DB1338E80}, , [5ca4d5e6afdb3df9dbbb25648580649c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E645473C-DB3F-4801-93A1-5B9C53FD34BF}, , [fc043e7dff8bc670c2d400893acbac54],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7585023-F7EA-4D7D-8D25-94C4C0518FA7}, , [649c0bb0107af93d1a7ca7e28c79728e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E814DABD-C5F4-47AF-BE84-ADF3C39E8226}, , [a65af0cbb5d572c4128498f17095f60a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8F5F83F-DA15-455D-BCEA-B7A24828486E}, , [748cb902f892e94d9ef8cdbcb352b44c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E917999B-F3D9-44E6-84A1-E1BF4A1EA8FD}, , [98682d8e5e2c70c6f5a1b5d4d33254ac],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E91D19B7-8672-4E48-A0A4-DF5C56BF671E}, , [2ed253681872290d1283e4a5927316ea],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E96858AB-1CEB-41D2-92F2-F593F0586171}, , [fb056a519bef280e692dfa8faf569967],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB1E7E6A-135C-413D-99AC-133663CECF10}, , [2ad6b902d6b4b77fbcdadeab8481639d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC6E8BFF-14AC-46E7-921E-654BD21D9A7B}, , [718f57642367f73fb3e39dece91ccc34],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ECB466D6-4669-435C-B4F4-42B2DA39DA27}, , [f8087e3d2d5df1458c0a4148c342fc04],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF544413-907F-416E-9EC1-B04340C45685}, , [05fbffbc39511d1961358405ad58e21e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF99BEB3-279F-4353-8FA8-B4AC8FA298BF}, , [c33d407bed9dab8b187d8dfcd82d57a9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F11142CC-E84A-4667-9277-6DB8B3D13CBA}, , [d927803ba3e71620f3a23c4de71e37c9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F12B61DB-5840-41E4-AB49-957A407B5129}, , [bf418536226856e0672e7b0eee177d83],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F29817B2-4F78-4066-912F-2E7A3BEF1F77}, , [90704b7059315ed8dcba5d2c7392f50b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3709563-F6D4-4E8A-A13C-A51DF3C8AF79}, , [08f882392d5ded49fb9ad3b6b2532cd4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3781862-EE39-4789-BDE2-9F612556D8CF}, , [db256d4ecfbbd2642e67f297b74e6799],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3CEFE96-5A80-40ED-BDD6-249DBF601EC3}, , [3fc17b4031590135c7cf60297d88eb15],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F40DBB27-5FCC-45C6-82FD-27D486EB5074}, , [7789f7c4e1a9f541ebab90f944c134cc],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4406EE2-EDFB-4EE7-8EC7-D2834F186A16}, , [fc042a91236743f38d096326966fcf31],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F499690F-C4FF-4BCF-8EE2-4728987621E1}, , [79870fac95f5a294eea80f7ae5207d83],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4D9EEA8-F163-483D-9B7A-62F3642C1967}, , [eb155f5c345674c2880d7c0dd72e60a0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F587FE89-56CB-4A67-9893-103022A52B41}, , [f10feccfbcce1f170e884742a164f907],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5BBB773-A171-4E0E-B57B-8C926FDFC931}, , [32cefebddeacdf572c69b8d1d72e43bd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5DAF8F8-D629-4FEC-9455-B420FE3F2D64}, , [3ac678434b3f3bfb44517910e81d35cb],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6CAA303-2144-4400-A6DE-CB80A8A66655}, , [5fa1e6d5800a1323c4d18009b451c63a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F748110F-2601-4FCE-9AB5-4AEB773BA8FF}, , [c63a13a88dfd49ed4e48dbae74919769],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F777D656-2C7F-4E94-B858-BF5A24AA1C2A}, , [fc048536a6e486b0cfc64f3a5ea78080],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7D55939-840D-4037-BDEE-4BD5B37F9EDB}, , [e21ee4d7d8b22313148158318a7be11f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F83EC44C-AE1F-4144-9A83-65B57572D467}, , [34cc4f6c9ded05312f66fd8c32d38080],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8829984-DA24-4845-B5D6-50192E5E12AC}, , [7b8569523f4be452197dc3c6bb4ace32],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8980B82-267D-43DC-9360-DFC8CB42FDB1}, , [b44cc3f8bbcffe387a1c1a6f31d48779],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F89912FE-A0FB-4FD9-B38E-AAC66FE92243}, , [827e9b206c1ecf67eca9ff8a07fe867a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8B33E76-E5DC-410C-9130-4843EED07C95}, , [3cc463583f4bff37f4a1a4e50bfa21df],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F925B7F1-1AFB-479D-8472-5C52E761474E}, , [5aa6566505859b9b5540533609fc5fa1],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F96A006A-3108-4B95-BDF8-4C17365AB365}, , [808012a91d6dbf77f1a51d6c43c2916f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FAF92DEB-C923-4116-97D8-B77F8F51131D}, , [916f615ab0da05313f5796f354b1669a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB99FD43-A9AD-4E8E-85D7-E3DF172ECACA}, , [23ddb8036c1e76c016807c0d2fd620e0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FCEC4329-1CB5-4F3B-80DE-A2C79BF4AB75}, , [2cd46b50c6c4cc6af3a3692012f3ec14],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FDB8FF23-7685-4BF8-A56A-2FD93458608A}, , [e9172b90b9d13402b6dfbfcaf01522de],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FE61F89E-58BD-49B0-88A5-4FD72D27AF1E}, , [768a2c8f3b4f5dd9a8eea3e67095bb45],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FEFD5FAE-405D-46F8-B549-A374782DF1C3}, , [9f61ceed315947ef6f275e2b7e871de3],
PUP.Optional.BProtector.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [1ae6af0c96f41f174444ba9e46bf3dc3],
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\OPTIMIZER PRO, , [25db2497fd8d83b361a096f60df82fd1],
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\SYSTWEAK\ssd, , [a7590ead31592313906cc25c12f26c94],
Registrierungswerte: 536
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{205fb1f1-caad-4670-b9a8-02e40ef5517d}|AppName, free ven-bg.exe, , [7a86605b008a2511c6d18efb010422de]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79c6bdb5-f53e-4bda-89fb-dcd1f55fcd3f}|AppName, media enhance-codedownloader.exe, , [df2125967812b1851386008907fef010]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7f13537e-0eff-422f-8196-3da13715a819}|AppName, free ven-codedownloader.exe, , [59a7863506841c1a6435d1b8c540916f]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{bbd0e1a7-0ab4-40b6-87e7-fe1797aa48e1}|AppName, media enhance-bg.exe, , [f709bdfeb7d360d6e3b4a7e29c693ec2]
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [cd333d7e9bef81b57532090b3aca29d7]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [18e84e6d4b3f9d990dc5f29a7d88b44c]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [33cdccefa0eab97dece6612b8481ee12]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [12ee36850288e155587a96f6e520b24e]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [a65a4c6f3357d165e1f1ee9eb45138c8]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\msiexec.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [25dbf3c8216980b642903c50d62f09f7]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SearchProtectionSetup.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [c33d00bbeaa0b87e557d5933a2636e92]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SearchProtectionStub.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [40c08635305ab680ddf58309996c57a9]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SettingsManagerSetup.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [54acb6058cfe270fb71bf19b32d3e31d]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SetupDataMg.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [679925965733d95dbd158b0151b45ca4]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SetupDataMngr_iLivid.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [22def0cb5a3030067260d1bbde279769]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\SetupDataMngr_iMesh.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [8e72b50636548caac80adab264a150b0]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\software_removal_tool.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [cf311ba09bef14225181eaa2d82de020]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\software_reporter_tool.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [12ee2992f59567cf389a860637ce07f9]
PUP.Optional.Trovi.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\VC32Ldr|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130693609205742252, , [e41c8b30dfab50e67c573a520bfa27d9]
PUP.Optional.3DBubbleSound.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|3D BubbleSound, "C:\Program Files\BubbleSound\3D BubbleSound.exe", , [b54b3784a8e296a0b0ac23cde51ea65a]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [956b209b8bffe84e9bdb2f5d22e3cd33]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{205fb1f1-caad-4670-b9a8-02e40ef5517d}|AppName, free ven-bg.exe, , [7b85b9025a30b87ed0c7b5d40203e719]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79c6bdb5-f53e-4bda-89fb-dcd1f55fcd3f}|AppName, media enhance-codedownloader.exe, , [926efcbf3c4efc3a0e8ba2e7f80d21df]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7f13537e-0eff-422f-8196-3da13715a819}|AppName, free ven-codedownloader.exe, , [eb151f9c8dfd1a1c6831474219ecbc44]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{bbd0e1a7-0ab4-40b6-87e7-fe1797aa48e1}|AppName, media enhance-bg.exe, , [2ed2d7e4e8a21d194e49e1a858ad7c84]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}, , [e0200ab1137738fe080e137254b17090]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [da26c3f8444641f54e59b55fde269868]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [b44c219a9af0ed4985f17913e91cc63a]
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHPROTECT|InstallDir, C:\PROGRA~2\SearchProtect, , [bd43358624661a1cb02a46da4aba738d]
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, 5A470562-15B0-4F0A-92FE-D0C8DB8852F4, , [946c744766245bdb93933848e81d966a]
PUP.Optional.SearchProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPPD|ImagePath, \??\C:\Windows\system32\drivers\SPPD.sys, , [dd23d8e39bef6cca6a891efc5ea6f10f]
PUP.Optional.AddLyrics, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WEBINSTR|DisplayName, webinstr, , [37c92a915e2c23137b2a24eeed1702fe]
PUP.Optional.AnyProtect.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\ANYPROTECT|IsSilent, 0, , [36ca29923b4fd5612ff7147a06fffa06]
PUP.Optional.GamesDesktop.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\GAMESDESKTOP|mj, 15.02.25.0, , [ec1424971674a4921309473f2adbad53]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1021EDCD-FA29-4C64-854E-A779F5E6B06C}|AppName, media enhance-enabler.exe-buttonutil.exe, , [3fc1ffbc76141d193d581673ae57c63a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1180554A-7E8F-4CE4-B357-75B3153D6643}|AppName, media enhance-enabler.exe-codedownloader.exe, , [748c17a4c0cad462286ef29700055fa1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{124202BB-FB20-4523-86B7-947276274D43}|AppName, media enhance-enabler.exe-codedownloader.exe, , [827eccef96f49e98e6b0a1e87d88dc24]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{125708AD-663C-4A1A-8F9D-7ACD894C88CC}|AppName, media enhance-enabler.exe-buttonutil.exe, , [aa56bdfe0882211580153e4b3ec7857b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{129F595C-D856-4334-A7E3-5B826B68A821}|AppName, media enhance-enabler.exe-codedownloader.exe, , [25dbd7e4830722143f57aedb0ff6ea16]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{13B56BE9-27CB-43C9-8237-32925FD1C228}|AppName, media enhance-enabler.exe-codedownloader.exe, , [7a860cafa2e878be4c4a7712dc291be5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{143454E2-A840-48D7-96DF-411C65F3A520}|AppName, media enhance-enabler.exe-codedownloader.exe, , [fc04ccef1377e254b3e33059db2ad22e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1444B4A7-45C5-4D50-A475-26CAC345C696}|AppName, media enhance-enabler.exe-buttonutil.exe, , [9e624b70a0ea2c0ae6af73168a7b4bb5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{151BA68B-F1A0-4CA7-9BFA-198E3D45848F}|AppName, media enhance-enabler.exe-buttonutil.exe, , [4eb274477e0cb87ebadbfd8ccb3aae52]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{15BA93C3-E97C-441B-B1D6-4D6424A3F240}|AppName, free ven-enabler.exe-codedownloader.exe, , [6c946e4dacde02344f478900f213d030]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{179CCAE6-2A49-4FA7-911E-55B280687DF3}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4cb49d1ed2b846f0a9ed206939ccb24e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{17BDB229-E1FD-4C8C-AE61-7AFC3A2EE2F7}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2cd40face9a180b613827b0e5ea7f30d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{17ED4307-8F3B-41F5-AD95-F132C2AD4440}|AppName, media enhance-enabler.exe-codedownloader.exe, , [7d83c3f8bbcfaf87f1a57f0aed18619f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{185123E4-4498-447D-94BC-DF4DEDA713E8}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c13f47745b2f8ea895001871c540f40c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1928A4A3-564C-411E-AC1F-F1AB19212E64}|AppName, free ven-enabler.exe-codedownloader.exe, , [e818902b5436c07636601c6d06ff5fa1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{194B5319-5D43-47DB-BB3A-4E71E13362D9}|AppName, free ven-enabler.exe-codedownloader.exe, , [28d814a7f4961b1b3e585d2cb550f907]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1955DEA9-286F-4C1C-ADB6-7B848B813497}|AppName, media enhance-enabler.exe-codedownloader.exe, , [e31d9526addd9f97d7bf3950f90cf20e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A3E3F37-AD62-4400-B831-CFF515A24E77}|AppName, media enhance-enabler.exe-codedownloader.exe, , [8d73d7e44d3db3839bfb1376ab5a3cc4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A8B2477-DFED-448C-BD68-5D56ED249071}|AppName, free ven-enabler.exe-buttonutil.exe, , [c040fcbf94f6f0468e071d6cd3327e82]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B0AD898-3FD6-440C-9D63-A9B94CE1B169}|AppName, free ven-enabler.exe-buttonutil.exe, , [f9074f6cd3b749ed6f266a1f58ad4fb1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1BDB711F-EA36-437C-9878-571F223829DE}|AppName, free ven-enabler.exe-codedownloader.exe, , [c43ce5d6f99182b49bfb59301ce95ba5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1CDDDCD0-6F4B-4870-B7AC-E9C6C6FFF379}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c23e4e6d9eece452e6af741559accf31]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1D168C00-37DC-4675-8CA1-6D2372972721}|AppName, free ven-enabler.exe-buttonutil.exe, , [a759c0fb672349ed34618900ab5aef11]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DA0BDD1-DE9C-4198-AED3-A1AC47416D27}|AppName, free ven-enabler.exe-buttonutil.exe, , [06fabefd7218c4724253b9d02ed741bf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DA7107E-AFED-4AA8-BA7F-29D62A17AF25}|AppName, media enhance-enabler.exe-buttonutil.exe, , [0bf512a9761457df7b1af79243c2669a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DBE8071-183D-4397-BCA7-4A444F8A9CB3}|AppName, media enhance-enabler.exe-codedownloader.exe, , [57a993282e5c999d5b3b17729a6b20e0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DF47CAF-DB7E-420E-B0A4-E3CA404D6F2D}|AppName, free ven-enabler.exe-buttonutil.exe, , [15eb7c3f523823135c39a9e0c14437c9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1E696AAF-C3FA-4DE9-96C5-6D97DC8AFBC6}|AppName, media enhance-enabler.exe-buttonutil.exe, , [ca36e6d58efcb6802b6ab0d9b64f3ec2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1F15820F-FE3B-41AB-A6D1-21F7D57DAACC}|AppName, media enhance-enabler.exe-codedownloader.exe, , [fa066d4eed9de4527224b5d4a75edb25]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2047B49E-7F6A-4BB4-87EC-12163DAC91BB}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2cd43586e7a3270ffd998207de27b34d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{204C0598-5F91-45CF-A3DB-3C6C59836F30}|AppName, free ven-enabler.exe-buttonutil.exe, , [a0604e6d0387c2741b7a325754b1d32d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{205fb1f1-caad-4670-b9a8-02e40ef5517d}|AppName, free ven-bg.exe, , [7c84e1da008a6bcb3b59bfcaaa5b7b85]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20DEBED1-C3C4-4BAC-BCA8-89361BBD8984}|AppName, free ven-enabler.exe-buttonutil.exe, , [31cf1d9e533726106f26563321e435cb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20E66F3D-5DA7-4111-B34A-6C2456EB90CD}|AppName, media enhance-enabler.exe-buttonutil.exe, , [6c948d2e1f6b063030658ffad92c6898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21048106-F7AF-4AEE-99BA-F878A355E2F0}|AppName, free ven-enabler.exe-codedownloader.exe, , [e7196b50bbcfe74f98feb4d52bda42be]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{211693F3-6E81-4829-AB69-CFB46A2E1766}|AppName, media enhance-enabler.exe-buttonutil.exe, , [926e66550288e4523362cdbcdc2919e7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21A5C8E4-8454-4B3D-827E-CB8013797EA8}|AppName, media enhance-enabler.exe-codedownloader.exe, , [3cc434875832fd39a5f17e0bd62fda26]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2253C3F2-E64C-4D96-AF84-BF43264273B0}|AppName, media enhance-enabler.exe-buttonutil.exe, , [5ba5d4e78efca49253426524dd28cd33]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{22A1C91E-C887-415C-BA69-7CAC7C2CAEEB}|AppName, free ven-enabler.exe-buttonutil.exe, , [2cd452698bffb77f5c3992f7a46136ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{22CE5E88-8DCD-49C6-929B-30F34A9463B6}|AppName, free ven-enabler.exe-buttonutil.exe, , [53adc5f688021c1adabbe7a2699c728e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{236D1955-42B8-4A76-807B-908D1FC4C1DD}|AppName, free ven-enabler.exe-buttonutil.exe, , [827eb506e2a8092d1f76a4e59a6b36ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{24865684-D35E-42AD-A05A-7CA9E849B165}|AppName, free ven-enabler.exe-buttonutil.exe, , [37c97a41a0ea9e9810856c1d56af8e72]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{24C4C167-EDB7-41FA-A5B0-356E32C9A76F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a45c2b90fd8da88ec8cee9a009fc3ac6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2509A1CA-8113-44BD-A9A0-478C14B08D58}|AppName, free ven-enabler.exe-codedownloader.exe, , [23dddae187030d299bfbee9bf114e818]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{253E392E-5CAC-4BA3-9737-C6AC5A93D52F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [f20e67543e4cba7c088eaadf22e35ca4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25AD320D-3650-4F31-8D8F-EBDC5A50EFA3}|AppName, free ven-enabler.exe-codedownloader.exe, , [90700ab1701aac8afa9c2267bd48dd23]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{25EDC3C1-40A9-4FED-AB84-219930DC364E}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2ad63f7c701a2412296c1e6b65a0857b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26177595-4985-49AF-AE39-5680C12456CB}|AppName, media enhance-enabler.exe-buttonutil.exe, , [728ef4c7503a37ffdcb9127743c2ce32]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{26B006DA-D3D5-4106-BDC0-4E3736AF55A4}|AppName, free ven-enabler.exe-codedownloader.exe, , [40c015a6c8c2bc7aeaac7b0e8e77d12f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{290BEBD4-3F42-436C-8B83-BE31A1EE25B8}|AppName, free ven-enabler.exe-buttonutil.exe, , [5ca4912a1476b680d9bc5e2b798c936d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2917CFA6-2EB2-4830-82C0-38A7FDB6BE55}|AppName, media enhance-enabler.exe-buttonutil.exe, , [3ac62d8e3258f046c8cdb3d6b451e31d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29303AEB-EB00-4AA9-8F16-F1881723459B}|AppName, free ven-enabler.exe-codedownloader.exe, , [728ed9e2f694ae8897ffdaafed186898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{297F5647-8C57-4AFC-BE95-8EA8F957C0CD}|AppName, media enhance-enabler.exe-buttonutil.exe, , [1ae68b30aae05cda2c69a8e1ba4b21df]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{29ABA46C-21C2-4511-9687-C5331D6B4FD6}|AppName, media enhance-enabler.exe-buttonutil.exe, , [bf417843a4e6b87e1c793a4f30d53ec2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BAAEAEC-6E73-494A-9CFE-421CFC5DF8FA}|AppName, media enhance-enabler.exe-buttonutil.exe, , [9f61803b2e5cd95da7ee46433ec7629e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2BC2C563-3BA9-4395-B8AD-4540A55FB111}|AppName, media enhance-enabler.exe-buttonutil.exe, , [fd03318adbaf38feeca91a6f25e0e61a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C154086-4703-4FE4-A32B-5A367DBD1472}|AppName, free ven-enabler.exe-buttonutil.exe, , [17e9b00b0f7b63d370253c4d5aabf10f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2C58F281-BA52-4C60-9DAA-9CB938FC21D8}|AppName, free ven-enabler.exe-buttonutil.exe, , [3fc12a91afdbcc6aa1f4cfba59ac2bd5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CA5D04C-9569-49ED-B71A-3151643C18F2}|AppName, media enhance-enabler.exe-buttonutil.exe, , [46bac1fadfab79bd365ff39653b27f81]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2CB55055-F64D-4072-A2BD-C8AD26F7B44E}|AppName, free ven-enabler.exe-codedownloader.exe, , [6f91cbf07a1071c5eaac2b5e27de04fc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2D6C3C8A-E078-4EC1-9DD6-F222161EEE1C}|AppName, free ven-enabler.exe-buttonutil.exe, , [b64afdbeccbe87af385d1a6f867f7b85]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2DE790C5-AB5D-4A13-B0A9-AE86F16610A2}|AppName, free ven-enabler.exe-buttonutil.exe, , [847c5e5d6f1b87af4d480188ab5a46ba]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2F3DF88A-9571-4C52-9497-87E690E5D580}|AppName, free ven-enabler.exe-buttonutil.exe, , [9868219ae9a1c571b1e4157461a4827e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3058D678-6870-4A08-BCE7-A7691BBCEA8B}|AppName, media enhance-enabler.exe-buttonutil.exe, , [8d7301baccbe49ed365fdfaa26dfea16]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32368DAC-49E5-4484-A3FE-79F0159966C4}|AppName, media enhance-enabler.exe-buttonutil.exe, , [9e620caf355574c250455c2d08fd4ab6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32802F6D-6A98-4B3C-9E55-E85B784BDC70}|AppName, free ven-enabler.exe-codedownloader.exe, , [a957a912256516202274177236cf5da3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{335F8FC3-E21C-4576-9681-D818FBA94D86}|AppName, free ven-enabler.exe-buttonutil.exe, , [19e7d7e40e7cee484253eb9eec19926e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3370C822-8245-446C-9241-236533326E6B}|AppName, free ven-enabler.exe-buttonutil.exe, , [1ae6d1ea3f4b59dd2174642514f1c63a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{337A5F75-6DBB-4E4C-BF21-F91AC9F2F62E}|AppName, media enhance-enabler.exe-buttonutil.exe, , [926e605b583265d1425341487e8739c7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3390C5DF-1A4D-4D14-A5D8-F67E62EB9A80}|AppName, media enhance-enabler.exe-buttonutil.exe, , [6b95b00bc9c1181e7421bbceb55059a7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{33956AA2-81F6-4FB0-BF97-44CB6720805F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [dd23704b0f7b72c497ffaddc47beae52]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{347692A4-2DA4-4752-8227-89A7E5319772}|AppName, media enhance-enabler.exe-codedownloader.exe, , [718f26956921ab8b197dbfca29dc4cb4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34C40D1B-FBD2-4607-AFD6-3B9452DBF4CA}|AppName, free ven-enabler.exe-codedownloader.exe, , [b64a2596a4e6a393395d35540302b14f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{34F8D572-8455-4A50-ADE9-CF73D6F959B4}|AppName, free ven-enabler.exe-buttonutil.exe, , [0af63388a8e211259bfa64258e779f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3597A40C-A0CC-4B07-8DA4-6F6D7B4A45CB}|AppName, free ven-enabler.exe-buttonutil.exe, , [8e72407bd0bafe381a7b513839cc7090]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36513638-6BFC-4037-A84A-E2FB6D60668D}|AppName, free ven-enabler.exe-buttonutil.exe, , [cc340dae82086ec86b2a0584d332639d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{365A73FF-19FF-48DA-9DF7-86F01261FF4B}|AppName, free ven-enabler.exe-buttonutil.exe, , [09f7febdcebc3402d4c14346c34224dc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36AA846C-E940-4EF8-9FC9-7B313586C221}|AppName, free ven-enabler.exe-codedownloader.exe, , [e9179d1ef2987cba276f5930ba4be11f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36EBA426-DE22-403E-81D6-AEFA898340D7}|AppName, free ven-enabler.exe-buttonutil.exe, , [49b76358d9b1082ef1a4addc9b6a08f8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{377C642B-21CF-417A-B1C8-364CA65DC8C4}|AppName, media enhance-enabler.exe-buttonutil.exe, , [d62afac19befef47593c1772df266898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{37C9A61D-19C2-4089-8686-30206673E6C1}|AppName, free ven-enabler.exe-codedownloader.exe, , [97690daef793e94dd7bf0980b5501ce4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{380D6B95-32D8-40C3-9E95-C43576AA7FF2}|AppName, media enhance-enabler.exe-codedownloader.exe, , [649c02b9f19945f1a8ee75141ce9db25]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3896437F-2296-45A7-8FA9-2FDD9081AF48}|AppName, free ven-enabler.exe-codedownloader.exe, , [4db36f4c513995a1b1e54a3f4cb97e82]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39010470-5036-4DFE-8279-44E2A0F57FB2}|AppName, free ven-enabler.exe-buttonutil.exe, , [6e92f9c26723da5c296cb4d5c4417a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3912117D-7B2F-4BD6-8987-A37A758BCF1D}|AppName, media enhance-enabler.exe-buttonutil.exe, , [8080d4e7d3b70e289ef7c6c3798c0cf4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39369967-1B99-4FBD-A71F-352172ADF77A}|AppName, media enhance-enabler.exe-codedownloader.exe, , [b050516aabdfcf6794025d2c3ec709f7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{399C2F51-2C71-40F5-A367-36F38FFB5B7B}|AppName, media enhance-enabler.exe-buttonutil.exe, , [e21ed9e21b6f63d3870eed9c12f39070]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{39FDA0B9-D210-41DF-9483-FCF76FCEAF46}|AppName, media enhance-enabler.exe-buttonutil.exe, , [10f08f2cdab051e5e4b11574f213c33d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A0A0C5E-2CFA-4D66-8528-6CBBBA4ECC56}|AppName, media enhance-enabler.exe-buttonutil.exe, , [8e721ba091f99c9a1b7a098040c531cf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A26A537-8370-4864-818A-C62965D0334D}|AppName, free ven-enabler.exe-codedownloader.exe, , [80801aa18604f3437d191d6c9e67ee12]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A602BCD-19D6-4EE5-A26C-B9BE2CF64B44}|AppName, media enhance-enabler.exe-codedownloader.exe, , [9e62407b325865d1c1d55d2ced1844bc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3A66999B-FEA6-41F1-82B9-1DB13140ABBD}|AppName, media enhance-enabler.exe-codedownloader.exe, , [80809e1db0da74c2e5b1d9b0b154f30d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C60779D-1867-4E82-BD8A-C65374BC5651}|AppName, free ven-enabler.exe-buttonutil.exe, , [2ed26c4fd9b1c76f0491b9d0d72e1be5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C9D8BDF-52F1-415B-8D21-2DD7EEADEE4E}|AppName, media enhance-enabler.exe-buttonutil.exe, , [3dc3caf1abdfbe78068fabdea85df50b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3D941302-FA4D-4933-B8B3-4D814D577672}|AppName, media enhance-enabler.exe-codedownloader.exe, , [04fc368585050b2b880eb6d3ad588c74]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E279E76-AB0F-4DFC-A1D8-46862180617A}|AppName, media enhance-enabler.exe-codedownloader.exe, , [c040cdee662490a69501bacfa95ce719]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3E30E37C-8CCE-4F97-ABF1-5D2AE1E27EA6}|AppName, free ven-enabler.exe-buttonutil.exe, , [36ca992297f39a9cdcb97316f21343bd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3ECFF52C-6868-4D9F-87D2-C0508042D4C8}|AppName, media enhance-enabler.exe-codedownloader.exe, , [9e62219af49676c031658603a75ee11f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F01291D-2912-4FA8-8EE1-4BEEB4A38351}|AppName, media enhance-enabler.exe-codedownloader.exe, , [8e729f1cf694c373465038512bdaa35d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3F2E331D-E4D6-4B4E-90F7-2A21EE93969A}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4cb412a9cebcc472fd99494074911ee2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3FE27179-592E-40C7-B025-BEB93CA64741}|AppName, media enhance-enabler.exe-buttonutil.exe, , [5da33d7e95f5e84ebdd8771265a034cc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40877374-8816-48E7-9BA4-7D859C46C3A2}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4eb204b7ff8b0f27d7bf860357ae9769]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40B88E5E-9826-4E22-BC4F-57F46EF6F487}|AppName, free ven-enabler.exe-buttonutil.exe, , [3dc3447799f157df73220a7fce3710f0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40C06F1C-CE78-4A65-9F24-F6E76AF52564}|AppName, free ven-enabler.exe-buttonutil.exe, , [19e70daed0badf571481d0b9bd4843bd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40DAD0EC-2780-4118-A680-D71EA0B1DD1C}|AppName, media enhance-enabler.exe-buttonutil.exe, , [af51f5c6e1a99b9b464f77125aabd42c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F3BE69-E1C1-492F-A07F-772A27C346CE}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c63a7a41dbaf6ccaf0a50485d4315da3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F3FA52-1078-4C8C-BD70-3557214B73F4}|AppName, media enhance-enabler.exe-codedownloader.exe, , [3cc44e6d81096ec8682e8ffa55b0d030]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{40F606CE-A955-46D7-93A5-ECE2C83AED18}|AppName, free ven-enabler.exe-buttonutil.exe, , [53adf9c2642677bf7025d1b80bfa817f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{417307CE-C403-4111-8BA6-42798865758C}|AppName, free ven-enabler.exe-buttonutil.exe, , [b9477f3cb0dae3530f86a2e79f66f30d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{41F4B5EC-14FD-4C1B-ACE1-A9E8FF96872D}|AppName, free ven-enabler.exe-buttonutil.exe, , [966ac3f83a5068ce375e1a6f3acb08f8]
|
|
15.06.2015, 17:31
| #8 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Mbam.txt - Teil III Code:
ATTFilter PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{425DC106-6846-4616-A490-F0BF4C781AF6}|AppName, media enhance-enabler.exe-codedownloader.exe, , [c43cc7f456346acc51458504fe0713ed]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{42CFD7BB-3645-4AA7-ADAF-D4F2EFDBF2F7}|AppName, media enhance-enabler.exe-buttonutil.exe, , [05fb6259d7b3ec4a682d3554838257a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43C45F00-C043-45EE-85F1-3C261CA5BBF8}|AppName, free ven-enabler.exe-buttonutil.exe, , [9a664f6c56343006583dcdbcd62f8878]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43F8E10F-C6E8-442D-8F96-229AD3829851}|AppName, media enhance-enabler.exe-buttonutil.exe, , [5ba508b3e9a1bc7aa2f398f18f762dd3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{444C051E-1186-4F31-A876-2D1FBD855684}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2cd4427917730d29c1d53c4d25e047b9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{444C213D-E4AA-4B10-AFB7-E3A267E26782}|AppName, free ven-enabler.exe-codedownloader.exe, , [728ef6c54347eb4b3c5a6f1a4eb7768a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44614D28-6E2D-43E7-B517-AB46A167312E}|AppName, media enhance-enabler.exe-codedownloader.exe, , [ab5552695e2c40f6f5a16722a65f3cc4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4463E24B-57FD-4BEB-B788-27C672A7D7E7}|AppName, free ven-enabler.exe-buttonutil.exe, , [f8085b60eaa0b680266f98f158ad16ea]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4469D10E-E198-48B8-A5DB-4331E8E99F91}|AppName, media enhance-enabler.exe-codedownloader.exe, , [db25f1ca1d6d0432ecaa8aff11f4c937]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44E681B2-6136-41B1-9DB5-49A7407DF1BF}|AppName, free ven-enabler.exe-buttonutil.exe, , [1ee2f2c96f1b989ef89dd6b325e044bc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{44E84548-26C9-4377-8DFB-2129ADA2BFC3}|AppName, media enhance-enabler.exe-buttonutil.exe, , [d42cb704d7b33afc1f761a6ff411c53b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{451567AA-EB56-4020-9088-8EF017F993BB}|AppName, media enhance-enabler.exe-buttonutil.exe, , [22ded6e5731764d27d18b6d3d92c59a7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{452B5122-61B9-40DA-9786-54B61DC0F131}|AppName, free ven-enabler.exe-codedownloader.exe, , [6c94bdfeec9e2610ebab49409b6ac040]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45B8E93B-3B62-4C23-B96A-50E59B64B8AD}|AppName, media enhance-enabler.exe-buttonutil.exe, , [41bf8a313456cf67bfd6187140c5e61a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45E40EBF-32E7-4BDA-B19F-8BD3E87D301C}|AppName, media enhance-enabler.exe-codedownloader.exe, , [916f06b529616dc9682eb3d6b253e61a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4648289D-EB99-4854-BD74-C24A126CC735}|AppName, media enhance-enabler.exe-buttonutil.exe, , [a55b605b35550234afe6c5c463a25da3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4691114F-5B95-4AA6-98A7-95DAA1EDD19D}|AppName, free ven-enabler.exe-codedownloader.exe, , [04fc13a8bbcf70c6623412775ca9b947]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46B107E8-959B-42A1-9AD5-A49C4C13FCB0}|AppName, free ven-enabler.exe-buttonutil.exe, , [31cf7f3cacde73c3dabb7d0c02032ad6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{46B667BF-54C5-43E5-A221-FA27845BD813}|AppName, free ven-enabler.exe-codedownloader.exe, , [df2187344c3eae883b5b7e0bc83d0000]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4700FF18-9F02-4975-8073-48399FEA19AB}|AppName, free ven-enabler.exe-buttonutil.exe, , [847c84377f0b290dfd9899f02dd88c74]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4712D6A7-F560-4E03-AA6F-C18F7C64197D}|AppName, free ven-enabler.exe-codedownloader.exe, , [b24e6d4eb0da1323bed82f5add2827d9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4760E792-E1E5-4D13-9F21-4BEDAEA53684}|AppName, free ven-enabler.exe-codedownloader.exe, , [31cf407ba3e7a690b5e1f396db2a0ef2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{48F91CBF-C7E1-4681-A44C-412C4FA4CA74}|AppName, media enhance-enabler.exe-buttonutil.exe, , [926eeccf3b4fad89badb0188679e5ea2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4911DADF-14D3-4E9E-895C-36F054DC1869}|AppName, free ven-enabler.exe-codedownloader.exe, , [51aff4c76b1fe5517c1a0a7ff60fc13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{495EC4FC-4F5B-442A-9650-194D96E21DC7}|AppName, media enhance-enabler.exe-codedownloader.exe, , [0cf42695cebcf34333633e4bf312b947]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{495F0D3A-FA4D-4603-B04C-E9BEC7521CC6}|AppName, free ven-enabler.exe-buttonutil.exe, , [58a822995d2d4aec61341a6f90755aa6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4A012ACD-23DD-4F3E-BA7A-3A357C5B47FA}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4db302b9f199171ff89ea2e7966ff60a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B3108A5-3CF0-4A2C-878A-8B1774695FB5}|AppName, free ven-enabler.exe-codedownloader.exe, , [f80834873d4d60d651457c0d19ec55ab]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4B5E11A8-ACCF-4B85-8A7D-C1E26ACDCAD2}|AppName, free ven-enabler.exe-buttonutil.exe, , [46ba219a7e0ce155068fee9bd43157a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4BB6686C-FB75-4528-8182-22327F14B5BE}|AppName, media enhance-enabler.exe-codedownloader.exe, , [7b8508b3c5c575c199fd91f8ee1713ed]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4C306DAD-E072-42C4-B761-A7F8A1BFCF44}|AppName, free ven-enabler.exe-buttonutil.exe, , [2fd108b39feb63d3b5e06326f80df40c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4CE2FEB9-59BB-47C9-98E5-A6472BE4E2D0}|AppName, media enhance-enabler.exe-codedownloader.exe, , [3bc5eccf6f1b2016b6e0b4d5ad586b95]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D124C1A-95F1-4614-99BD-DEFDEF3063AB}|AppName, free ven-enabler.exe-codedownloader.exe, , [2bd52497cbbfd0664b4b0188e025c040]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4D234840-6FEB-429E-9292-8E4C963C524D}|AppName, media enhance-enabler.exe-codedownloader.exe, , [748ce7d42c5e63d3890d8306d82d7789]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4DFBF97B-29B3-40E5-BB7A-688043AE1593}|AppName, free ven-enabler.exe-codedownloader.exe, , [e020eecd395155e18c0afc8deb1acd33]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E08ABCC-1D75-4ED3-98DB-1AE1BB2A1BE2}|AppName, free ven-enabler.exe-codedownloader.exe, , [7888d8e3ec9e7db90294a2e7d233b050]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4E3CF3D4-E41A-4F3A-9D73-8381708A36F9}|AppName, media enhance-enabler.exe-buttonutil.exe, , [1fe10fac93f759ddf4a11c6df60f57a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F07268D-46D9-4B7F-B618-5C91F5DB2F3A}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4eb2d9e2ee9c48eeeaac3257897cd42c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F236143-ABC1-4603-BC2D-21EC157386FE}|AppName, media enhance-enabler.exe-buttonutil.exe, , [50b02398454557df97fea3e664a19d63]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FB042DB-5C74-465A-85A5-76D1A2251980}|AppName, media enhance-enabler.exe-buttonutil.exe, , [e51bfebdb7d39c9a781d6722e91cb947]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FE1E31B-71EB-444D-BDAC-F587B5C5DDA8}|AppName, media enhance-enabler.exe-codedownloader.exe, , [fd03516a1c6ee1553a5cd7b2d2331de3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4FE356D2-474D-45AD-A0EE-1071D5AD3452}|AppName, free ven-enabler.exe-buttonutil.exe, , [659b3f7cf99193a3b0e5098008fd2fd1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{500B7DCA-B7A8-417E-803A-9EF1637DC251}|AppName, media enhance-enabler.exe-codedownloader.exe, , [e9176556fe8c77bfb6e015742bda6997]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{508C818E-8CE1-45A1-89A7-15E32A19F1D1}|AppName, media enhance-enabler.exe-buttonutil.exe, , [6f91e5d66921ed4905900683ea1b1fe1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{51508C08-C4E4-447F-B578-64919FBC99ED}|AppName, free ven-enabler.exe-codedownloader.exe, , [5da3803b187252e431650188ed181ee2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{517B88C9-6825-4485-BF83-57DAF95591B0}|AppName, media enhance-enabler.exe-buttonutil.exe, , [a35d8833fb8f5dd934611e6bf60f06fa]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{518E82FD-15B5-44ED-9582-B465E92D111B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [6c94cceff1994de923730c7de12437c9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52B7D57C-E281-4E7C-8C48-705EE0334A95}|AppName, media enhance-enabler.exe-buttonutil.exe, , [758b289396f4ce687a1b127727de45bb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{52FB4F43-1BE9-460D-9086-859AF9421540}|AppName, media enhance-enabler.exe-codedownloader.exe, , [be428c2f01891026395d6b1e35d047b9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{54C35502-6292-47E9-A01D-EBA9B8E552E8}|AppName, free ven-enabler.exe-codedownloader.exe, , [d42c912aa2e8d264583ef198957004fc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{55167FD7-81CC-46F3-A867-7BE49EAB5E85}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2ed2ab10523866d09afc4e3b2fd6f20e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{56422C4D-1E15-4140-B574-A14F9662DAE4}|AppName, media enhance-enabler.exe-buttonutil.exe, , [1be53487fa902115fe97f5948f7648b8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{56AD6F4E-B490-40DD-9E6A-2917E1B778C2}|AppName, free ven-enabler.exe-buttonutil.exe, , [cd338f2ceb9f8fa77a1b7f0a18ed50b0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{571EF17B-E5FD-4A8C-AD28-225546174C1C}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c23e318afb8f6fc7b3e23257679e4cb4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5884D158-4DEE-4340-AFD0-812013FE7233}|AppName, media enhance-enabler.exe-buttonutil.exe, , [52aedbe0d7b356e0801578112cd97789]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58DC0F98-B0F1-4FDD-989E-F85D70EDAE54}|AppName, media enhance-enabler.exe-codedownloader.exe, , [18e8912a2169c76febab2465bd4823dd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{58DD63B5-FA3E-48D3-A268-EBF5D8C0E471}|AppName, free ven-enabler.exe-buttonutil.exe, , [9f61dfdc1179f640890c41489d689d63]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A3743D8-A86A-4A28-BF3C-39448889F882}|AppName, free ven-enabler.exe-codedownloader.exe, , [d927e3d8c6c41323cfc7b6d3fe07c838]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5A6F8D3B-F9A7-4F11-8D5B-21CB29B96E6D}|AppName, media enhance-enabler.exe-codedownloader.exe, , [0ef2209b3555e5510690e5a4a362dd23]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BF00754-2F2B-4B47-8DA6-C489266D155B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [0af69625a9e17abc12845534996c9a66]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5BFD83F2-E39B-4BD0-A9CD-E4D335F3B964}|AppName, media enhance-enabler.exe-codedownloader.exe, , [46ba8734d7b3ad89cacc5138bb4afb05]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CAC977C-1932-4D0F-969F-CCD8D93D9FEF}|AppName, media enhance-enabler.exe-buttonutil.exe, , [f808fdbebfcbf145fa9bd3b626df58a8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D62B321-F982-4C19-B5E2-A7682FF5E385}|AppName, free ven-enabler.exe-codedownloader.exe, , [87795c5fe4a63bfb4c4a4247679e8f71]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D6B0E23-2B3D-4D8C-B19B-49983775C930}|AppName, free ven-enabler.exe-codedownloader.exe, , [05fbe1daf39744f220760a7f50b512ee]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D811819-93A2-4153-91DC-7B749EC4CBF2}|AppName, free ven-enabler.exe-codedownloader.exe, , [c33d3a81d3b7ed49078fcdbc37ce926e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5D8488D8-35BD-4006-A5CC-58EC3E47714E}|AppName, media enhance-enabler.exe-buttonutil.exe, , [a7598833206a43f324716d1cca3b7a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5E54C23C-2B6A-4DA6-AF5C-807D2148E9D5}|AppName, media enhance-enabler.exe-buttonutil.exe, , [1ce40eadcdbd7db9167fd1b81fe6d12f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F0B8716-1E4D-4F4B-A313-3295C01D2343}|AppName, media enhance-enabler.exe-codedownloader.exe, , [d0304e6d7a10cb6b7f1737526e979b65]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{60326210-C79B-4993-ADD2-E8A3EE9E4E79}|AppName, media enhance-enabler.exe-buttonutil.exe, , [cf31e2d95733f541ace95f2a7590eb15]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6147E82E-6197-42C9-865F-C66C164997A6}|AppName, media enhance-enabler.exe-buttonutil.exe, , [22de3f7cfb8fb680e6af87026d989868]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{615E6C2E-5A90-4B6E-8ABC-AEAA1664C97B}|AppName, media enhance-enabler.exe-buttonutil.exe, , [36caf4c7deac3ff7d3c263263fc61be5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6277242F-C033-4F58-A6E0-77B683AD8C88}|AppName, media enhance-enabler.exe-codedownloader.exe, , [cf3167547218a195afe75336cf366d93]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{63A86240-33F8-496F-AD1C-90C22C93A774}|AppName, free ven-enabler.exe-codedownloader.exe, , [7888516a3f4b45f19204cdbc5baa5ca4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{64F3FBE9-CAB9-4026-8D4B-78ECE0965A5B}|AppName, free ven-enabler.exe-codedownloader.exe, , [b0508635ddadd6606e282a5f788d39c7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{650E6769-2FF6-4BFB-8271-DDF648F322C9}|AppName, media enhance-enabler.exe-buttonutil.exe, , [6a9667543d4d59dd078ebccda4612dd3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65FFDA3D-F541-45A6-903A-C310CEEF5DF4}|AppName, free ven-enabler.exe-buttonutil.exe, , [2bd5417aa8e2c86e1b7aef9ac83da25e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{664DE5F9-ABF7-46C1-9AC3-F323A610A427}|AppName, media enhance-enabler.exe-codedownloader.exe, , [1ee25368048661d5890d32570cf99967]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{666A8E09-32B3-4575-BCAF-C3E464789873}|AppName, media enhance-enabler.exe-codedownloader.exe, , [40c043780a80d95db3e3a1e8be4739c7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{675F7F52-9A67-455F-AB51-B638F32354A3}|AppName, media enhance-enabler.exe-codedownloader.exe, , [9f61e6d5acdec76fbbdb4f3a22e39b65]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{67FCAEFB-2D45-440F-A0BA-9678FF498075}|AppName, free ven-enabler.exe-codedownloader.exe, , [30d02c8f4c3ea98da8ee7c0da75e1ee2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68677F4D-858D-4B66-B46B-3577F13D51E5}|AppName, free ven-enabler.exe-codedownloader.exe, , [c53bc8f37812f73f1680226712f39868]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68699C06-6D95-4D42-87D9-DAF82BC44CE4}|AppName, media enhance-enabler.exe-codedownloader.exe, , [18e86358a9e1ca6c8115f7922dd88f71]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68EB37CA-40A5-4103-AE40-D483ADB49D61}|AppName, free ven-enabler.exe-codedownloader.exe, , [7f81c8f3256503335442d0b912f30bf5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{694D3757-5FB1-4F36-A2C8-FDF9113DD760}|AppName, free ven-enabler.exe-buttonutil.exe, , [47b9b5069feb6ccabfd6d8b18f76a55b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A818642-8AF0-4A93-81C6-CFBAB4513222}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2fd1784329619c9a870e6a1f966f43bd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B0B5B0B-5A60-4A47-B251-938A54CC55B0}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2bd53685deac48eedfb60f7ac93cd42c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6B0BEA79-8D3E-4025-B71F-C9AA2C592885}|AppName, media enhance-enabler.exe-codedownloader.exe, , [8d736d4e0d7d8da93d596d1c5ca9e41c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6BFBAB61-90B1-4ECD-80A2-24DB8EFCEA7D}|AppName, free ven-enabler.exe-buttonutil.exe, , [19e72299d4b6cf67910402874abbfc04]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E1C4B03-450F-44BC-BE40-13D2166D1F13}|AppName, media enhance-enabler.exe-buttonutil.exe, , [12eebdfeb6d4bd7931645d2c0cf97a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E3E1DAE-333B-4996-B9CC-524C846047A8}|AppName, media enhance-enabler.exe-codedownloader.exe, , [30d0714a99f157df7b1bef9a04010bf5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6E91DDB0-5A7C-473A-8AC6-D4805CAF2539}|AppName, media enhance-enabler.exe-buttonutil.exe, , [b64a27949af053e3870ec7c2699c916f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6EAD6C88-8476-4826-8846-FC6B677C5B2A}|AppName, media enhance-enabler.exe-codedownloader.exe, , [30d02b90296142f4b1e58dfcf70ef709]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F16044F-813A-4E17-BA10-32BE63D84BE9}|AppName, media enhance-enabler.exe-buttonutil.exe, , [a55b3f7c2e5c9e985b3acfba27def808]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F4B22C7-B668-47B5-8F54-45E02070E36C}|AppName, free ven-enabler.exe-buttonutil.exe, , [916fcaf15b2fce68870e34551ce9ed13]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F631DB5-B127-4A05-A51D-B5334EA632A2}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2bd5bcffe9a1ba7c2d681a6f30d5b64a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6F7B30D9-EDBA-4A79-87DE-C458DF7CF47F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a15f0cafb5d5ba7c1482117854b1d729]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{709DECCE-7430-4BD3-B2F5-F8F41A81A9F1}|AppName, media enhance-enabler.exe-buttonutil.exe, , [5ea26853f298bf77eda8daaff70eda26]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{70F35E13-5845-4AFE-8395-7B916A45D3C0}|AppName, media enhance-enabler.exe-codedownloader.exe, , [1be583389eec5fd7abeb3158e1243cc4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{717E2152-A8BF-45E9-BBFA-5F949CF9BCF8}|AppName, free ven-enabler.exe-buttonutil.exe, , [8f71e7d44347dc5abdd801889c6909f7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7198A9E2-699D-47FA-BA24-B64979207BA1}|AppName, media enhance-enabler.exe-buttonutil.exe, , [17e9dddeec9ea88e1e775633cd38d030]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{71AC30B0-82C3-4881-A6EA-2045A58FCE14}|AppName, media enhance-enabler.exe-buttonutil.exe, , [649ccfeccdbd5fd7b0e5fc8d6b9a9e62]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{730280BA-DF5E-4D05-B33E-DA8082672C99}|AppName, media enhance-enabler.exe-codedownloader.exe, , [0cf4e4d7ec9e1d1940567c0d2bda16ea]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{734F4F75-8303-4060-96CE-B6213BE7A5ED}|AppName, media enhance-enabler.exe-buttonutil.exe, , [f20e6259f09ae650445128615ea70ef2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{744FE35E-321D-432B-9A2A-F3A0F588D4D3}|AppName, free ven-enabler.exe-codedownloader.exe, , [ce32ddde5b2f77bfeaac93f625e0926e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7545A6DD-CF81-41A0-9E6F-EF9843A6D99B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [23dd754693f794a2672f018816ef24dc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{75700006-BCBE-4267-8853-D3F32A2144B4}|AppName, free ven-enabler.exe-codedownloader.exe, , [f50be6d5385262d4a0f64b3ebd48d22e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76CBC017-ECEF-4CE7-ADA5-F0E8CAFAEE9E}|AppName, free ven-enabler.exe-buttonutil.exe, , [7a86caf11c6eb77ff1a4761363a21ae6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{76F61A25-ABB7-48D4-99CA-60EFA995ADC1}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4ab618a3276362d48a0ca9e073929868]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7726E115-A313-4B3C-8465-9432466019C5}|AppName, free ven-enabler.exe-buttonutil.exe, , [9a66ba0139514ee8c4d10485778ef20e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{777A973C-910D-4E2A-A9FC-9FEFE2C022E1}|AppName, free ven-enabler.exe-codedownloader.exe, , [1be58a31a6e41e18c0d6b0d99d68e21e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77AD753C-DCA5-4896-B258-BFFBBED445EB}|AppName, free ven-enabler.exe-codedownloader.exe, , [09f72893d9b13ef8bed85a2f50b58977]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77BD9456-623D-4811-9AFB-7DCDA1AC52E2}|AppName, media enhance-enabler.exe-codedownloader.exe, , [27d91c9f7c0ec571593db9d0a16409f7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{78FD115F-73F7-4229-81CC-3B6B5D1BDAC7}|AppName, media enhance-enabler.exe-buttonutil.exe, , [f30d506bf298bb7bd9bc4f3a669f5ca4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{796A06C9-4BDF-46B4-A33E-EA2CFB449663}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2dd3bcff8604171fa7ef03861beae020]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79B59F00-26D7-46EA-8341-BBD177693DBC}|AppName, media enhance-enabler.exe-buttonutil.exe, , [46ba14a72862aa8c6431820730d58c74]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{79c6bdb5-f53e-4bda-89fb-dcd1f55fcd3f}|AppName, media enhance-codedownloader.exe, , [8f71893289010135f4a24d3cb94c58a8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A241364-82DC-4552-B4B0-BA2558D5BAB2}|AppName, media enhance-enabler.exe-buttonutil.exe, , [768a1aa1cdbd0b2bebaa2d5c2dd823dd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A6AEE92-3B1D-4A76-A55B-7CAA37468586}|AppName, free ven-enabler.exe-buttonutil.exe, , [a25e5f5cbecc3ff771248bfeb15415eb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7A9CBFEE-B39F-40B0-8D76-917CFEBEE6F3}|AppName, free ven-enabler.exe-codedownloader.exe, , [d42c53682664bd7951450f7a1fe60ef2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7AC8B7D3-82EF-4FAA-A627-5B78D55621F6}|AppName, free ven-enabler.exe-codedownloader.exe, , [35cbead1aedc8aacacead3b6e02545bb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7B4DFAB9-5A05-4335-A2DA-1EA0DDB3A514}|AppName, media enhance-enabler.exe-codedownloader.exe, , [d22e47748dfdba7c187e9beecb3a1ce4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7BCC2F16-C341-4B83-86DA-96BC69BF287C}|AppName, free ven-enabler.exe-buttonutil.exe, , [0cf426959eec23134f46f792be47728e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7C30017A-24F6-4A35-BF18-5CDFF14E7AFB}|AppName, media enhance-enabler.exe-buttonutil.exe, , [bd43f0cb4c3eae881f769decc73eda26]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CC0AD79-1A11-4DC7-A9A7-2DE389AB1CA8}|AppName, media enhance-enabler.exe-buttonutil.exe, , [11efa417eaa00234efa64c3dbd48af51]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CDB7E76-9CEC-4505-9B2D-6412B7C2695B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [ba46ceedd7b3e056d3c3a0e946bfde22]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7f13537e-0eff-422f-8196-3da13715a819}|AppName, free ven-codedownloader.exe, , [6a9610abb9d137ff0e881277bb4a4ab6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7F543CDE-5A0F-4ED5-99C3-B3F87220C958}|AppName, free ven-enabler.exe-buttonutil.exe, , [e51b803b8406bd797c19ff8a020330d0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7FA0DC5C-BDFE-416E-8916-47EF97393156}|AppName, free ven-enabler.exe-codedownloader.exe, , [28d8813a4743c6709303b3d64bba966a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7FD6CCF6-74BB-4C6E-B833-F717AB38C26D}|AppName, free ven-enabler.exe-buttonutil.exe, , [58a8f0cb0e7c80b6f5a07f0a6f96718f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{80195548-99E2-4C07-AC87-76136A96DB38}|AppName, media enhance-enabler.exe-codedownloader.exe, , [b54b714a2a605bdb9bfb08811bea4db3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8042195C-9329-4CB7-9955-F56C344E37C5}|AppName, media enhance-enabler.exe-codedownloader.exe, , [d030912a4c3e60d6c4d2127739cc29d7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8042D009-64A7-46F7-A76D-6E37CAD7F4A6}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a55b3685dfaba195672f137660a534cc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8069CE64-A333-45A8-8CD3-114025FC8798}|AppName, media enhance-enabler.exe-buttonutil.exe, , [ad53dfdc9feb36009cf92960788d37c9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{810F0B86-7E06-4D73-ACDF-707EE0DF31A0}|AppName, media enhance-enabler.exe-buttonutil.exe, , [1ae6fcbf95f5f6409afbc6c3fc09fa06]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{823CCB8F-A561-4D7C-9214-5CA62D109180}|AppName, media enhance-enabler.exe-codedownloader.exe, , [03fdb704a3e7ea4c692dddacd233629e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{827E1432-1E48-4DAF-A3F2-ED43E1EFFF29}|AppName, free ven-enabler.exe-codedownloader.exe, , [e8182e8d474395a198fe7415a65f38c8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{82C58B57-AD63-48BF-8322-AA5C2F1B20F1}|AppName, media enhance-enabler.exe-codedownloader.exe, , [857b6259dbafc4721b7b0a7fc93ce818]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{838BC365-C332-4123-931C-ACA54CFB2922}|AppName, media enhance-enabler.exe-buttonutil.exe, , [8878c4f736548aacdeb70980e81dae52]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83ABDD3F-3ACE-4B62-B8B2-3C2F30EA2991}|AppName, media enhance-enabler.exe-codedownloader.exe, , [40c0ddde602a60d68412395015f0768a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{83E9DA5B-A02C-4CA1-AB2D-EBA445FA51D8}|AppName, free ven-enabler.exe-codedownloader.exe, , [e31d794241494fe7a1f53d4c7590e917]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8532E44C-32A7-4658-AC20-5211B0F25383}|AppName, media enhance-enabler.exe-buttonutil.exe, , [738d0cafd5b5c175563f14759e67bb45]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{85EF4DE6-D0B0-4E52-993C-712FE4C47CAF}|AppName, free ven-enabler.exe-buttonutil.exe, , [0ff1516af595d2641c7998f118ed2ad6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88440B10-848A-4622-8354-BA4AD4AD78D6}|AppName, media enhance-enabler.exe-buttonutil.exe, , [639dc3f8404a3105b1e4731611f47a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8886B45A-74C3-4366-B18F-B94F7FCEF2FF}|AppName, media enhance-enabler.exe-codedownloader.exe, , [9a669c1f6a20290d75218702bb4a6799]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88BDCD7F-B77B-41BA-959C-6BF2B3D4FD2F}|AppName, media enhance-enabler.exe-buttonutil.exe, , [1ee24a71c2c882b45540d2b7b84d2bd5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{88EFC2D1-12B8-4B94-AA82-6F5C4BECAE98}|AppName, free ven-enabler.exe-buttonutil.exe, , [d12ffbc0800a9b9bcbca6227c342659b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{890625D1-AC60-49E7-A8A4-FA22D9F49F7C}|AppName, media enhance-enabler.exe-buttonutil.exe, , [a65ad2e92565bf77672eb6d3c93cfa06]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{894609AD-8AE9-46F6-BB69-35ACBBDB895D}|AppName, free ven-enabler.exe-codedownloader.exe, , [00007a41ff8b86b0c0d6008916ef3ac6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89507460-18C3-423E-AE3B-2B837B7E4771}|AppName, media enhance-enabler.exe-buttonutil.exe, , [a45cc2f98dfd53e38c098dfc42c315eb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8A82E664-E552-463E-AD50-6F16847AC846}|AppName, media enhance-enabler.exe-buttonutil.exe, , [6c9458636e1c45f17f16e2a72fd6e719]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AE4192C-49F4-48D6-AC24-65ACECD1E4D1}|AppName, media enhance-enabler.exe-buttonutil.exe, , [619fab1084063600e4b17118ad58a45c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AE88A50-D466-4EEC-906D-EA91C175C3A8}|AppName, media enhance-enabler.exe-codedownloader.exe, , [09f7714a0486b77fe0b6bfca57aec838]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AF3252A-95F5-48D3-B424-2C324136E0BF}|AppName, media enhance-enabler.exe-buttonutil.exe, , [25dbe1da206af93d455097f26b9adf21]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8AFDAD1D-33CB-423C-96C3-9ED8FDC0F51D}|AppName, media enhance-enabler.exe-codedownloader.exe, , [d52b67542565a98d5e384643e71e18e8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B0616BC-8E2B-4C76-9019-E3C14F943638}|AppName, media enhance-enabler.exe-buttonutil.exe, , [49b70bb06426ff37d5c07811e61fdf21]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8B252B7B-285B-4F49-B779-D57F614CA4CC}|AppName, media enhance-enabler.exe-codedownloader.exe, , [bb452d8e9feb49ede6b0b6d3f80d23dd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C049C3F-91EC-482C-B924-7F9CD8B7EBF9}|AppName, media enhance-enabler.exe-buttonutil.exe, , [0000d8e343472e087223bdccd82d9967]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C37454C-EAE0-4107-8CEA-2FC1C1F78D2C}|AppName, free ven-enabler.exe-codedownloader.exe, , [3ac61e9d39513ff7672fea9fb94cc43c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8C46AE13-842B-4928-A186-58686C8618F9}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4cb40caf07834ee80195acdd887dbd43]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8CC2E057-BB82-4587-8155-5BC3F740DFFA}|AppName, media enhance-enabler.exe-buttonutil.exe, , [d729b407e6a438fe52435930679ef808]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DACFAB7-F53B-40EE-A871-C946A83FE512}|AppName, media enhance-enabler.exe-buttonutil.exe, , [b749f6c596f4a0963e57addc27deb14f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DEBD75C-61EF-4CE5-90E8-C67DD193CAB1}|AppName, media enhance-enabler.exe-buttonutil.exe, , [ba46ead13258ba7c781df297b4518779]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8E8E3E56-2764-4BD6-9156-8DE765CA39B4}|AppName, free ven-enabler.exe-buttonutil.exe, , [54ac6f4c46445bdb8f065237976ebd43]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8ECB06CF-1F4D-4359-A89E-80E614FDF867}|AppName, media enhance-enabler.exe-codedownloader.exe, , [966a308b7c0e320460363455d3323cc4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8EEE3E05-B6B8-460C-8F46-2DFF30B98E68}|AppName, media enhance-enabler.exe-buttonutil.exe, , [d12f6556a3e72e083263deabc93c8779]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2C2640-C410-4B13-ADD1-B0E5465CF971}|AppName, free ven-enabler.exe-codedownloader.exe, , [b749c5f6e0aac1756c2ac8c1a85d5ea2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8FFFBF69-A9E7-4A86-868F-A27C8FB8662B}|AppName, free ven-enabler.exe-codedownloader.exe, , [bb4546754248b680346299f04abb07f9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90B16843-C63C-4959-B619-BEA4107CB667}|AppName, free ven-enabler.exe-buttonutil.exe, , [1be52f8c90fae94d464f4a3f55b013ed]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90D44214-1562-4690-A3E2-E1684B6BF6EF}|AppName, free ven-enabler.exe-buttonutil.exe, , [f50b2398cebc40f6494c6524e1246d93]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{913E6C09-E077-41F5-9750-DAAC12C6A7B6}|AppName, free ven-enabler.exe-codedownloader.exe, , [e61ae5d66525f83e9bfb3c4dc93cce32]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91A96C7B-C67D-48E5-A8A5-55E9EC719013}|AppName, media enhance-enabler.exe-codedownloader.exe, , [97694d6eb6d4072f4d497d0c95705fa1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91D34243-15D6-491A-8F99-22896495A332}|AppName, media enhance-enabler.exe-buttonutil.exe, , [ca36c5f62e5c7cbad1c4b0d99b6a8e72]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9209AF03-274A-4CA4-A130-84D2F86C135B}|AppName, free ven-enabler.exe-buttonutil.exe, , [5ca4516aeaa062d4662fddacd72ee61a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9340FD7D-9CC2-4E69-A01F-F5B77299F7C2}|AppName, media enhance-enabler.exe-buttonutil.exe, , [15ebd3e8315972c4eea78efb12f317e9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{934FDCE5-9C24-427D-8B20-24D0348983B9}|AppName, free ven-enabler.exe-buttonutil.exe, , [44bcc5f62a60f1456e27daafc342cb35]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93F1503A-4782-4A28-BC97-D13936256B1B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [02fe685361292610276f0d7c72932ad6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F0AD6D-8E04-47B6-9CC7-EAC865F8F438}|AppName, media enhance-enabler.exe-buttonutil.exe, , [4fb12a91b3d7bc7a3b5a573239cce020]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{94F94018-4DAE-40C1-9C2E-BF1A9D90348D}|AppName, media enhance-enabler.exe-codedownloader.exe, , [857b8e2d1377fe384650880130d59f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{951B631F-6E17-4C3B-8427-8A9E68455C2C}|AppName, media enhance-enabler.exe-codedownloader.exe, , [c04052698efc39fda6f04b3ee81d659b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9627F012-15C4-4AEC-A453-541EDB823CC6}|AppName, free ven-enabler.exe-codedownloader.exe, , [2bd5f2c98307fb3bfd995138c83de917]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96496360-8BD5-48DE-A2D8-FCD61574161A}|AppName, free ven-enabler.exe-codedownloader.exe, , [88782e8d6327a492f4a206839b6a4eb2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96721C5F-DF7B-4924-B8EC-D09763D9A653}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2ed228932268d36396ffaadfff06c23e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9672E7CB-57DD-4A7D-B7C2-D9634852ACE9}|AppName, media enhance-enabler.exe-codedownloader.exe, , [fe02b407fa90cc6af3a3543507fedc24]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96D3E6A4-E418-40FB-A4C9-4F6CF248B7F9}|AppName, media enhance-enabler.exe-codedownloader.exe, , [5ca4d5e69febcb6b4f479aefd2336e92]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{96F74177-760D-4435-AF20-EBB08C524E45}|AppName, media enhance-enabler.exe-codedownloader.exe, , [bc44ac0f107aa492a8eeb1d884819c64]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{97771177-EE6B-43D3-BB17-54FA8346F9A3}|AppName, free ven-enabler.exe-buttonutil.exe, , [e11f516a701a3204c7ce5c2de5206d93]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{98752313-9F09-4A98-9792-1274F1C8A930}|AppName, media enhance-enabler.exe-codedownloader.exe, , [48b873487f0b89adb4e2addcd92cef11]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{988AEAE1-7443-4F1B-9952-A0B24A2C3EA7}|AppName, free ven-enabler.exe-codedownloader.exe, , [da263784434755e105911d6c50b5bc44]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99495101-47ED-4BE4-BFF4-59BC7F169B7B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a15fd3e8741677bf98fe840545c0a957]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99504741-40E8-4AA2-BFD0-F6484BD884CF}|AppName, media enhance-enabler.exe-buttonutil.exe, , [e61a2596fc8e3bfb5540cabfb45133cd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9A0EE8F8-56C0-40B0-9DC6-EDC4963BB2F5}|AppName, free ven-enabler.exe-buttonutil.exe, , [c23e1e9dc8c273c38c0998f144c1ca36]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B296212-70C4-451C-A538-702B5637EF16}|AppName, media enhance-enabler.exe-codedownloader.exe, , [8779caf11872ca6c276f6c1d60a58779]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B43C93E-1873-486A-AC7B-77F6C1B12F3D}|AppName, free ven-enabler.exe-buttonutil.exe, , [9b650ab1a9e17abc593cc5c49174af51]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B5A3559-1DA4-482B-9E11-6E668D5E9B4C}|AppName, free ven-enabler.exe-codedownloader.exe, , [a060dae1890187af0e881772a362a060]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B886A70-9119-434D-A66D-5B8A9ADBC562}|AppName, media enhance-enabler.exe-codedownloader.exe, , [b94705b6c2c895a1375f64252bdab749]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9BCF6548-A524-4886-B3A8-4197398A35CB}|AppName, free ven-enabler.exe-codedownloader.exe, , [24dc77440288f442c8ce345559ac9a66]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9BEBFC45-8905-4790-99DC-FAA35056EE96}|AppName, media enhance-enabler.exe-buttonutil.exe, , [8878358655352214870e048560a57888]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9CE04C28-6037-42A9-9B49-2FA92C8EBB48}|AppName, media enhance-enabler.exe-buttonutil.exe, , [03fdddde3e4c5dd9682d67228a7bde22]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9CF35F82-805E-4032-91F3-E3C046D9E1D0}|AppName, media enhance-enabler.exe-codedownloader.exe, , [60a0c9f25931ed4973236e1b3fc66d93]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D24E8A4-EB4B-4C89-9BFA-1345A22E4EB1}|AppName, media enhance-enabler.exe-buttonutil.exe, , [52ae803bc8c23501d8bd1d6c43c2827e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9D54F76D-9D54-41BC-9D22-FE15DC5FC336}|AppName, media enhance-enabler.exe-buttonutil.exe, , [778957649eecb87eafe6a0e9d431837d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9ED22ECE-A23E-4C34-8FA8-53D2F397A185}|AppName, free ven-enabler.exe-buttonutil.exe, , [ce32c0fb5e2cf3433b5abacf976e6898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9EE53437-AD98-4D04-A3BC-A42D206926E7}|AppName, media enhance-enabler.exe-buttonutil.exe, , [916fbb007f0b68cecbca721762a35aa6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9F7AE10E-5694-44FD-A398-4DCC92BFE883}|AppName, media enhance-enabler.exe-codedownloader.exe, , [15ebaf0cdfaba88e8b0b59309e67fe02]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A04E99C9-A6D5-460C-9F43-27D635545078}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c53b8734b7d38ea8c5d0e1a85ca9ef11]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A120FC9A-F5DE-4A1C-8FEA-D8D41BFE7C6C}|AppName, free ven-enabler.exe-codedownloader.exe, , [de22b00b03871125187ea6e3ee1746ba]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1555852-7F6B-4278-B7E2-1CB1C7E97710}|AppName, media enhance-enabler.exe-codedownloader.exe, , [aa56a8138ffbaa8c7d190485e61f748c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1662C60-1307-4E15-A8B3-CB723D2066B4}|AppName, free ven-enabler.exe-codedownloader.exe, , [df21befd05852e08c5d1b5d47f8660a0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1AAD27A-C81F-4ECA-A742-82A91924B21A}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c23e4972eaa0d5613b5a8dfc976ebd43]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A1DBC718-5F42-49FA-B96F-BBE7A88B50B8}|AppName, free ven-enabler.exe-codedownloader.exe, , [31cf7a41c6c42016efa7e1a814f106fa]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A37B1AC0-D55F-4CDF-B755-D5E1F45F3650}|AppName, free ven-enabler.exe-codedownloader.exe, , [fd030daebad0d660e9ad494071942ad6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3C37BE8-D6A5-4E5D-B88A-4EEEAF615381}|AppName, media enhance-enabler.exe-codedownloader.exe, , [d42cb10ae3a794a22472048551b437c9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3CEB07C-7D31-4052-A59A-B3343D503F73}|AppName, free ven-enabler.exe-buttonutil.exe, , [40c0a8138cfece686e270d7ce2239967]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A3E22BA5-C8BF-4166-A87B-D74B99F54232}|AppName, free ven-enabler.exe-buttonutil.exe, , [57a9ccef92f8f1458e07eb9eff06c13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4086DA2-2BE2-44E3-B8CD-BA8E6D6BF3FD}|AppName, media enhance-enabler.exe-codedownloader.exe, , [4eb29f1c47432e082a6c1e6bf60f2dd3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A4CAF2F6-E1B0-45B6-A814-F1FC68E0C317}|AppName, media enhance-enabler.exe-buttonutil.exe, , [32ceedce3a50b87e8e07cfbac3426c94]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A741949C-9157-4195-B417-A3A15AB19285}|AppName, free ven-enabler.exe-codedownloader.exe, , [00005b608ffb8aac4f47ec9d9273867a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A75A6B22-2569-4B4F-BC26-B1134E3D961C}|AppName, media enhance-enabler.exe-buttonutil.exe, , [b0503586e8a2aa8ccfc661287f8616ea]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A7E4157A-CFE9-4D39-99D9-D1D5552A6692}|AppName, free ven-enabler.exe-buttonutil.exe, , [c13f2695553573c3781d89009372f40c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A967747A-DC1C-4FF3-A6E9-59BF5A23623B}|AppName, free ven-enabler.exe-buttonutil.exe, , [db257744d1b9e3539ff62c5d16ef629e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A96C0EB0-EF2F-42F0-9D4E-A81DF33FF12B}|AppName, free ven-enabler.exe-codedownloader.exe, , [25dbac0f55356ec801958405e322e818]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A985EAB2-732E-45F4-B04D-2AFC1092BC9D}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a15f6f4c6b1f1620b4e2a8e131d45da3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AAA90A10-BB47-4057-8E26-78624B984689}|AppName, free ven-enabler.exe-codedownloader.exe, , [f60a37843a5057dfdabcb8d1c63f5ca4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AAD4D602-7AAC-4837-84A5-D38F3AE9B1DD}|AppName, free ven-enabler.exe-codedownloader.exe, , [9d633d7ec7c3e74ffc9a59306b9af907]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ABDED7F2-DF8B-4854-8FC2-9C5836C074ED}|AppName, free ven-enabler.exe-codedownloader.exe, , [43bd8635315987af9600c3c6fd0832ce]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC560070-DD9C-43D6-8EE0-D527EC63BCDA}|AppName, media enhance-enabler.exe-codedownloader.exe, , [18e8f1ca167489adfe98d4b5eb1adf21]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC7FA1C6-6246-48BB-B761-7224181C9B20}|AppName, free ven-enabler.exe-codedownloader.exe, , [39c7f9c24347d95d9afcfc8d040122de]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AC812F10-660E-4C04-8EAA-F75492871D5B}|AppName, free ven-enabler.exe-codedownloader.exe, , [b44c7942f694ec4ab0e6b5d4ec1947b9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AE28422E-A81B-4840-97BE-5A3E99DF9F86}|AppName, media enhance-enabler.exe-buttonutil.exe, , [6b952a91c9c1fd399bfa7316eb1a21df]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AF8AB311-9483-4BA7-A2B5-1596E8127D79}|AppName, media enhance-enabler.exe-codedownloader.exe, , [bd43853695f5c96dbcda3a4fa164847c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B0276C27-4F71-4EF7-976E-C56295BC97DD}|AppName, free ven-enabler.exe-buttonutil.exe, , [4cb4407b7a105adc6e2748410ff636ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B047A4AA-D0AC-42D2-B0A3-FC3E278F1452}|AppName, media enhance-enabler.exe-buttonutil.exe, , [21df8b3022680a2c1382b1d814f11ee2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1914AAD-634D-427B-A88F-1A6829B13DFA}|AppName, free ven-enabler.exe-buttonutil.exe, , [649cd7e42a60a492534290f9877e3ac6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B1E901FC-3FBF-492E-B89B-3C8DEAF1B3E2}|AppName, free ven-enabler.exe-codedownloader.exe, , [fa06d2e9b2d8b87e7125deab28dde818]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B205E2CB-1355-4E68-80DE-AB2ED3A0474D}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2ad6c0fb7d0ddf57474e6029d5307090]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3C32D7A-EFF5-49F6-B1C8-99448DD089C0}|AppName, free ven-enabler.exe-buttonutil.exe, , [26da7e3d1e6cbe78a2f30089867fc63a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B3D54888-174A-4EA2-A655-2E966DBB94FB}|AppName, media enhance-enabler.exe-codedownloader.exe, , [0df3b704dfab40f6e4b2afda2cd96b95]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B42BD247-C56A-44B6-BAF5-A35E5598BE94}|AppName, free ven-enabler.exe-codedownloader.exe, , [9868e9d246446ec8395dc0c9cb3a06fa]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B42D3DAE-4BAB-4C89-99E7-C9348C504466}|AppName, media enhance-enabler.exe-buttonutil.exe, , [7c84dfdc4941e74f682dcebb0ef758a8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4C989C9-F758-4F22-A7D0-8C722192AB8C}|AppName, media enhance-enabler.exe-buttonutil.exe, , [09f7f4c75b2ff343b8dd20698085ff01]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B4F24A95-6763-4EFD-A8B8-4A259AC661FB}|AppName, media enhance-enabler.exe-buttonutil.exe, , [619f774478122a0cb3e24e3b36cff40c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B5B9CE83-52DF-4E63-B0FC-EE71225C7F18}|AppName, media enhance-enabler.exe-buttonutil.exe, , [31cf44774743a5915342a3e6fe0749b7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B789C282-C32E-42BE-A086-443647C18F2F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [05fbbdfe3b4f7bbb3165e2a7778e5ca4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B7E953B3-715D-47D2-A255-2231214BEE6C}|AppName, media enhance-enabler.exe-codedownloader.exe, , [23ddaa11c1c9e6508d094346cf36da26]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B80ED1E0-F32F-4A8C-BACC-58D3B28CE522}|AppName, free ven-enabler.exe-codedownloader.exe, , [44bc7447f298280e722496f32bdae61a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B81C3B5B-3E99-4190-A0ED-1F68DCB69EB6}|AppName, media enhance-enabler.exe-codedownloader.exe, , [9e62952697f35ed8d7bfb7d251b46898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B81C4970-FBB6-4BBE-A653-51A9B8555DAD}|AppName, free ven-enabler.exe-codedownloader.exe, , [f7099526c0ca072f97ffec9d3dc8946c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8B992D1-9978-4F70-B756-AA1AC0F3B4B5}|AppName, media enhance-enabler.exe-buttonutil.exe, , [42be87345b2fa78f286dd3b625e02fd1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B8F544CD-70F4-476F-BD1E-2DEC9BDB41F7}|AppName, media enhance-enabler.exe-codedownloader.exe, , [eb1507b434564fe73b5b7118d530728e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B93E0204-ED2D-4394-BADF-58E1EDF99F22}|AppName, free ven-enabler.exe-buttonutil.exe, , [12ee09b29febb87ecbca0980768f58a8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAD8EF9D-E088-4587-AE48-637A19BB175B}|AppName, media enhance-enabler.exe-buttonutil.exe, , [e41c982359316fc71e774c3df70ec33d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BADC7027-CB49-4A31-A77D-882E13AFD395}|AppName, media enhance-enabler.exe-codedownloader.exe, , [cc3402b9c0ca5cda791d8affc045dc24]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAF15069-CFF6-4533-A028-4C60595DF56C}|AppName, media enhance-enabler.exe-codedownloader.exe, , [f20effbc6525a29435613653eb1a0ef2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BB1EBADC-5D9F-4013-A5BF-6B267D3BCF92}|AppName, free ven-enabler.exe-codedownloader.exe, , [60a0893297f3aa8c0096a7e29273b848]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BB457014-66C1-44E0-9C5A-CA44ADADA4DE}|AppName, free ven-enabler.exe-buttonutil.exe, , [a65ae8d3840613235540701950b528d8]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{bbd0e1a7-0ab4-40b6-87e7-fe1797aa48e1}|AppName, media enhance-bg.exe, , [cb35d4e7c5c5dd591f75890024e109f7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC5B8ACF-CED0-4877-A630-22B26837C434}|AppName, free ven-enabler.exe-codedownloader.exe, , [23dddae10585d1651284206930d53cc4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BC5E96E9-86E2-41AC-9FA3-E5FD8822849A}|AppName, media enhance-enabler.exe-codedownloader.exe, , [bf415e5d5931999d088eddac759015eb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BD8EC32F-C804-4E36-A4F3-AE4E85B9CBE5}|AppName, free ven-enabler.exe-buttonutil.exe, , [4fb1a714513992a4880d9fea7c894fb1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE3B9CA3-67B9-4785-9153-7DF7D079E7C5}|AppName, free ven-enabler.exe-codedownloader.exe, , [9b65e4d7bbcf2a0ccaccd9b016ef41bf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BE7DE77E-628B-4C25-AE36-30185874ADF8}|AppName, free ven-enabler.exe-codedownloader.exe, , [6a96516a890120161f7787029a6b629e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEEBD263-3F2C-42ED-8C74-1A50F2ABBEE3}|AppName, media enhance-enabler.exe-codedownloader.exe, , [1be5506ba9e159dd1c7ab1d82bda2cd4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFFCFE2B-69D9-425E-967F-6B82BD6D4352}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2dd35e5d25656ec81e78533675909f61]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFFDD654-D68B-4888-BFC8-D2DE68EA6931}|AppName, media enhance-enabler.exe-codedownloader.exe, , [ff01615aef9b11256e282564b64f7f81]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C02A682D-D8D7-456A-8811-DA38783FCA7A}|AppName, media enhance-enabler.exe-buttonutil.exe, , [679962596228c670bfd61f6a8e77db25]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0C9943B-6526-41C9-9094-FB5E4D5A49AA}|AppName, media enhance-enabler.exe-codedownloader.exe, , [ed1303b80e7c4fe72b6b8bfe37ce3bc5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C14D754B-21CB-4BE5-BB69-523EDBE65593}|AppName, media enhance-enabler.exe-buttonutil.exe, , [49b75c5fb2d88aac95001c6d7e87c53b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C19C6157-B636-42B1-87EC-B54FAB2F515C}|AppName, free ven-enabler.exe-codedownloader.exe, , [fb055764e0aa81b596004e3bc540f709]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C1B7C274-FD3B-417F-94CD-47178E1CEFF8}|AppName, free ven-enabler.exe-codedownloader.exe, , [827e3d7e4d3d3ff72c6a1574be476799]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C248BD84-461F-4C51-BE8A-31AC9BDA17EF}|AppName, media enhance-enabler.exe-buttonutil.exe, , [d828d1eac2c8ca6c4d487c0d7095956b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2FB1AD4-1278-4301-A9BD-89563626CEC0}|AppName, media enhance-enabler.exe-buttonutil.exe, , [966a5467f595290d31644445b352f60a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C36B4F7B-1DF0-46EB-A728-984B918F6DAC}|AppName, media enhance-enabler.exe-buttonutil.exe, , [8a764378414994a2583d58311beaeb15]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3738C75-D3E8-4DC1-AFE9-577C746E4DF7}|AppName, media enhance-enabler.exe-buttonutil.exe, , [8e728b302a6046f0f0a545440cf959a7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3A03BFB-5AF3-4176-8FA7-B74A45341E92}|AppName, free ven-enabler.exe-codedownloader.exe, , [fa06c2f9d2b8a88e9ff7eb9e19ec3bc5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3AA1677-8F0B-4B61-9E92-7C81F4DF856E}|AppName, media enhance-enabler.exe-buttonutil.exe, , [3bc5e3d83a50c373f0a53752bd488e72]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4AA905D-A827-48BF-B345-824673409E4A}|AppName, media enhance-enabler.exe-codedownloader.exe, , [8a768b304d3d81b5e4b2acdd1ce9ab55]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4D610BB-5416-4C6C-B559-A241FD67AE5E}|AppName, media enhance-enabler.exe-buttonutil.exe, , [639d0bb0c6c477bfe6afc9c06a9b57a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C4ED99AB-A2F5-470B-8B5D-903B8FB868D8}|AppName, free ven-enabler.exe-codedownloader.exe, , [ff01863599f166d0badceb9eb84d748c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66BE517-AB5F-4437-B6CC-E149BF61141D}|AppName, media enhance-enabler.exe-buttonutil.exe, , [46ba02b9b0da0e28d5c0c8c1f2137a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C6A5600B-CC62-4724-82B3-22704F8532A8}|AppName, free ven-enabler.exe-buttonutil.exe, , [55ab0ead52387eb8a6efe3a69d68a15f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C73B81E4-2CB8-4F65-9A21-4C1DFAA55FBB}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2dd3edcec9c14beba4f24d3c040159a7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7E7F6D1-390E-434D-B6FB-7B7A7BBA4032}|AppName, media enhance-enabler.exe-buttonutil.exe, , [fb05f9c238526dc9fb9afb8eca3b47b9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C806DAAF-BE2A-447F-958C-573FABDB734F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2bd5d6e535550a2c771f3752cb3a47b9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C86106CB-473B-4865-ADCA-37C8DE93C4F2}|AppName, media enhance-enabler.exe-codedownloader.exe, , [ac546c4fd4b61c1ab7df31588184a759]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8A884BD-72FA-4CF7-A68E-D12FE229726F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [b947338854363bfb1383f396e3226f91]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8EB5C8F-707D-46A9-B0ED-69BD21DC3957}|AppName, media enhance-enabler.exe-buttonutil.exe, , [2bd52f8c6a20ff379203d1b844c16898]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB1ABBB8-B697-4955-AFCD-53B7291F611E}|AppName, free ven-enabler.exe-buttonutil.exe, , [7b854873abdfdd59286dabdeef16b749]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB23302D-D42F-4195-9E6F-94F5AD11EF2F}|AppName, media enhance-enabler.exe-buttonutil.exe, , [748ca91221690c2ad6bf4841818411ef]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB665313-C3DC-4B69-BC5B-5035CB3CA17F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [df2115a62862b086e3b3810837ce718f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CB79D755-90FD-4BE8-BF47-6752D1138159}|AppName, free ven-enabler.exe-buttonutil.exe, , [44bc0eadb4d648ee286d5a2f7e87827e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC375C82-8516-4261-84DE-D44D5E59BCC7}|AppName, media enhance-enabler.exe-buttonutil.exe, , [f40c14a7f991d3638d0823660cf98080]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CD30F38E-EEA2-48BB-96B6-846BD0C58786}|AppName, media enhance-enabler.exe-buttonutil.exe, , [e7198635dab03402ff966425ff068878]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CE826B38-4735-4C8E-9989-F12456EFB4DD}|AppName, media enhance-enabler.exe-codedownloader.exe, , [b64a734852386fc7ccca1d6c19ec4bb5]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CE8B6266-5E42-4C3D-AF33-9AEE22CADEA0}|AppName, media enhance-enabler.exe-codedownloader.exe, , [fd03ead15d2d85b1e7afd8b1be4702fe]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CF171D6F-EF55-4D6C-B1D2-F6D64BDD1622}|AppName, media enhance-enabler.exe-buttonutil.exe, , [0df3ccefc9c1b08697fe1277b64f7987]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CFD458FC-8931-479A-8BC4-29675965488F}|AppName, free ven-enabler.exe-buttonutil.exe, , [b64a7f3c7614191d8f06b3d62adb39c7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CFEB1620-80CF-492A-9194-4BF7B8A072CF}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a75904b7e5a5e452d2c432577392b14f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D030AF09-570E-44E1-BB6C-4ADAFF57AE6D}|AppName, free ven-enabler.exe-codedownloader.exe, , [8a760bb0b5d5a19506901b6e5ea71ae6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1134148-D0E6-4BE9-9085-9CEA52776677}|AppName, media enhance-enabler.exe-codedownloader.exe, , [5ea29229147677bf0591a2e7c342a858]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D17B1FA4-888A-49CF-826E-5610C1E97C49}|AppName, free ven-enabler.exe-buttonutil.exe, , [54ac23988703f54153426227c83d43bd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1B1918C-E37B-41A8-A462-48105685EFEC}|AppName, media enhance-enabler.exe-buttonutil.exe, , [04fce0dbd6b480b635608efbe22337c9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D1CAEBEA-42C1-408F-B465-F62F2C711530}|AppName, free ven-enabler.exe-buttonutil.exe, , [5ba5f2c9cbbf79bdaee7632611f4cd33]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D21A71CE-AE56-4F83-9B2F-7FDD5BBF575F}|AppName, media enhance-enabler.exe-codedownloader.exe, , [b44cfdbecbbf9c9a8c0ab0d9ef1610f0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D22C7223-A8D0-4F0B-9189-DEBF71202896}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a35df8c3deac83b38a0cbacf53b252ae]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2784AC2-60EC-4776-8085-672CB2F4D61B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [9868704b4c3e90a6f89e5930ac594fb1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D2FEE64C-C9ED-4D0C-B022-9CD3FAFD4CA8}|AppName, media enhance-enabler.exe-codedownloader.exe, , [619f7b40c0ca3afca6f03653ef16be42]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D30725BC-9793-4C59-B3C2-78FC90654EC4}|AppName, media enhance-enabler.exe-buttonutil.exe, , [748c6457b9d12e08deb7ddac4fb6c13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D31EF884-4BF6-4537-97D0-21ADD1ABFE44}|AppName, free ven-enabler.exe-buttonutil.exe, , [8c7429929eec0333a2f3c1c8ff06f20e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D3D1E6D9-66AF-4767-9E89-68F524B93985}|AppName, media enhance-enabler.exe-codedownloader.exe, , [ca368239c7c33ff7acea2a5fa560e31d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D42660A8-9F8D-43B4-9C7D-AE6DC5768FD2}|AppName, free ven-enabler.exe-buttonutil.exe, , [56aac1fa9ded6dc9494cbccd719456aa]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D437E6C8-7ECF-47F4-83E8-E0329D97718B}|AppName, free ven-enabler.exe-buttonutil.exe, , [f60a98238ffbea4cccc92f5a53b2a15f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D4AA422E-D4B5-4A78-A451-9458BBA1DC7F}|AppName, media enhance-enabler.exe-buttonutil.exe, , [9967bcfffc8eb77fb4e1dbae778e9b65]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D4D44E2D-DF90-442D-B818-6EAA92DE9CC8}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2cd414a783078fa720765d2c3acbfe02]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D5EFD126-4C58-42D3-AAC4-18E5E7224768}|AppName, media enhance-enabler.exe-codedownloader.exe, , [60a09a2169215ed880168bfe27dea35d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D63FD405-BA48-44AC-84E9-55F11549438C}|AppName, media enhance-enabler.exe-codedownloader.exe, , [18e83d7e99f18fa71c7a3c4db74ef20e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D6A4AAB7-924C-4CF4-8B47-483A4E902A37}|AppName, media enhance-enabler.exe-codedownloader.exe, , [30d0c6f5e8a233030a8c711816ef8e72]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D6D2A0EE-EEA4-425E-9F7C-10294BF7AD14}|AppName, media enhance-enabler.exe-codedownloader.exe, , [cf312c8f3e4c48eecdc94643e81d5ea2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D715C0E4-A6A3-4517-9C1D-E3C273593482}|AppName, free ven-enabler.exe-buttonutil.exe, , [b7490daed2b8d264128374157590ec14]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7E2B9D6-CFCE-41E2-921B-38FB5BE71634}|AppName, media enhance-enabler.exe-codedownloader.exe, , [88786556bbcf51e505912e5bdc294fb1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D83EB7AD-8283-47B3-9C9A-48386237F7F8}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c040813af397ca6cd7bec8c1bb4a8b75]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D87530A3-6635-43BA-8EAD-2F294946D3B4}|AppName, free ven-enabler.exe-codedownloader.exe, , [05fb3b80ee9c3df9b4e2b0d953b27a86]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D99F8455-2B38-44D8-88FB-C971EA9E769F}|AppName, free ven-enabler.exe-codedownloader.exe, , [1ae6cbf0464457dfbadce8a1aa5bf010]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA9B75AF-3C69-45CD-A76A-38217026FBDA}|AppName, free ven-enabler.exe-buttonutil.exe, , [0af68536f7936acc1481f396dd28cd33]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DB8790CA-E6DF-46A8-B253-4D168B18D22E}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2cd41c9fc2c8ce68f0a6c3c6dc290ff1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DDDE9C13-6ABA-43D2-A31A-68C4F910C1E6}|AppName, media enhance-enabler.exe-codedownloader.exe, , [0df3ead1afdb14220f87e6a3ff0629d7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E00E729F-FCFD-4E8B-B9DB-4F4618A9F712}|AppName, free ven-enabler.exe-codedownloader.exe, , [f60ae3d8ef9b003655413752dc2939c7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E02035CE-3A6E-4F28-BB2C-9E4C7DA7D990}|AppName, media enhance-enabler.exe-buttonutil.exe, , [6898e2d9bbcf82b40f867514ec19768a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E0CDDC6E-657B-42C0-AC43-7432B8FAFBD2}|AppName, media enhance-enabler.exe-codedownloader.exe, , [1fe12c8ff4963afc5b3bd7b2986d0af6]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E1F4A1FD-3BBA-45C8-95CA-FA32D5E0F217}|AppName, free ven-enabler.exe-buttonutil.exe, , [ad536556f6948caa6c293356b64fe41c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2B2E002-A267-4168-84E6-36DBF8E3995D}|AppName, media enhance-enabler.exe-buttonutil.exe, , [fc043c7f5c2e0d297d18b9d01aeb8977]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2CC2111-723E-4899-A86B-D2627CAFB22C}|AppName, media enhance-enabler.exe-codedownloader.exe, , [b64a00bb2169da5cb9dd5336ef1636ca]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2D2030D-ABEC-46EB-8CB7-42C5394A65B9}|AppName, media enhance-enabler.exe-buttonutil.exe, , [7b85ccef0f7b1f1735605f2ad92cf40c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3104C78-77A1-41E8-B0BC-E0C6478516B4}|AppName, media enhance-enabler.exe-buttonutil.exe, , [cf3129921d6d5adc464f0a7f1fe6fb05]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3729D1A-3395-4181-B82A-F9F3BD146FF3}|AppName, media enhance-enabler.exe-codedownloader.exe, , [e21e06b56327d4622b6b96f33dc8f709]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3B8FAD5-6965-41CF-80E5-FCF428A6FDC6}|AppName, free ven-enabler.exe-buttonutil.exe, , [cd3319a2c5c5c76ff79ec0c9b25349b7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E3EB0968-30FB-40FE-90FD-4E6CECC8E6A8}|AppName, media enhance-enabler.exe-buttonutil.exe, , [68987843b4d6072f5e37bccd0ff6956b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4310BF2-6DA5-4AD9-B38B-595E36BC2795}|AppName, media enhance-enabler.exe-codedownloader.exe, , [926e6655e2a8d660f89e7415f213bf41]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E4606A97-F1A8-4347-A81D-B0BE17B59393}|AppName, media enhance-enabler.exe-buttonutil.exe, , [39c7893291f981b5cec72c5ddb2a847c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E50527C6-7A32-4BA7-BEBA-59EF78C42958}|AppName, media enhance-enabler.exe-codedownloader.exe, , [37c9338895f5e5517323ff8a6a9b54ac]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E527AB86-50F2-4606-8C33-46B934B6A1B9}|AppName, media enhance-enabler.exe-codedownloader.exe, , [7f81af0c39512e08bed83c4d8a7bc13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6198C05-310D-4BDE-9992-7C7DB1338E80}|AppName, media enhance-enabler.exe-codedownloader.exe, , [5ca4d5e6afdb3df9dbbb25648580649c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E645473C-DB3F-4801-93A1-5B9C53FD34BF}|AppName, free ven-enabler.exe-codedownloader.exe, , [fc043e7dff8bc670c2d400893acbac54]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7585023-F7EA-4D7D-8D25-94C4C0518FA7}|AppName, media enhance-enabler.exe-codedownloader.exe, , [649c0bb0107af93d1a7ca7e28c79728e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E814DABD-C5F4-47AF-BE84-ADF3C39E8226}|AppName, media enhance-enabler.exe-codedownloader.exe, , [a65af0cbb5d572c4128498f17095f60a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8F5F83F-DA15-455D-BCEA-B7A24828486E}|AppName, free ven-enabler.exe-codedownloader.exe, , [748cb902f892e94d9ef8cdbcb352b44c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E917999B-F3D9-44E6-84A1-E1BF4A1EA8FD}|AppName, free ven-enabler.exe-codedownloader.exe, , [98682d8e5e2c70c6f5a1b5d4d33254ac]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E91D19B7-8672-4E48-A0A4-DF5C56BF671E}|AppName, free ven-enabler.exe-buttonutil.exe, , [2ed253681872290d1283e4a5927316ea]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E96858AB-1CEB-41D2-92F2-F593F0586171}|AppName, media enhance-enabler.exe-codedownloader.exe, , [fb056a519bef280e692dfa8faf569967]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB1E7E6A-135C-413D-99AC-133663CECF10}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2ad6b902d6b4b77fbcdadeab8481639d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC6E8BFF-14AC-46E7-921E-654BD21D9A7B}|AppName, media enhance-enabler.exe-codedownloader.exe, , [718f57642367f73fb3e39dece91ccc34]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ECB466D6-4669-435C-B4F4-42B2DA39DA27}|AppName, media enhance-enabler.exe-codedownloader.exe, , [f8087e3d2d5df1458c0a4148c342fc04]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF544413-907F-416E-9EC1-B04340C45685}|AppName, media enhance-enabler.exe-codedownloader.exe, , [05fbffbc39511d1961358405ad58e21e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF99BEB3-279F-4353-8FA8-B4AC8FA298BF}|AppName, media enhance-enabler.exe-buttonutil.exe, , [c33d407bed9dab8b187d8dfcd82d57a9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F11142CC-E84A-4667-9277-6DB8B3D13CBA}|AppName, media enhance-enabler.exe-buttonutil.exe, , [d927803ba3e71620f3a23c4de71e37c9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F12B61DB-5840-41E4-AB49-957A407B5129}|AppName, media enhance-enabler.exe-buttonutil.exe, , [bf418536226856e0672e7b0eee177d83]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F29817B2-4F78-4066-912F-2E7A3BEF1F77}|AppName, free ven-enabler.exe-codedownloader.exe, , [90704b7059315ed8dcba5d2c7392f50b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3709563-F6D4-4E8A-A13C-A51DF3C8AF79}|AppName, media enhance-enabler.exe-buttonutil.exe, , [08f882392d5ded49fb9ad3b6b2532cd4]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3781862-EE39-4789-BDE2-9F612556D8CF}|AppName, media enhance-enabler.exe-buttonutil.exe, , [db256d4ecfbbd2642e67f297b74e6799]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3CEFE96-5A80-40ED-BDD6-249DBF601EC3}|AppName, free ven-enabler.exe-codedownloader.exe, , [3fc17b4031590135c7cf60297d88eb15]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F40DBB27-5FCC-45C6-82FD-27D486EB5074}|AppName, free ven-enabler.exe-codedownloader.exe, , [7789f7c4e1a9f541ebab90f944c134cc]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4406EE2-EDFB-4EE7-8EC7-D2834F186A16}|AppName, free ven-enabler.exe-codedownloader.exe, , [fc042a91236743f38d096326966fcf31]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F499690F-C4FF-4BCF-8EE2-4728987621E1}|AppName, media enhance-enabler.exe-codedownloader.exe, , [79870fac95f5a294eea80f7ae5207d83]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F4D9EEA8-F163-483D-9B7A-62F3642C1967}|AppName, media enhance-enabler.exe-buttonutil.exe, , [eb155f5c345674c2880d7c0dd72e60a0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F587FE89-56CB-4A67-9893-103022A52B41}|AppName, media enhance-enabler.exe-codedownloader.exe, , [f10feccfbcce1f170e884742a164f907]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5BBB773-A171-4E0E-B57B-8C926FDFC931}|AppName, free ven-enabler.exe-buttonutil.exe, , [32cefebddeacdf572c69b8d1d72e43bd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5DAF8F8-D629-4FEC-9455-B420FE3F2D64}|AppName, free ven-enabler.exe-buttonutil.exe, , [3ac678434b3f3bfb44517910e81d35cb]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F6CAA303-2144-4400-A6DE-CB80A8A66655}|AppName, media enhance-enabler.exe-buttonutil.exe, , [5fa1e6d5800a1323c4d18009b451c63a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F748110F-2601-4FCE-9AB5-4AEB773BA8FF}|AppName, media enhance-enabler.exe-codedownloader.exe, , [c63a13a88dfd49ed4e48dbae74919769]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F777D656-2C7F-4E94-B858-BF5A24AA1C2A}|AppName, free ven-enabler.exe-buttonutil.exe, , [fc048536a6e486b0cfc64f3a5ea78080]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7D55939-840D-4037-BDEE-4BD5B37F9EDB}|AppName, free ven-enabler.exe-buttonutil.exe, , [e21ee4d7d8b22313148158318a7be11f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F83EC44C-AE1F-4144-9A83-65B57572D467}|AppName, media enhance-enabler.exe-buttonutil.exe, , [34cc4f6c9ded05312f66fd8c32d38080]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8829984-DA24-4845-B5D6-50192E5E12AC}|AppName, free ven-enabler.exe-codedownloader.exe, , [7b8569523f4be452197dc3c6bb4ace32]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8980B82-267D-43DC-9360-DFC8CB42FDB1}|AppName, free ven-enabler.exe-codedownloader.exe, , [b44cc3f8bbcffe387a1c1a6f31d48779]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F89912FE-A0FB-4FD9-B38E-AAC66FE92243}|AppName, media enhance-enabler.exe-buttonutil.exe, , [827e9b206c1ecf67eca9ff8a07fe867a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8B33E76-E5DC-410C-9130-4843EED07C95}|AppName, free ven-enabler.exe-buttonutil.exe, , [3cc463583f4bff37f4a1a4e50bfa21df]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F925B7F1-1AFB-479D-8472-5C52E761474E}|AppName, media enhance-enabler.exe-buttonutil.exe, , [5aa6566505859b9b5540533609fc5fa1]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F96A006A-3108-4B95-BDF8-4C17365AB365}|AppName, media enhance-enabler.exe-codedownloader.exe, , [808012a91d6dbf77f1a51d6c43c2916f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FAF92DEB-C923-4116-97D8-B77F8F51131D}|AppName, media enhance-enabler.exe-codedownloader.exe, , [916f615ab0da05313f5796f354b1669a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB99FD43-A9AD-4E8E-85D7-E3DF172ECACA}|AppName, free ven-enabler.exe-codedownloader.exe, , [23ddb8036c1e76c016807c0d2fd620e0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FCEC4329-1CB5-4F3B-80DE-A2C79BF4AB75}|AppName, media enhance-enabler.exe-codedownloader.exe, , [2cd46b50c6c4cc6af3a3692012f3ec14]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FDB8FF23-7685-4BF8-A56A-2FD93458608A}|AppName, media enhance-enabler.exe-buttonutil.exe, , [e9172b90b9d13402b6dfbfcaf01522de]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FE61F89E-58BD-49B0-88A5-4FD72D27AF1E}|AppName, free ven-enabler.exe-codedownloader.exe, , [768a2c8f3b4f5dd9a8eea3e67095bb45]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FEFD5FAE-405D-46F8-B549-A374782DF1C3}|AppName, free ven-enabler.exe-codedownloader.exe, , [9f61ceed315947ef6f275e2b7e871de3]
PUP.BProtector, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=387D7C4FB5D24855&affID=119357&tsp=4983, , [7f814a71a5e511251d2a77de38cde31d]
PUP.BProtector, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {FE388172-4AE5-4838-BE63-14794AD20150}, , [6e92229934561323b3959bba679e6f91]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}|URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbH0,&q={searchTerms}, , [e11f18a3cac0a1951ff68ef7ca3ba45c]
PUP.Optional.Trovi.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|URL, hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M6780AAF6-AC7D-4269-8C43-9651A4F01F5E&SearchSource=58&CUI=&UM=8&UP=SPA57F1156-728B-472C-8FC8-14F0DE2BFCCE&q={searchTerms}&SSPV=, , [22de83386d1d86b0d1e0c0c251b415eb]
PUP.Optional.Conduit.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|SuggestionsURL_JSON, hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}, , [e917bb00d7b337ff0889ba39788bd52b]
PUP.Optional.Trovi.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}|DisplayName, Trovi, , [758b75464c3ea1952c85cfb3e61fb34d]
PUP.Optional.BestOffers.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|speedtest4354@BestOffers, C:\Users\Suffian\AppData\Roaming\Mozilla\Extensions\speedtest4354@BestOffers, , [5fa14f6ca2e855e1d1688f6bf60d718f]
PUP.Optional.BlockAndSurf.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{99B4F990-D204-37B8-C801-85D7530020EC}, C:\Program Files (x86)\di1BlockAndSurf\175.xpi, , [36ca1aa1a5e54fe7c9f7800239ccf010]
PUP.Optional.OptimizerPro.A, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\OPTIMIZER PRO|AdsBuyNowURL, hxxp://www.safeshopgate.com/r?s=121000713&g=01A26AB7-CBAC-7A68-A368-EDE6EAFF0374, , [25db2497fd8d83b361a096f60df82fd1]
Registrierungsdaten: 3
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[6b95edcef892e056663a053d42c42bd5]
PUP.Optional.SnapDo.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}),,[7789803b84068fa7f893e15609fdd62a]
PUP.Optional.StartPage, HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=387D7C4FB5D24855&affID=119357&tsp=4983, Gut: (www.google.com), Schlecht: (hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=387D7C4FB5D24855&affID=119357&tsp=4983),,[1de3b902c0ca4de9fd3b45fd9a6cb64a]
Ordner: 167
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Configs, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Resources, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.MultiPlug.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphojmgkbcmdjpaepolkjeienkacpjpi\247, , [04fc8b30cdbded4904f15c27c540be42],
PUP.Optional.MultiPlug.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphojmgkbcmdjpaepolkjeienkacpjpi, , [04fc8b30cdbded4904f15c27c540be42],
PUP.Optional.SoftCoup.A, C:\Program Files (x86)\SOftCoup, , [e02011aa7e0c3006e7e54143fc09ff01],
PUP.Optional.OptimizerPro.A, C:\Users\Suffian\Documents\Optimizer Pro, , [3ac619a2fa90be78827da2e964a1748c],
PUP.Optional.DealPly.A, C:\ProgramData\DealPlyLive, , [bb451aa16e1c2412145eb10b9271b34d],
PUP.Optional.DealPly.A, C:\ProgramData\DealPlyLive\Update, , [bb451aa16e1c2412145eb10b9271b34d],
PUP.Optional.DealPly.A, C:\ProgramData\DealPlyLive\Update\Log, , [bb451aa16e1c2412145eb10b9271b34d],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Roaming\Dealply, , [7e825e5dccbe2d09c5ad3d7ff211916f],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Roaming\Dealply\UpdateProc, , [7e825e5dccbe2d09c5ad3d7ff211916f],
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPlyLive, , [7f8105b6a3e772c4a7cca517887bcd33],
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPlyLive\CrashReports, , [7f8105b6a3e772c4a7cca517887bcd33],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\ar, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\Configs, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\de, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\es, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\fr, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\he, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\it, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\nl, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\pt, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\ru, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\tr, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\Configs, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Configs, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Profiles, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\RollBack, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\10.215.63.15249, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\11.49.63.16848, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Local\DealPlyLive, , [5ca47d3e7c0e60d62b83fbc1ff047f81],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Local\DealPlyLive\CrashReports, , [5ca47d3e7c0e60d62b83fbc1ff047f81],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\Main, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\Main\bin, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\Main\Logs, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\Main\rep, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\SearchProtect, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\SearchProtect\bin, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\SearchProtect\rep, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\bin, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\bubble, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\libs, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protection, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protectionDS, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\settings, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\uninstall, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\rep, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin, , [b24e2b90fd8df145739514ae14ef8b75],
|
|
15.06.2015, 17:32
| #9 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Mbam.txt - Teil IV Code:
ATTFilter PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0, , [27d93784cac080b62892606244bf19e7],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gcjbopemebdnolilndkpjfmhakccapkh_0, , [3fc1eccf414938fe3f0bc6fd90736f91],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance, , [b64a4972ec9ee94d10c3854143c030d0],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\SearchProtect, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\SearchProtect\rep, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\SearchProtect\STG, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\UI, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\UI\rep, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SystemSpeedup, C:\Users\Suffian\AppData\Roaming\Systweak\ssd, , [69977942e6a440f6979b874947bc4db3],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x64, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x86, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.PCPerformer, C:\Program Files (x86)\PC Performer, , [f50b76451b6ff145be255a7a48bbf10f],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\LocalLow\Smartbar, , [a45c9d1e96f4a88efdac8758e1227e82],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Installer, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\PepperFlash, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\VisualElements, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa, , [23dd1ba094f64ee8cb2c2ebad92af907],
Dateien: 1214
PUP.Optional.Systweak, C:\Users\Suffian\AppData\Roaming\Systweak\ssd\SSDPTstub.exe, , [8b757942dbaf979fd749b0750101db25],
PUP.Optional.Softonic.A, C:\Users\Suffian\Downloads\Softonic_downloader_mozilla-firefox.exe, , [956ba615d0ba86b0d17270e81ce522de],
PUP.Optional.Clara.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\bobrowser.exe, , [c937794296f45dd92aa0f985f412ea16],
PUP.Optional.Clara.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\chrome_elf.dll, , [22de4675c7c31d1910ba205e31d5f30d],
PUP.Optional.Clara.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\old_chrome.exe, , [2ed2a01ba0eaa4920ac0abd3689eb64a],
PUP.Optional.SmartBar, C:\Users\Suffian\AppData\Local\LPT\LPTInstaller.msi, , [1fe1c4f77a1067cf8ad3213eca36b14f],
PUP.Optional.SmartBar, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyRemover.exe, , [ec14605b6624f1450657baa555ab39c7],
PUP.Optional.VeriStaff, C:\Users\Suffian\AppData\Local\LPT\srptm.exe, , [649c9d1e3357ed494d14ff601ae6a45c],
PUP.Optional.SnapDo.A, C:\Windows\Installer\1c826.msi, , [35cb605be7a3300623eee0db837e5da3],
PUP.Optional.Trovi.A, C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\searchplugins\trovi.xml, , [1fe1b902731765d1ea52698ec63d659b],
PUP.Optional.WebInstr.A, C:\Windows\System32\drivers\Msft_Kernel_webinstr_01009.Wdf, , [9a66c8f390fad66098dd7a87c24248b8],
PUP.Optional.BoBrowser.A, C:\Windows\System32\Tasks\Run_Bobby_Browser, , [a85835867c0e4aec97795ba7da2afe02],
PUP.Optional.AZLyrics.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage, , [3ac686353258cf67eba5b254d1337e82],
PUP.Optional.AZLyrics.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal, , [db25ceed7812d5615838dd2907fdec14],
PUP.Optional.Delta.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www1.delta-search.com_0.localstorage, , [16ea09b23951eb4b212c65ae0103b947],
PUP.Optional.Delta.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www1.delta-search.com_0.localstorage-journal, , [cb35bcff5436b48275d836dd20e49e62],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx, , [ee12ba019ceeee480475b0655da77b85],
PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\ASP, , [03fdc6f5b9d179bd95bb36e2ba4aab55],
PUP.Optional.Boost.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage, , [04fc3784aedc221422cd83998a7aac54],
PUP.Optional.Boost.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage-journal, , [54ac1c9fe9a1ce68e807fd1f0cf8738d],
PUP.Optional.BrowserDefender.A, C:\Windows\System32\Tasks\BrowserDefendert, , [eb15b4077f0b2511d98fe53cd82c6a96],
PUP.Optional.BitGuard.A, C:\Windows\System32\Tasks\BitGuard, , [09f7eccf4b3ff0460a6791902bd9e020],
PUP.Optional.BetterDeals.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage, , [2fd13c7f7c0e95a137eda2848c78847c],
PUP.Optional.BetterDeals.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.betterdeals00.betterdeals.co_0.localstorage-journal, , [2fd14a711b6f9f97121256d0887c44bc],
PUP.Optional.SelectNGo.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage, , [c7397843296160d6b917240322e2fa06],
PUP.Optional.SelectNGo.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, , [f20e0dae345687afb41ce14646be51af],
PUP.Optional.LiveLyrics.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage, , [c43c00bb7c0e3cfac02055d340c49967],
PUP.Optional.LiveLyrics.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.livelyrics00.live-lyrics.com_0.localstorage-journal, , [bc445b606624c96d13cdc66209fb58a8],
PUP.Optional.ShoppingGate.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage, , [4fb13685acde5bdb171fda503fc5e61a],
PUP.Optional.ShoppingGate.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_inst.shoppingate.info_0.localstorage-journal, , [d0307d3e03879c9aea4cbe6cf212dd23],
PUP.Optional.LiveLyrics.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage, , [a15f7249dab0191d60238f9bc143f808],
PUP.Optional.LiveLyrics.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.livelyrics00.live-lyrics.com_0.localstorage-journal, , [bd43befdfe8cce6895eebb6f0103f60a],
PUP.Optional.V9.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage, , [926e5a61afdb2511621c1f0c7f855da3],
PUP.Optional.V9.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.v9.com_0.localstorage-journal, , [9a6600bb1c6e65d1522c3fecb15315eb],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gcjbopemebdnolilndkpjfmhakccapkh_0.localstorage, , [b050e6d5e8a27cbae66b1e1428dc34cc],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gcjbopemebdnolilndkpjfmhakccapkh_0.localstorage-journal, , [659bc7f4e3a7d561ba977cb645bff60a],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0.localstorage, , [1ee2eccf45450036d43b55de11f3ff01],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0.localstorage-journal, , [3cc4c1fa2763ea4c947b8da6ab5946ba],
PUP.Optional.WebSearch.A, C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\searchplugins\Web Search.xml, , [cc3418a31773d462da8b31050df723dd],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\PublisherSettings.xml, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\FiddlerCore.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\HtmlAgilityPack.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\linmsl.exe, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\lrrot.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\NewConfig.txt, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Newtonsoft.Json.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Common.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Communication.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Communication.NamedPipe.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyService.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Personalization.Common.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\sppsm.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\spusm.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srbs.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srbu.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\sreu.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srpdm.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srprl.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srpt.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srptc.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srptm.exe.config, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\srut.dll, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\UserSettings.xml, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\XMLOperations.xml, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Configs\BrowserSettings.xml, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Configs\LPTMapping.xml, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Configs\Timers.xml, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.Linkury.A, C:\Users\Suffian\AppData\Local\LPT\Resources\LPT.xml, , [ef118b30414944f230fee951f70d1fe1],
PUP.Optional.BProtector.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data, , [847c318a602abe78e9a0283048bdd22e],
PUP.Optional.BrowserDefender.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage, , [e41c6754206a75c1eaa32f29699c837d],
PUP.Optional.SearchProtect, C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, , [ba464b70c1c9cd69f011c6b2b74ea55b],
PUP.Optional.MultiPlug.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphojmgkbcmdjpaepolkjeienkacpjpi\247\lsdb.js, , [04fc8b30cdbded4904f15c27c540be42],
PUP.Optional.MultiPlug.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphojmgkbcmdjpaepolkjeienkacpjpi\247\background.html, , [04fc8b30cdbded4904f15c27c540be42],
PUP.Optional.MultiPlug.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphojmgkbcmdjpaepolkjeienkacpjpi\247\content.js, , [04fc8b30cdbded4904f15c27c540be42],
PUP.Optional.MultiPlug.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lphojmgkbcmdjpaepolkjeienkacpjpi\247\manifest.json, , [04fc8b30cdbded4904f15c27c540be42],
PUP.Optional.SoftCoup.A, C:\Program Files (x86)\SOftCoup\BlmYTwt7JfpbL0.tlb, , [e02011aa7e0c3006e7e54143fc09ff01],
PUP.Optional.SoftCoup.A, C:\Program Files (x86)\SOftCoup\BlmYTwt7JfpbL0.dat, , [e02011aa7e0c3006e7e54143fc09ff01],
PUP.Optional.OptimizerPro.A, C:\Users\Suffian\Documents\Optimizer Pro\CookiesException.txt, , [3ac619a2fa90be78827da2e964a1748c],
PUP.Optional.SearchProtect, C:\Windows\System32\drivers\SPPD.sys, , [dd23d8e39bef6cca6a891efc5ea6f10f],
PUP.Optional.AddLyrics, C:\Windows\System32\drivers\webinstr.sys, , [37c92a915e2c23137b2a24eeed1702fe],
PUP.Optional.DealPly.A, C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log, , [bb451aa16e1c2412145eb10b9271b34d],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Roaming\Dealply\UpdateProc\config.dat, , [7e825e5dccbe2d09c5ad3d7ff211916f],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Roaming\Dealply\UpdateProc\info.dat, , [7e825e5dccbe2d09c5ad3d7ff211916f],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Roaming\Dealply\UpdateProc\STTL.DAT, , [7e825e5dccbe2d09c5ad3d7ff211916f],
PUP.Optional.DealPly.A, C:\Users\Suffian\AppData\Roaming\Dealply\UpdateProc\TTL.DAT, , [7e825e5dccbe2d09c5ad3d7ff211916f],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.html, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\bg.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\manifest.json, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.htm, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\options.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.html, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\popup.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.html, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\redirect.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS\border.css, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\down.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fb.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\fblike.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\gmail.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\google.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\googleplus.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\hide-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\left.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\maximize-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\mgsplusvideo.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\minimize-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\pinit.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\right.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\searchBox.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\show-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\twitter.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\up.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\alxbl.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\BackPageRemove.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\defaultBlockList.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\documentEvents.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\externalJS.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\FBImagePreview.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\filters.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\generalBackButtonDetection.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\InternalJS.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\jquery-1.9.0.min.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\PluginWrapper.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\publisherDefinitions.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\ta.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\tabReload.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\TopFrameJS.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\trans.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper128.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper16.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages\ShoppingHelper48.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\ar\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\Configs\QueryParameters.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\Configs\XmlSideBySideProtocol.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\es\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\fr\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\he\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome.manifest, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\install.rdf, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\BackPageRemove.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\externalJS.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FBImagePreview.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.css, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\FirefoxExtensionMain.xul, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\InternalJS.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\jquery-1.5.1.min.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\publisherDefinitions.js, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\down.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fb.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\fblike.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\gmail.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\googleplus.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\hide-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\left.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\maximize-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\mgsplusvideo.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\minimize-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\pinit.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\right.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\searchBox.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\show-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\twitter.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up-3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\up.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper128.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper16.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\ShoppingHelper_small.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\ISmartbarFireFoxRemotePlugin.xpt, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_28.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_29.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\it\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\pt\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\ru\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Application\tr\Smartbar.Resources.LanguageSettings.resources.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\Configs\UserInfo.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\07a9a58b-c653-4285-a870-1fa70cb6c00cPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABE.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827Ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\23E3FEB8-E6FF-4475-811A-805773D02D08press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\225323D0-97BB-46E4-85E1-15EA27174BF4press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\30657846-199A-4D0D-984D-BE588084F1F6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\328F7722-52E8-46A6-9197-B2F27C5142C7press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\39028511-3F15-4442-9188-DDC86BE1BBD0press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
|
|
15.06.2015, 17:35
| #10 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Mbam.txt - Teil V Code:
ATTFilter PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5252af60-ef03-41a8-babe-415dba235478Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\536b9063-fc09-4e82-8769-73c77317aae6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307f.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\85CF6427-8441-427A-859A-7A3C72288481press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\87442BEF-FD31-405C-A807-650CB7CC8886press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6eba.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8f.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367D.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C438F0F0-525A-4942-8307-6B71E596367Dpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2B.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\B81443D4-15F7-4B97-9DC8-3645A012C817press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D5113B95-781C-4737-A26F-3ED3A2CB876Fpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cd.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E458493F-867F-4712-A3AF-D9664ED47C19press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212E.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\E8584703-6CA5-4351-82CC-09E40938A066press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29B.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\icons\FF927FFB-35DC-43A3-A502-690B99FCC056press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\00659FA4-2CAD-45fc-A8A0-DB7862840BA9press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00c.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\07a9a58b-c653-4285-a870-1fa70cb6c00cpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Ahover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7Apress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3D.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0AE6BC52-0A54-4F53-9848-1FC2D4CE3D3DPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0E29BC94-7C9B-4A23-B682-81D0D1A806E1press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABE.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0FA6F971-16AA-4921-A39F-543C9839CABEpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\101FF2F5-9F51-405F-ACBB-D4A5F3601679press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE081313press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0A2DE7DB-ADE9-44FC-BC66-CF5604F9BF7A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\0DB19630-EB33-4B18-8357-78FC2687C788press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BChover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE08E613press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\139D15A7-C5E1-4C5E-ABF2-484DBE131313press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1A039A19-BD34-4760-8DE0-E9A8E8AA8827press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1A19CD12-F9A2-44A6-8F44-F3A95E0081A0press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\1FFDDB6E-8EB3-4CE0-9C2B-44910A3C5975press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BC.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2141A104-423C-43EF-A27A-CA0DADB7B9BCpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\225323D0-97BB-46E4-85E1-15EA27174BF4press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\23E3FEB8-E6FF-4475-811A-805773D02D08press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\26E2804B-65B5-47E1-A457-DAA75A2B1370press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\28E2C7BC-F857-44D5-A42F-7DD66FAB5EE6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2C37338C-837B-4846-B50B-E32D70C6A0F5press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02AHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\2F274118-68DC-4951-92D7-54CD244FE02APress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30657846-199A-4D0D-984D-BE588084F1F6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30DEBC8A-1CC6-4480-B3E5-C55E214043A8Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\30DFF8F0-BA79-4360-A3EA-51B6D006133CPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\328F7722-52E8-46A6-9197-B2F27C5142C7press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\372FF78B-6E4B-4B38-8E3F-797B4680FB98press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\389DA7E0-2A26-40AB-ACA4-9417E3B9EF13Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\39028511-3F15-4442-9188-DDC86BE1BBD0press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\39079B96-6DD1-42DE-89E6-76F79C8BB4E4Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0AHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3C610B86-19DE-4757-B46A-871C9C27FF0APress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3DF17372-78B0-4978-81A5-F9D1800C1775Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\412D5531-A3E1-40BB-B0C3-71E3C45A4E13press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\47BFF758-9581-4C68-9293-1181A70CDEE8Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\4a110a71-0e7e-4552-af6e-3ef88b2d6511Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BE.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5252af60-ef03-41a8-babe-415dba235478Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5558C4C6-18C1-4AF3-8F8D-0E2CF70D19C8press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089E.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\56591C8E-DA35-4A97-AC9B-5055E0F7089Epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Ahover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\56B19DA1-B4C5-4FCF-87D0-44E8B2C1002Apress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0E.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5D0A6D97-85F2-47E9-8F04-04A747B25A0Epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5F488FA5-C35B-44A9-A0E4-2C7B41035780press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1D.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\65B1A402-FC79-410D-AE1C-AF92E206AC1Dpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9F.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\65C4AD03-739F-4EC9-8FFD-457CC4241B9Fpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\684B31D0-535B-45EC-B3D1-15923CF5F790Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EChover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7ECpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\708d8b1e-6545-474a-9f07-d854acf8ad43press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\72CDFC8C-6F2D-4df8-9811-18C4D682C406press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FE.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\7CF3BACC-BF1C-4860-BB4E-F1A8440250FEpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\7fe83ae9-caef-41f0-aa99-d114c0ce3941press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307f.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FD.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\82F730CA-BA1C-4AFB-AC7C-FE4ED6B532FDPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\83B4B6FE-910D-412E-BED4-E3AFA6E5CA61press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\85CF6427-8441-427A-859A-7A3C72288481press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\87442BEF-FD31-405C-A807-650CB7CC8886press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\89582936-094C-4880-B87A-2AF16FC33B2Cpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8b3608b1-c2d5-4ad3-a382-33601228c6d3press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6A.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6AHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8D338D8F-3189-41AB-BCFF-2958D48AAA6APress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8F4131CE-D4F0-4F08-9102-78C397F3748CPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\48A9C19C-5A4C-4652-A6E7-1C17AEE45675Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\511B6809-2468-4A36-A6FC-FC24F05499BEPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\536b9063-fc09-4e82-8769-73c77317aae6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\5F1B269B-7C66-474F-A473-BE7FA51BE5B2hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\69C7DFE3-CDAE-4A22-B753-93ABF8BAE7EC.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\70F16DCA-C71C-4ECB-994C-D180F2BBF736Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\8217d395-9ebe-4ebb-807c-38cc911a307fPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\89582936-094c-4880-b87a-2af16fc31313.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6ebaPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\925D8F0E-E5EA-45F9-A657-0C14B68C4A61press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
|
|
15.06.2015, 17:39
| #11 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Mbam.txt - Teil VI Code:
ATTFilter PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\95ae73f0-9799-46fd-bceb-57efcb7f0537press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBE.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\99938D89-FF78-49C8-B92B-5AB4C8DFA2D1press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A1D51ECC-DBD7-4C7E-9A75-364B8E2F1D8Cpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A1F75F5D-1D24-4F7A-9ABC-BDA55E332E67press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A46C5E77-16B5-42A0-8761-C6F861D22308Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A89DA5A2-D390-47F4-84EF-6044EC8AC368press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8f.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCB.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B1BEF453-913F-4EC4-B057-A2BB21C09DCBpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55F.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B81443D4-15F7-4B97-9DC8-3645A012C817press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\bbf677d4-d0bc-4a59-be4a-6a6cfd3c6c28press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066B.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BC303DD4-37E7-4242-8DDD-8DEE2171066Bpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239ab.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\bc8dcde3-3fd0-4f9b-af5d-15c20f3239abpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1.PNG, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1HOVER.PNG, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BE3608B1-C2D5-4AD3-A382-45635338C6D1PRESS.PNG, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cf.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\c1546a00-e42d-4ce7-aac5-5353a895f3cfpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EAB.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C41AD485-FE91-4EFE-A613-66CB2BA96EABPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367D.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C438F0F0-525A-4942-8307-6B71E596367Dpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2B.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C48E3725-71FB-4824-969A-C6D428C18A2Bpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CCF42F56-0405-4697-A513-AA01DEE5DF02press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\90165d32-a3ef-438c-8625-be9b538b6eba.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\929407CC-7E48-47E0-A9F9-A4A167AC24D1hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\95D9E2EA-40AD-40B8-95D0-58209F584BBEPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\A75C6A50-13B0-4704-AA87-8DD113E31310hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\a94e6710-6021-4cdc-82de-1c001238bd8fPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\B1FE90EC-CEDA-4467-86CE-6CD7F1D3D55Fpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\BCE4103A-6273-4E49-8B43-2BDEDA1C91B0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\C0AC006A-9C65-42F9-AE11-D675DCCC6840press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CCEE5A80-8C88-4BB1-89BF-4A7EFF93E452.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CFEFCFCB-4871-46CD-86F7-14C1F17A7FF6press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D13971C4-4DA8-4C4B-87F6-17E97BFE7448press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D2B0680C-17C4-492D-85D7-D4CA3E724D50press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D469E1BA-B745-45B3-B7EE-378E000E74C8Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876F.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35c1Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\d65acfc2-6ab9-4b66-84fc-ecc7813e35d0Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D8043E67-EBD0-4ABD-A5A4-63CF4DADFC85press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\DBE2517B-67B8-4D8B-A7CC-B66F8FE52D82press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4C.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Chover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\DCF8B81C-11B5-4B12-A6E5-F74F09BBDD4Cpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cd.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e2870479-a572-412b-8a8f-5604d19b55cdpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12e.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e357f164-c5d8-4257-aab2-fe0cad41c12epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E458493F-867F-4712-A3AF-D9664ED47C19press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212E.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Ehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E52BEFE7-6535-439c-B168-A3B105E4212Epress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E6EE3C0D-1AF6-4A1E-AD63-1AFD7CB84583press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E8584703-6CA5-4351-82CC-09E40938A066press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580dehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580depress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E9FFB47F-2B3F-430E-8F8D-0B640D6A9564Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29B.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EC116BC4-0583-4E07-908A-9D2AD3647177Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BC.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EDDB2889-2088-4070-9F17-E71A95D7A1BCPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aef.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\f41901a8-2a78-4794-b455-d53a24b37aefPress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F5297DBC-3B3B-4744-A54D-308EAD98D223press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BD.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F84A3FBA-7CF5-4F44-A080-C26C04D0E3BDpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EC.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6ECpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F9B1CE4C-4CE6-4093-948F-F8FD6A8F48A3press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\FA3DE5E1-19AC-42FA-8E77-C25C60E60EC7press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\D5113B95-781C-4737-A26F-3ED3A2CB876FHover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\E3345571-EEF9-4041-8C24-F7F5A9331C23hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e3c610dc-deed-47cd-acc0-493d71556c16Press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\e8967c62-9ea0-4fde-9832-2c10f1d580de.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\EA99E20A-FBBA-4197-954B-E2013280A29Bhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\f7fd4890-7f89-4c73-8ff2-52105657cbb6.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\F9218572-58F0-4FB9-B0C5-4EA74848D6EChover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\3f9ac55c-6db5-4c01-9d34-a92da2347be6.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\CE1500FE-6F59-421C-8005-3E137AC051A2press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.ico, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7b.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bhover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\fac5189f-f2c7-4eed-bae8-011eca170d7bpress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056hover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\FF927FFB-35DC-43A3-A502-690B99FCC056press.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\youtube.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\youtubehover.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\iconsWide\youtubepress.png, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.DMP.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.MessengerPlugin.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.NotepadPlugin.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.ScreenCapturePlugin.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WeatherPlugin.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins\Smartbar.Personalization.ServicesPlugins.WordPlugin.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Common\ServicesPlugins\spup.dll, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Configs\IconsSettings.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Configs\LocalMethods.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Configs\ProfileManager.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Configs\PublisherSettings.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Configs\UserSettings.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\DistributionFiles\Profiles\3C6BEA24-8B0E-4EDE-82EC-536F56750CD5.xml, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\10.215.63.15249\user.config, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\11.49.63.16848\user.config, , [ee12a3180684e551e0a3f1cbac57d42c],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\EULA.txt, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\Main\rep\SystemRepository.dat, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\settings.html, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\style.css, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\bubble\bubble.css, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\bubble\bubble.html, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\bubble\bubble.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\bubble\defaults.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\Apply-default.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\Apply-onclick.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\Apply-Rollover.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\bg-with-logo.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\bg.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\bgNotif.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\bgSettings.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\bgUninstall.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\btnBlue.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\btnClose.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\btnSilver.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\checkbox.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\checkbox_checked.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\checkbox_def.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\close-win-def.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\close-win-over-click.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\gray-bg.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\hez-def.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\hez-selected.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\hez.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\icon-win.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\info-icon.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\menu-rollover.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\menu-selected.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\radio-button-def.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\radio-button-selected.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\radio-button.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\radio-button2.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\Settings-icon.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\text-field.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\v.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\Images\x.png, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\libs\defaults.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\libs\dialogUtils.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\libs\jquery.1.7.1.min.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\libs\json2.min.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\libs\main.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\libs\SPDialogAPI.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protection\defaults.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protection\protection.css, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protection\protection.html, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protection\protection.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protectionDS\defaults.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protectionDS\protectionDS.css, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protectionDS\protectionDS.html, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\protectionDS\protectionDS.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\settings\defaults.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\settings\settings.css, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\settings\settings.html, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\settings\settings.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\uninstall\defaults.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\uninstall\uninstall.css, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\uninstall\uninstall.html, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.SearchProtect.A, C:\Program Files (x86)\SearchProtect200055\UI\dialogs\uninstall\uninstall.js, , [df216d4e45454de94e7e01c038cb60a0],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\background.html, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\index.html, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\jump.html, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\manifest.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\bookmarks.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\bookmarks\img\searchButton.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\classification.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\del.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\main.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\classification\img\skin\selected.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloud.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudApp.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\cloudWebsite.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\createWebsite.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\buttonBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\categoryBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\icons.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchButton.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\searchLeft.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\selected.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\cloud\img\skin\tabsBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\dialog\img\skin\headerBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\extensions.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\extensions\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\gameCenter.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\star_bg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\gameCenter\img\time.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\guide.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\guide\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\lastVisited.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\lastVisited\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\notice.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\notice\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\played.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\played\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\search.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\google-new-logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\search\img\searchicon2.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\setup.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\dialBoxStyle.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\setup\img\skin\icons.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oBookmarks.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oDownloads.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oExtensions.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oHistory.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\shortcuts\img\oNewtab.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\cloudWallpaper.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\skins.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\categoryBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\delete.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\download.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\icons.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\skins\img\skin\loading.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\weather.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\css\style.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\logo.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\line.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\locationIcon.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\searchButton.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\app\weather\img\skin\weather.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\css\all.css, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\game.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_128.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_16.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\icon_48.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\NEW.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\shopping.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\weather.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\webstore.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\default.jpg, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\iconsprite.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\idialog_s.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\ios5_button.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\left.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading.gif, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\loading2.gif, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\qBoxBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_bg0.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_left0.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\q_right0.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\right.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\selected.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\img\skin\titleBg.png, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\all.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\background.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\ga.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jq.mobi.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\jump.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\pop.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\redirect.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\js\xagainit.js, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\de\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\en\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\es_419\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\fr\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\it\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ja\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pl\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_BR\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\pt_PT\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\ru\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\tr\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\vi\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_CN\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_locales\zh_TW\messages.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.QuickStart.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.5.8_0\_metadata\verified_contents.json, , [b24e2b90fd8df145739514ae14ef8b75],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0\2, , [27d93784cac080b62892606244bf19e7],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lekgiimbfodefdaoofhlckefjbgpeilo_0\2-journal, , [27d93784cac080b62892606244bf19e7],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\000201.log, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\000202.ldb, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\CURRENT, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\LOCK, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\LOG, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\LOG.old, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lekgiimbfodefdaoofhlckefjbgpeilo\MANIFEST-000199, , [a65ab2092664082e4581fec410f3c33d],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gcjbopemebdnolilndkpjfmhakccapkh_0\1, , [3fc1eccf414938fe3f0bc6fd90736f91],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gcjbopemebdnolilndkpjfmhakccapkh_0\1-journal, , [3fc1eccf414938fe3f0bc6fd90736f91],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh\000201.log, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh\000202.ldb, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh\CURRENT, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh\LOCK, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh\LOG, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh\LOG.old, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcjbopemebdnolilndkpjfmhakccapkh\MANIFEST-000199, , [97696e4dfb8fd95df55fa41fbb4803fd],
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance\44150.crx, , [b64a4972ec9ee94d10c3854143c030d0],
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance\44150.xpi, , [b64a4972ec9ee94d10c3854143c030d0],
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance\background.html, , [b64a4972ec9ee94d10c3854143c030d0],
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance\Installer.log, , [b64a4972ec9ee94d10c3854143c030d0],
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance\media enhance.ico, , [b64a4972ec9ee94d10c3854143c030d0],
PUP.Optional.MediaEnhance.A, C:\Program Files (x86)\media enhance\Uninstall.exe, , [b64a4972ec9ee94d10c3854143c030d0],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\SearchProtect\UI\rep\UIRepository.dat, , [c23eead15b2f44f2ac52ab2219ea738d],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\175.crx, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\175.dat, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\a.db, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\b.db, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\r6BlockAndSurfzc175.bin, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\Sqlite3.dll, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x64\WdfCoInstaller01009.dll, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x64\webinstr.inf, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x64\webinstr.sys, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x86\WdfCoInstaller01009.dll, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x86\webinstr.inf, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\di1BlockAndSurf\x86\webinstr.sys, , [7b85fdbe63276cca77d6844cf1123fc1],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\LocalLow\Smartbar\smartbar_state.config, , [a45c9d1e96f4a88efdac8758e1227e82],
PUP.Optional.SmartBar.A, C:\Users\Suffian\AppData\LocalLow\Smartbar\UserInfo.config, , [a45c9d1e96f4a88efdac8758e1227e82],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\debug.log, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\extension_list.json, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\master_preferences, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\VisualElementsManifest.xml, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Installer\setup.exe, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\hi.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\am.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ar.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\bg.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\bn.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ca.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\cs.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\da.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\de.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\el.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\en-GB.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\en-US.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\es-419.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\es.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\et.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\fa.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\fi.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\fil.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\fr.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\gu.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\he.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\hr.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\hu.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\id.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\it.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ja.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\kn.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ko.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\lt.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\lv.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ml.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\mr.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ms.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\nb.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\nl.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\pl.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\pt-BR.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\pt-PT.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ro.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ru.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\sk.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\sl.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\sr.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\sv.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\sw.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\ta.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\te.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\th.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\tr.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\uk.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\vi.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\zh-CN.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\Locales\zh-TW.pak, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\PepperFlash\manifest.json, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\PepperFlash\pepflashplayer.dll, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\VisualElements\logo.png, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\VisualElements\smalllogo.png, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.BoBrowser.A, C:\Users\Suffian\AppData\Local\BoBrowser\Application\39.0.2132.2\VisualElements\splash-620x300.png, , [0ff17b408703aa8cdd3fd21336cd6799],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\bahvxfk, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\mkfvxfk, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\pvpqbjobmlpfqlovvawq, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\qokvxfk, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\rfobmlpfqlovvawq, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\rpboobmlpfqlovvawq, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\stb.dat, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.SearchProtect.A, C:\Users\Suffian\AppData\Local\avayvaxvaa\ycfvxfk, , [23dd1ba094f64ee8cb2c2ebad92af907],
PUP.Optional.CrossRider.A, C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossrider.bic", "1459970c54d62f8b228972abb1bfd223");), ,[16eab506c1c96dc9a5b0ef943ec82ed2]
Physische Sektoren: 0
(Keine schädliche Elemente gefunden)
(end)
Code:
ATTFilter # AdwCleaner v4.206 - Bericht erstellt 15/06/2015 um 17:53:28
# Aktualisiert 01/06/2015 von Xplode
# Datenbank : 2015-06-14.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Suffian - SUFFIAN-TOSH
# Gestarted von : C:\Users\Suffian\Desktop\AdwCleaner_4.206(1).exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : 51cdb72
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
Ordner Gelöscht : C:\Program Files (x86)\PlurPush
Ordner Gelöscht : C:\Program Files (x86)\predm
Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro
Ordner Gelöscht : C:\Program Files (x86)\simplitec
Ordner Gelöscht : C:\Program Files (x86)\Uninstaller
Ordner Gelöscht : C:\Program Files (x86)\deoal2dealit
Ordner Gelöscht : C:\Program Files (x86)\DiscountLoccatoro
Ordner Gelöscht : C:\Program Files (x86)\ReAldeal
Ordner Gelöscht : C:\Program Files (x86)\surufkeepiott
Ordner Gelöscht : C:\Users\Suffian\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Suffian\AppData\Local\Tuguu_SL
Ordner Gelöscht : C:\Users\Suffian\AppData\Roaming\Activeris
Ordner Gelöscht : C:\Users\Suffian\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Suffian\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Suffian\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Suffian\AppData\Roaming\simplitec
Ordner Gelöscht : C:\Users\Suffian\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gelöscht : C:\Users\Suffian\Documents\Mobogenie
Datei Gelöscht : C:\END
Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
Datei Gelöscht : C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Suffian\daemonprocess.txt
Datei Gelöscht : C:\Users\Suffian\AppData\Local\AnyProtectScannerSetup.exe
Datei Gelöscht : C:\Users\Suffian\AppData\Roaming\aps.uninstall.scan.results
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_de.reimageplus.com_0.localstorage
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_de.reimageplus.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_firefox.de.softonicdownloads.com_0.localstorage
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_firefox.de.softonicdownloads.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.awesomehp.com_0.localstorage
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.awesomehp.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.babylon.com_0.localstorage
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.babylon.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tango.me_0.localstorage
Datei Gelöscht : C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tango.me_0.localstorage-journal
Datei Gelöscht : C:\Users\Suffian\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_de.reimageplus.com_0.localstorage
Datei Gelöscht : C:\Users\Suffian\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_de.reimageplus.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
Task Gelöscht : ASP
Task Gelöscht : BitGuard
Task Gelöscht : BrowserDefendert
Task Gelöscht : LaunchSignup
Task Gelöscht : Run_Bobby_Browser
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Suffian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iLivid.torrent
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TelevisionFanaticInstaller.Start
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TelevisionFanaticInstaller.Start.1
Schlüssel Gelöscht : HKCU\Software\58ed98dbc3de843
Schlüssel Gelöscht : HKLM\SOFTWARE\2a829f89-d4c2-1f7f-5b18-4b5ef9cff2ad
Schlüssel Gelöscht : HKLM\SOFTWARE\58ed98dbc3de843
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2FF49ED5-A3EF-410B-918E-97DECEB5996D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6EC77D09-02CB-4E1F-E3C4-FB141B2610B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422412250}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415550}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416650}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4084D718-3644-4504-B828-BB054729E39C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AEBE49B4-DCAE-5C99-81C9-12BABC42FDFB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444414450}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2FF49ED5-A3EF-410B-918E-97DECEB5996D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2FF49ED5-A3EF-410B-918E-97DECEB5996D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422412250}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415550}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416650}
Schlüssel Gelöscht : HKCU\Software\Boost
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\lyrixeeker
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Boost
Schlüssel Gelöscht : HKLM\SOFTWARE\IePlugin
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\simplitec
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\Clara
Schlüssel Gelöscht : HKLM\SOFTWARE\Taronja
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKLM\SOFTWARE\SPPDCOM
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Activeris AntiMalware_is1
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\awesomehp.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\delta-search.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mmotraffic.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\portaldosites.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\primeshare.tv
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\snapdo.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\softonic.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.awesomehp.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.portaldosites.com
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:51335;hxxps=127.0.0.1:51335
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17840
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
-\\ Mozilla Firefox v38.0.5 (x86 en-US)
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.a0c822a17a68f40669257d229458d21ca9c178d17dc614aafb2da1425ac7300accom44150.44150.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.c[...]
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.a0c822a17a68f40669257d229458d21ca9c178d17dc614aafb2da1425ac7300accom44150.44150.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.Visibility", false);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageCapacity", 3);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageCounter", 0);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageDay", 3);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageLastEvent", "1398941104033");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.backPageMinInterval", 15);
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.barcodeid", "128916");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.countryiso", "de");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.downloadprovider", "ry_6147_ch");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.fromautoupdate", "true");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.installationid", "55894063-cdc5-a379-5ce0-0b97d346bf27");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.installdate", "17/03/2014");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.keepAliveLastevent", "1399113895");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.lastExternalJsUpdate", "1403280705319");
[4ipxp9ve.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.publisher", "shoppinghelper");
-\\ Google Chrome v43.0.2357.124
[C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnHw3iqSbKSTqd7dSMlA8eJ7Myia45JQDO9EXWNrH8cum_Wi3DeZqeKcnRE8G3n_X3McPMZyeEO0FvPJTigtUizGrFWChTIi-Dd4bCJDjNNOXL8zzUYQc2IJzi0WHbvFiX1DHT7TaTQkxS9c_tl6zzCHYbHs,&q={searchTerms}
[C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M6780AAF6-AC7D-4269-8C43-9651A4F01F5E&SearchSource=58&CUI=&UM=8&UP=SPA57F1156-728B-472C-8FC8-14F0DE2BFCCE&q={searchTerms}&SSPV=
[C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma
[C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Homepage] : hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M6780AAF6-AC7D-4269-8C43-9651A4F01F5E&SearchSource=55&CUI=&UM=8&UP=SPA57F1156-728B-472C-8FC8-14F0DE2BFCCE&SSPV=
[C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Startup_URLs] : hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M6780AAF6-AC7D-4269-8C43-9651A4F01F5E&SearchSource=55&CUI=&UM=8&UP=SPA57F1156-728B-472C-8FC8-14F0DE2BFCCE&SSPV=
-\\ Opera v0.0.0.0
*************************
AdwCleaner[R0].txt - [18867 Bytes] - [15/06/2015 17:42:55]
AdwCleaner[S0].txt - [17935 Bytes] - [15/06/2015 17:53:28]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17995 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.9.7 (06.15.2015:1)
OS: Windows 7 Home Premium x64
Ran by Suffian on 15.06.2015 at 17:58:19,52
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully stopped: [Service] util plurpush
Failed to delete: [Service] util plurpush
~~~ Tasks
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update PlurPush
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Browser Good
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util PlurPush
~~~ Files
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_api.ciuvo.com_0.localstorage
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_api.ciuvo.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_click.dealshark.com_0.localstorage
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_click.dealshark.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_static.icmwebserv.com_0.localstorage
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_static.icmwebserv.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_www.superfish.com_0.localstorage
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxp_www.superfish.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxps_www.superfish.com_0.localstorage
Successfully deleted: [File] C:\Users\Suffian\appdata\local\google\chrome\user data\default\local storage\hxxps_www.superfish.com_0.localstorage-journal
~~~ Folders
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{096878AE-A608-42D8-AA43-530BB9073F13}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{161F93B6-D6C2-4470-A882-12351EDAF6A9}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{1D436BD0-2B90-4611-8A7C-49B865B39C0A}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{2CDD83CE-36FD-44F8-B1AD-430BDA63D9C9}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{45694C8F-581A-4CE7-835D-F2A33A6049EB}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{4CC366E0-C834-4CC5-AF76-889F18DD33F8}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{541EBC0B-98BF-414A-8407-A1790AA5258E}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{5BBB63F1-DDBF-4F65-A09C-1D2A0E93B731}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{6D2ACA0A-F8ED-4DFC-BC62-F8A1AF9AAE5D}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{6FDBD92D-97FB-4600-9749-79372B8E1846}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{74AA9C14-300A-4E87-B392-1AC52B736105}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{8D0DA780-5ACF-49F3-A226-197B945E683D}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{9CDEA72E-473C-4330-9D1F-AB157317DDF2}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{A3B13D51-4217-470C-B983-268270673710}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{B18AA312-389A-42E0-B9AE-8E75587ED6C7}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{BEAD1CD7-0C47-4118-ADDF-73A0B008876D}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{C4EC08B9-7FAE-4997-B59B-7DA6A3B5EA8F}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{CBDD7932-CFF2-4CC7-9469-703B3C1F6345}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{E0F9E294-6E48-406E-879D-2C0B1A4F3821}
Successfully deleted: [Empty Folder] C:\Users\Suffian\appdata\local\{E9C8A789-4F4C-4243-97C5-D64F56B15516}
~~~ FireFox
~~~ Chrome
[C:\Users\Suffian\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Suffian\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Suffian\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Suffian\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.06.2015 at 18:03:43,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
15.06.2015, 17:40
| #12 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Suffian (administrator) on SUFFIAN-TOSH on 15-06-2015 18:04:28
Running from C:\Users\Suffian\Desktop\PC Problem
Loaded Profiles: Suffian (Available Profiles: Suffian)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2120808 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566184 2010-09-28] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation)
HKLM\...\Run: [SmartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-10-19] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-05-30] (Toshiba Europe GmbH)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2967352 2012-11-06] (Synaptics Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM-x32\...\Run: [NBAgent] => c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248 2011-01-07] (Nero AG)
HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)
HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-10-06] (TOSHIBA Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-12-04] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-11-23] (Google Inc.)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-18\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk [2011-05-30]
ShortcutTarget: Toshiba Places Icon Utility.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Toshiba)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-05-30]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-05-30]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2013-08-02]
ShortcutTarget: Dropbox.lnk -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-12-04] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
ProxyServer: [.DEFAULT] => http=127.0.0.1:51335;https=127.0.0.1:51335
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/places?touch=4&cat=1
SearchScopes: HKLM -> {A311D5B2-E19C-42D8-9AEE-22F8F27397B7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-04] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-06-15] (Google Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-04] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-06-15] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-06-15] (Google Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-06-15] (Google Inc.)
Toolbar: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-06-15] (Google Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27] (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: https://www.google.com/?trackid=sp-006
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-04-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-03] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\searchplugins\google-avast.xml [2015-03-01]
FF Extension: Avira Browser Safety - C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\Extensions\abs@avira.com [2014-11-20]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-12-06]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-06-03]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: HP Smart Print - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-10-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-04]
FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi
FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-12-06]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR StartupUrls: Default -> "https://www.google.com/?trackid=sp-006"
CHR Profile: C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browser Safety) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-03-01]
CHR Extension: (Avast Online Security) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-01]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-04]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-04] (AVAST Software)
S2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
S2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [1811456 2010-08-27] (Realsil Microelectronics Inc.) [File not signed]
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-04] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-04] ()
S3 Impcd; C:\Windows\System32\DRIVERS\Impcd.sys [158976 2010-02-27] (Intel Corporation) [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-15] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1514568 2013-05-02] (Realtek Semiconductor Corporation )
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-15 18:03 - 2015-06-15 18:03 - 00005481 _____ C:\Users\Suffian\Desktop\JRT.txt
2015-06-15 17:58 - 2015-06-15 17:58 - 00000207 _____ C:\Windows\tweaking.com-regbackup-SUFFIAN-TOSH-Windows-7-Home-Premium-(64-bit).dat
2015-06-15 17:58 - 2015-06-15 17:58 - 00000000 ____D C:\RegBackup
2015-06-15 17:57 - 2015-06-15 17:57 - 00018156 _____ C:\Users\Suffian\Desktop\AdwCleaner[S0].txt
2015-06-15 17:30 - 2015-06-15 17:53 - 00000000 ____D C:\AdwCleaner
2015-06-15 17:29 - 2015-06-15 17:29 - 00495496 _____ C:\Users\Suffian\Desktop\mbam.txt
2015-06-15 15:51 - 2015-06-15 17:55 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-15 15:51 - 2015-06-15 15:51 - 00001109 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-06-15 15:51 - 2015-06-15 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-06-15 15:51 - 2015-06-15 15:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-15 15:51 - 2015-06-15 15:51 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-06-15 15:51 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-15 15:51 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-15 15:51 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-15 15:48 - 2015-06-15 15:47 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Suffian\Desktop\mbam-setup-2.1.6.1022.exe
2015-06-15 15:48 - 2015-06-15 15:47 - 02945429 _____ (Thisisu) C:\Users\Suffian\Desktop\JRT.exe
2015-06-15 15:48 - 2015-06-15 15:47 - 02231296 _____ C:\Users\Suffian\Desktop\AdwCleaner_4.206(1).exe
2015-06-15 06:37 - 2015-06-15 06:47 - 271063435 ____R C:\Users\Suffian\Desktop\Brothers & Stylez.mov
2015-06-15 06:27 - 2015-06-15 06:35 - 167648103 ____R C:\Users\Suffian\Desktop\Brothers & Stylez_Interviews.mov
2015-06-12 17:17 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-12 17:17 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-12 17:17 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-12 17:17 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-12 17:17 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-12 17:17 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-12 17:17 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-12 17:17 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-12 17:17 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-12 17:17 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-12 17:17 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-12 17:17 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-12 17:17 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-12 17:17 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-12 17:17 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-12 17:17 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-12 17:17 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-12 17:17 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-12 17:17 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-12 17:17 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-12 17:17 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-12 17:17 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-12 17:17 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-12 17:17 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-12 17:17 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-12 17:17 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-12 17:16 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-12 17:16 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-12 17:16 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-12 17:16 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-12 17:16 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-12 17:16 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-12 17:16 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-12 17:16 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-12 17:15 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-12 17:15 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-12 17:15 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-12 17:15 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-12 17:15 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-12 17:15 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-12 17:15 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-12 17:15 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-12 17:15 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-12 17:15 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-12 17:14 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-12 17:14 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-12 17:14 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-12 17:14 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-12 17:14 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-12 17:14 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-12 17:14 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-12 17:14 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-12 17:14 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-12 17:14 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-12 17:14 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-12 17:14 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-12 17:14 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-12 17:14 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-12 17:14 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-12 17:14 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-12 17:14 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-12 17:14 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-12 17:14 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-12 17:14 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-12 17:14 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-12 17:14 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-12 17:14 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-12 17:14 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-12 17:14 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-12 17:14 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-12 17:14 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-12 17:14 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-12 17:14 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-12 17:14 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-12 17:14 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-12 17:14 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-12 17:14 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-12 17:14 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-12 17:14 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-12 17:14 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-12 17:14 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-12 17:14 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-12 17:14 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-12 17:14 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-12 17:14 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-12 17:14 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-12 17:14 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-12 17:14 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-12 17:14 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-12 17:14 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-12 17:14 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-12 17:14 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-12 17:14 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-12 17:14 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-12 17:14 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-12 17:14 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-12 17:14 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-12 17:14 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-12 17:14 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-12 17:14 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-12 17:14 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-12 17:14 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-12 17:14 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-12 17:14 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-11 20:15 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-11 15:53 - 2015-06-11 15:53 - 00035503 _____ C:\ComboFix.txt
2015-06-11 15:38 - 2015-06-11 15:53 - 00000000 ____D C:\Qoobox
2015-06-11 15:38 - 2015-06-11 15:52 - 00000000 ____D C:\Windows\erdnt
2015-06-11 15:38 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-06-11 15:38 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-06-11 15:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-06-11 15:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-06-11 15:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-06-11 15:38 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-06-11 15:38 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-06-11 15:38 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-06-11 15:01 - 2015-06-11 15:01 - 00001271 _____ C:\Users\Suffian\Desktop\Revo Uninstaller.lnk
2015-06-11 15:01 - 2015-06-11 15:01 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-06-10 16:25 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 16:24 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 16:24 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 16:24 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 16:24 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 16:24 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 16:24 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 16:24 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 15:04 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-09 14:33 - 2015-06-15 18:04 - 00000000 ____D C:\FRST
2015-06-09 14:24 - 2015-06-15 18:04 - 00000000 ____D C:\Users\Suffian\Desktop\PC Problem
2015-06-09 14:24 - 2015-06-09 14:24 - 00000000 _____ C:\Users\Suffian\defogger_reenable
2015-06-03 17:03 - 2015-06-08 12:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-02 07:07 - 2015-06-02 07:13 - 00000000 ____D C:\Users\Suffian\Desktop\Crew Pics
2015-05-31 15:07 - 2015-05-31 15:10 - 00000000 ____D C:\Users\Suffian\Desktop\Kids Bergen Enkheim
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-15 18:04 - 2009-07-14 06:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-15 18:04 - 2009-07-14 06:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-15 17:57 - 2014-12-04 17:31 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-06-15 17:56 - 2013-08-02 11:06 - 00000000 ___RD C:\Users\Suffian\Dropbox
2015-06-15 17:56 - 2013-08-02 10:59 - 00000000 ____D C:\Users\Suffian\AppData\Roaming\Dropbox
2015-06-15 17:55 - 2013-10-10 12:08 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc.job
2015-06-15 17:55 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-15 17:55 - 2009-07-14 06:51 - 00178886 _____ C:\Windows\setupact.log
2015-06-15 17:54 - 2011-07-18 19:46 - 01317532 _____ C:\Windows\WindowsUpdate.log
2015-06-15 17:54 - 2010-11-21 05:47 - 00687222 _____ C:\Windows\PFRO.log
2015-06-15 17:53 - 2012-10-05 22:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-06-15 17:53 - 2011-09-08 10:48 - 00001006 _____ C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-06-15 17:53 - 2011-09-08 10:40 - 00000000 ____D C:\Users\Suffian
2015-06-15 17:46 - 2012-10-05 22:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-15 17:37 - 2013-12-04 16:51 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc
2015-06-15 17:37 - 2012-10-05 22:47 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-06-15 15:50 - 2010-11-21 08:50 - 00700134 _____ C:\Windows\system32\perfh007.dat
2015-06-15 15:50 - 2010-11-21 08:50 - 00149984 _____ C:\Windows\system32\perfc007.dat
2015-06-15 15:50 - 2009-07-14 07:13 - 01622236 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-14 00:27 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-13 12:08 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-13 12:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-12 19:50 - 2013-08-15 15:56 - 00000000 ____D C:\Users\Suffian\Desktop\Freestyle Beats
2015-06-12 16:52 - 2009-07-14 06:45 - 00396928 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 15:53 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-11 15:50 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-11 12:42 - 2015-04-16 20:50 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-11 12:42 - 2014-05-07 16:11 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 19:50 - 2013-08-15 14:50 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 19:49 - 2012-03-10 21:15 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-09 14:21 - 2014-04-30 15:26 - 00000000 ____D C:\Users\Suffian\Desktop\RdJKids
2015-06-08 12:03 - 2014-08-08 10:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-05 19:56 - 2013-08-27 18:42 - 00000000 ____D C:\Users\Suffian\Desktop\Bodylanguage
2015-06-02 07:15 - 2013-11-14 17:17 - 00000000 ____D C:\Users\Suffian\Desktop\Lg
2015-05-31 15:08 - 2014-12-10 17:51 - 00000000 ____D C:\Users\Suffian\Desktop\xmas show 2014 noch bearbeiten
2015-05-31 14:08 - 2015-04-28 19:04 - 00154002 _____ C:\Users\Suffian\Desktop\Freestyle Kids 2014 Welcome Party.MMM
2015-05-21 11:33 - 2011-09-08 11:15 - 00000000 ____D C:\Users\Suffian\AppData\Roaming\SoftGrid Client
2015-05-20 19:30 - 2014-01-10 14:43 - 00000000 ____D C:\Users\Suffian\Desktop\Welcome Partyshows
2015-05-20 19:04 - 2015-04-07 13:23 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-20 19:04 - 2015-04-07 13:23 - 00000000 ___SD C:\Windows\system32\GWX
==================== Files in the root of some directories =======
2013-12-19 13:50 - 2014-10-21 19:50 - 0000201 _____ () C:\Users\Suffian\AppData\Roaming\WB.CFG
2013-10-09 19:22 - 2013-10-09 19:22 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-03-10 21:50 - 2012-03-10 21:50 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
Some files in TEMP:
====================
C:\Users\Suffian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpd0l315.dll
C:\Users\Suffian\AppData\Local\Temp\Quarantine.exe
C:\Users\Suffian\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-02-21 13:20
==================== End of log ============================
|
|
16.06.2015, 15:24
| #13 |
| /// the machine /// TB-Ausbilder | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station ProblemESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.06.2015, 12:32
| #14 |
| | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Eset log Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7dd13af7a1a9334a80d18381ebeab99f
# end=init
# utc_time=2015-06-16 03:07:42
# local_time=2015-06-16 05:07:42 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 24356
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7dd13af7a1a9334a80d18381ebeab99f
# end=updated
# utc_time=2015-06-16 03:11:16
# local_time=2015-06-16 05:11:16 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=7dd13af7a1a9334a80d18381ebeab99f
# engine=24356
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-06-16 04:25:54
# local_time=2015-06-16 06:25:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 16759598 16768519 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 5666 186101804 0 0
# scanned=150564
# found=13
# cleaned=0
# scan_time=4477
sh=5524BAAC03BF1A3485D08A96752801F56D36434C ft=1 fh=9e044c13dcecd7b5 vn="Win32/VOPackage.BC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Suffian\AppData\Local\AnyProtectScannerSetup.exe.vir"
sh=08A5CE348D319335A92076C65C1091277AFED1B9 ft=1 fh=158b9db86261fb7d vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
sh=5CD6466678506B89A301119B1086288B135D5706 ft=1 fh=3dbdb70d701afcbb vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll.vir"
sh=CF3242F8773F62F5185F27C31FD5001AB031CE64 ft=1 fh=4962337425770dc9 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe.vir"
sh=2D99221B3BB2BF4723704A0916A8E0C3DAC0858C ft=1 fh=a2f7facb6822587c vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\TelevisionFanaticEI\Installr\1.bin\64EIPlug.dll.vir"
sh=E6DE5B3B902C79BAC35C83EA198C05B9DCBB2886 ft=1 fh=2b9d20083ea87627 vn="Win32/Systweak.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8W1DGGFQ\rcpsetup_17970[1].exe"
sh=0306A4096B7015232FF0E2EEE7D441D8A98F61B3 ft=1 fh=a8367fa835d7a09e vn="Variante von Win32/Adware.AddLyrics.DN Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\BlockAndSurf_2222-5510[1].exe"
sh=7D37CBCB1B83EFDD866571BA077FF38BB1A64AB6 ft=1 fh=d1c89b6a620fac4f vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\sp-standalone-setup[1].exe"
sh=BC1E60EB67575CE960102E29A2D57CE4F0E4DD22 ft=1 fh=d0a0c61038592058 vn="Win32/Wajam.K evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\WIE_2.18.1.12[1].exe"
sh=DB865B218F83003B6F4DDB9F5534C6BD4485D945 ft=1 fh=b8b4f211bbb768c8 vn="Variante von Win32/Adware.ConvertAd.QR Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JXULO4E3\policyname[1].exe"
sh=AF023CD20C85601E6874CB788BCAA49AE325A40D ft=1 fh=da3b4c00ec0bc47d vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\Cloud_Backup_Setup[1].exe"
sh=CC0BEA9200A6DB6A9B7CD4C4ABF59F7B5C1DCA33 ft=1 fh=b5da69f3293c6fcf vn="Win32/UniBlue.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\speedupmypc[1].exe"
sh=ED3463A7DB95D4B0A40B18FF7D4C3A198AFE9C87 ft=1 fh=b73262d5706d13f5 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\Stub[1].exe"
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7dd13af7a1a9334a80d18381ebeab99f
# end=init
# utc_time=2015-06-18 12:30:25
# local_time=2015-06-18 02:30:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 24389
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7dd13af7a1a9334a80d18381ebeab99f
# end=updated
# utc_time=2015-06-18 12:31:15
# local_time=2015-06-18 02:31:15 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=7dd13af7a1a9334a80d18381ebeab99f
# engine=24389
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-06-18 02:35:19
# local_time=2015-06-18 04:35:19 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 16925763 16934684 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 75691 186267969 0 0
# scanned=263855
# found=123
# cleaned=0
# scan_time=7444
sh=5524BAAC03BF1A3485D08A96752801F56D36434C ft=1 fh=9e044c13dcecd7b5 vn="Win32/VOPackage.BC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Suffian\AppData\Local\AnyProtectScannerSetup.exe.vir"
sh=08A5CE348D319335A92076C65C1091277AFED1B9 ft=1 fh=158b9db86261fb7d vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
sh=5CD6466678506B89A301119B1086288B135D5706 ft=1 fh=3dbdb70d701afcbb vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll.vir"
sh=CF3242F8773F62F5185F27C31FD5001AB031CE64 ft=1 fh=4962337425770dc9 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe.vir"
sh=2D99221B3BB2BF4723704A0916A8E0C3DAC0858C ft=1 fh=a2f7facb6822587c vn="Win32/Toolbar.MyWebSearch evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\TelevisionFanaticEI\Installr\1.bin\64EIPlug.dll.vir"
sh=E6DE5B3B902C79BAC35C83EA198C05B9DCBB2886 ft=1 fh=2b9d20083ea87627 vn="Win32/Systweak.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8W1DGGFQ\rcpsetup_17970[1].exe"
sh=0306A4096B7015232FF0E2EEE7D441D8A98F61B3 ft=1 fh=a8367fa835d7a09e vn="Variante von Win32/Adware.AddLyrics.DN Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\BlockAndSurf_2222-5510[1].exe"
sh=BC1E60EB67575CE960102E29A2D57CE4F0E4DD22 ft=1 fh=d0a0c61038592058 vn="Win32/Wajam.K evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\WIE_2.18.1.12[1].exe"
sh=DB865B218F83003B6F4DDB9F5534C6BD4485D945 ft=1 fh=b8b4f211bbb768c8 vn="Variante von Win32/Adware.ConvertAd.QR Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JXULO4E3\policyname[1].exe"
sh=AF023CD20C85601E6874CB788BCAA49AE325A40D ft=1 fh=da3b4c00ec0bc47d vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\Cloud_Backup_Setup[1].exe"
sh=CC0BEA9200A6DB6A9B7CD4C4ABF59F7B5C1DCA33 ft=1 fh=b5da69f3293c6fcf vn="Win32/UniBlue.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\speedupmypc[1].exe"
sh=ED3463A7DB95D4B0A40B18FF7D4C3A198AFE9C87 ft=1 fh=b73262d5706d13f5 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\Stub[1].exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\DCIM.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\4jazzmin.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\EOSMISC.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Workshop Vhs.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\video2day.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\rockdaJam Musik 2013.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\HipHooray Battle 2012.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Mahnungen.exe"
sh=5CF07F649C468930004B21E9E27555784287FCC0 ft=1 fh=c71c00119aaf8e2b vn="Win32/Sality.NBA Virus" ac=I fn="F:\100CANON.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Willkommen.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Styles and Elements.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Vereinbarungen_Verträge.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\FotosVideos von Franzi.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Rock Da Jam Senior Show+Fotos.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Weihnachtsfeier 2012.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\show xmas 2012.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Ironman 2012.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Weihnachtsfeiervideos 2012.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\schneide videos.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\afropopmusic.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Dancehall Musik.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Fahrtenbuch 2011.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Rock da Jam Senior.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Weihnachten '12.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Iron Man '13.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\MUF '12.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Rock da jam '12.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\ROCK DA JAM VIDEOS FOTOS.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\audi A3 4my babies love u 2 4ever.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Chill and Grill '13.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\MUF '13.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Ciara 1 2 Step Videos.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Videodreh Kids 2013.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Welcome Partyshows.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Dienstfahrten 2012.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Jonathan Capoeira.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\aaaausdruck.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Klassik_Musik.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\281014_Music.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Series.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Pagemaker.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Anu_s_wedding.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Musik.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\mixHiphop rnb.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\oldschoolmix.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\bboy.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Africa music.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2006 B&Stylez Grill.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Uni.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2006 Geb Papa.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2006 Geb Suf+Jas.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2006 Posen Dul+Suf.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2006 WM.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2007 Geb Jas+Suf.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2007 Jas+Suf Sommer.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2007 Xmas.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2008 Calpe.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2009 Entstehung Dance Studio.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2009 Ibiza.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2009 Indrani.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2009 Geb Suffi Jasmin.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2009 Rock da Jam.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2009 Xmas.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2010 England.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2010 Hamburg.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Kerala Pics.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Noah.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Papas 50ster.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Urlaub+Reisen.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\neuer Musikordner.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\me and you.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Amy Winehouse.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Onkel.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\claudia & Lutz.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\MUF2014.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\lockingbattle.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\2012[2009]DvDrip[Eng]-FXG.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Freiestraining.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\bboy1.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Poppin music.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Funkmusic.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\hiphop1.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\modern jazz.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\latinmusica.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Bilder Streetdance Battle 2011.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Videos B&S.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\DivX.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\HIP HOP HOORAY 2013.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\New folder.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Hesentag -Auftrittsmusik.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Sony_VideoCam Restore Juni2011.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Warmup.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Hip Hop Battle.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\bboy battle Ko runden2011.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Bilder Rock da Jam2011.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Bilder Kids Battle - 2011-06-26.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Interkult2011.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Workshop Hiphop Kidz April.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Fotos Ostend.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\ZUMBA.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Neuer Ordner.exe"
sh=C2CD91A4C5E9BFBFAE17D85916D46063EB814172 ft=1 fh=51eb047979baf649 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Pagemaker\PAGEMAKER\_ISDEL.EXE"
sh=C6BD8001F1CF25F2789BF22D6797A52699CC0A4B ft=1 fh=7f16fe0334c24914 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Pagemaker\PAGEMAKER\SETUP.EXE"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\$RECYCLE.BIN\$RI6GPQW.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\$RECYCLE.BIN\$RKQZQNQ.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\$RECYCLE.BIN\$R71ZIAU.exe"
sh=4FD0111DB1C73739FCD8F6DD87AB44F619E79811 ft=1 fh=c71c00113375b7d0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\$RECYCLE.BIN\$R38D538.exe"
sh=631DA662578C5D0CF0F5D9AFEA131C1ABCE9FC4A ft=1 fh=a589215683f71fe0 vn="Win32/Sality.NBA Virus" ac=I fn="F:\DivX\DivX Converter\DivX Converter.exe"
sh=43C1878E1E4EE8985DEAEEBAC35356F4624058D9 ft=1 fh=fd2e2c5d8f6f8906 vn="Win32/Sality.NBA Virus" ac=I fn="F:\DivX\DivX Player\DivX Player.exe"
sh=3EC0CAE682FCBE00D8A6F0867952D9FC27B9E96C ft=1 fh=2b263174dea98498 vn="Win32/Sality.NBA Virus" ac=I fn="F:\DivX\DivX Updater\DivXVersionChecker.exe"
sh=9FA929AD63A1272BA9215D3A9699437C55BBFFE3 ft=1 fh=4fa0f0c32b082bb1 vn="Win32/Sality.NBA Virus" ac=I fn="F:\Brothers&Stylez alte sachen\avm_fritz!wlan_usb_stick_build_080905.exe"
Code:
ATTFilter Results of screen317's Security Check version 1.002 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java(TM) 6 Update 20 Java version 32-bit out of Date! Adobe Flash Player 17.0.0.134 Adobe Reader XI Mozilla Firefox (38.0.5) Google Chrome (40.0.2214.93) Google Chrome (43.0.2357.124) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe Malwarebytes Anti-Malware mbamscheduler.exe TOSHIBA TOSHIBA Online Product Information TOPI.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015 Ran by Suffian (administrator) on SUFFIAN-TOSH on 23-06-2015 13:30:17 Running from C:\Users\Suffian\Desktop\PC Problem Loaded Profiles: Suffian (Available Profiles: Suffian) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser not detected!) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe (Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Dropbox, Inc.) C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe () C:\Users\Suffian\Desktop\SecurityCheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation) HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation) HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2120808 2010-07-28] (Realtek Semiconductor) HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566184 2010-09-28] (TOSHIBA Corporation) HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation) HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [915320 2010-05-10] (TOSHIBA Corporation) HKLM\...\Run: [SmartFaceVWatcher] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [238080 2009-10-19] (TOSHIBA Corporation) HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2010-02-05] (TOSHIBA Corporation) HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation) HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-05-30] (Toshiba Europe GmbH) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2967352 2012-11-06] (Synaptics Incorporated) HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation) HKLM-x32\...\Run: [NBAgent] => c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248 2011-01-07] (Nero AG) HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.) HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-15] (TOSHIBA CORPORATION) HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294136 2009-10-06] (TOSHIBA Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5225064 2014-12-04] (AVAST Software) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA) HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-11-23] (Google Inc.) HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [AutoStartNPSAgent] => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [95576 2010-07-04] (Samsung Electronics Co., Ltd.) HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Run: [Dropbox Update] => C:\Users\Suffian\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.) HKU\S-1-5-18\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk [2011-05-30] ShortcutTarget: Toshiba Places Icon Utility.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Toshiba) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-05-30] ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-05-30] ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2013-08-02] ShortcutTarget: Dropbox.lnk -> C:\Users\Suffian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-12-04] (AVAST Software) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Suffian\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-06-10] (Dropbox, Inc.) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-454062802-4211535203-1480594490-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled ProxyServer: [.DEFAULT] => http=127.0.0.1:51335;https=127.0.0.1:51335 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKU\S-1-5-21-454062802-4211535203-1480594490-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://toshiba.eu/places?touch=4&cat=1 SearchScopes: HKLM -> {A311D5B2-E19C-42D8-9AEE-22F8F27397B7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-04] (AVAST Software) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-06-15] (Google Inc.) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-04] (AVAST Software) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-06-15] (Google Inc.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-06-15] (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-01] (Microsoft Corporation.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-06-15] (Google Inc.) Toolbar: HKU\S-1-5-21-454062802-4211535203-1480594490-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-06-15] (Google Inc.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27] (Skype Technologies S.A.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default FF DefaultSearchEngine: Google (avast) FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006 FF SearchEngineOrder.1: Google (avast) FF SelectedSearchEngine: Google (avast) FF Homepage: https://www.google.com/?trackid=sp-006 FF Keyword.URL: https://www.google.com/search/?trackid=sp-006 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-04-03] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-03] () FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-06-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2010-12-08] () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\searchplugins\google-avast.xml [2015-03-01] FF Extension: Avira Browser Safety - C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\Extensions\abs@avira.com [2014-11-20] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Suffian\AppData\Roaming\Mozilla\Firefox\Profiles\4ipxp9ve.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-12-06] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-06-03] FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension FF Extension: HP Smart Print - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-10-09] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-04] FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [{4340308e-3e37-4dd7-9192-8cf05ce9c9f2}] - C:\Program Files (x86)\LyriXeeker\130.xpi FF HKU\S-1-5-21-454062802-4211535203-1480594490-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-12-06] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR StartupUrls: Default -> "https://www.google.com/?trackid=sp-006" CHR Profile: C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Avira Browser Safety) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-03-01] CHR Extension: (Avast Online Security) - C:\Users\Suffian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-01] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-04] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-04] (AVAST Software) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed] R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [1811456 2010-08-27] (Realsil Microelectronics Inc.) [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-04] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-04] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-04] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-04] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-04] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-04] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-04] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-04] () S3 Impcd; C:\Windows\System32\DRIVERS\Impcd.sys [158976 2010-02-27] (Intel Corporation) [File not signed] R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-23] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation) R3 RTWlanE; C:\Windows\System32\DRIVERS\rtwlane.sys [1514568 2013-05-02] (Realtek Semiconductor Corporation ) S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-16 17:07 - 2015-06-16 17:07 - 00000000 ____D C:\Program Files (x86)\ESET 2015-06-16 17:05 - 2015-06-16 10:16 - 02870984 _____ (ESET) C:\Users\Suffian\Desktop\esetsmartinstaller_deu.exe 2015-06-16 17:05 - 2015-06-16 10:14 - 00852639 _____ C:\Users\Suffian\Desktop\SecurityCheck.exe 2015-06-16 14:51 - 2015-06-16 14:51 - 00000000 ____D C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-06-16 14:50 - 2015-06-22 20:55 - 00001232 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-454062802-4211535203-1480594490-1001UA.job 2015-06-16 14:50 - 2015-06-20 14:55 - 00001180 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-454062802-4211535203-1480594490-1001Core.job 2015-06-16 14:50 - 2015-06-16 14:50 - 00004206 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-454062802-4211535203-1480594490-1001UA 2015-06-16 14:50 - 2015-06-16 14:50 - 00003810 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-454062802-4211535203-1480594490-1001Core 2015-06-16 14:50 - 2015-06-16 14:50 - 00000000 ____D C:\Users\Suffian\AppData\Local\Dropbox 2015-06-16 14:50 - 2015-06-16 14:50 - 00000000 ____D C:\ProgramData\Dropbox 2015-06-15 17:58 - 2015-06-15 17:58 - 00000207 _____ C:\Windows\tweaking.com-regbackup-SUFFIAN-TOSH-Windows-7-Home-Premium-(64-bit).dat 2015-06-15 17:58 - 2015-06-15 17:58 - 00000000 ____D C:\RegBackup 2015-06-15 17:30 - 2015-06-15 17:53 - 00000000 ____D C:\AdwCleaner 2015-06-15 15:51 - 2015-06-23 12:59 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-06-15 15:51 - 2015-06-15 15:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-06-15 15:51 - 2015-06-15 15:51 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-06-15 15:51 - 2015-06-15 15:51 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-06-15 15:51 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-06-15 15:51 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-06-15 15:51 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-06-15 06:37 - 2015-06-15 06:47 - 271063435 ____R C:\Users\Suffian\Desktop\Brothers & Stylez.mov 2015-06-15 06:27 - 2015-06-15 06:35 - 167648103 ____R C:\Users\Suffian\Desktop\Brothers & Stylez_Interviews.mov 2015-06-12 17:17 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-06-12 17:17 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-06-12 17:17 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-06-12 17:17 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-06-12 17:17 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-06-12 17:17 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-06-12 17:17 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-06-12 17:17 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-06-12 17:17 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-06-12 17:17 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2015-06-12 17:17 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-06-12 17:17 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-06-12 17:17 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-06-12 17:17 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-06-12 17:17 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-06-12 17:17 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2015-06-12 17:17 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-06-12 17:17 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2015-06-12 17:17 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2015-06-12 17:17 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-06-12 17:17 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2015-06-12 17:17 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-06-12 17:17 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-06-12 17:17 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-06-12 17:17 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2015-06-12 17:17 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2015-06-12 17:16 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-06-12 17:16 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-06-12 17:16 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-06-12 17:16 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-06-12 17:16 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-06-12 17:16 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-06-12 17:16 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-06-12 17:16 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-06-12 17:15 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-06-12 17:15 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-06-12 17:15 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-06-12 17:15 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-06-12 17:15 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-06-12 17:15 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2015-06-12 17:15 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2015-06-12 17:15 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2015-06-12 17:15 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2015-06-12 17:15 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2015-06-12 17:14 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-06-12 17:14 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-06-12 17:14 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-06-12 17:14 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-06-12 17:14 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-06-12 17:14 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-06-12 17:14 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-06-12 17:14 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-06-12 17:14 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-06-12 17:14 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-06-12 17:14 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-06-12 17:14 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-06-12 17:14 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-06-12 17:14 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-06-12 17:14 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-06-12 17:14 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-06-12 17:14 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-06-12 17:14 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-06-12 17:14 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-06-12 17:14 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-06-12 17:14 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-06-12 17:14 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-06-12 17:14 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-06-12 17:14 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-06-12 17:14 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-06-12 17:14 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-06-12 17:14 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-06-12 17:14 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-06-12 17:14 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-06-12 17:14 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-06-12 17:14 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-06-12 17:14 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-06-12 17:14 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-06-12 17:14 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-06-12 17:14 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-06-12 17:14 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-06-12 17:14 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-06-12 17:14 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-06-12 17:14 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-06-12 17:14 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-06-12 17:14 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-06-12 17:14 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-06-12 17:14 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-06-12 17:14 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-06-12 17:14 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-06-12 17:14 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-06-12 17:14 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-06-12 17:14 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-06-12 17:14 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-06-12 17:14 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-06-12 17:14 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-06-12 17:14 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-06-12 17:14 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-06-12 17:14 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-06-12 17:14 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-06-12 17:14 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-06-12 17:14 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-06-12 17:14 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-06-12 17:14 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-06-12 17:14 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-06-11 20:15 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-06-11 15:53 - 2015-06-11 15:53 - 00035503 _____ C:\ComboFix.txt 2015-06-11 15:38 - 2015-06-11 15:53 - 00000000 ____D C:\Qoobox 2015-06-11 15:38 - 2015-06-11 15:52 - 00000000 ____D C:\Windows\erdnt 2015-06-11 15:38 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2015-06-11 15:38 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2015-06-11 15:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-06-11 15:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-06-11 15:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-06-11 15:38 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2015-06-11 15:38 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2015-06-11 15:38 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2015-06-11 15:01 - 2015-06-11 15:01 - 00001271 _____ C:\Users\Suffian\Desktop\Revo Uninstaller.lnk 2015-06-11 15:01 - 2015-06-11 15:01 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2015-06-10 16:25 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2015-06-10 16:24 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2015-06-10 16:24 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2015-06-10 16:24 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2015-06-10 16:24 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-06-10 16:24 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2015-06-10 16:24 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-06-10 16:24 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2015-06-10 15:04 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys 2015-06-09 14:33 - 2015-06-23 13:30 - 00000000 ____D C:\FRST 2015-06-09 14:24 - 2015-06-15 18:44 - 00000000 ____D C:\Users\Suffian\Desktop\PC Problem 2015-06-09 14:24 - 2015-06-09 14:24 - 00000000 _____ C:\Users\Suffian\defogger_reenable 2015-06-03 17:03 - 2015-06-08 12:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-06-02 07:07 - 2015-06-02 07:13 - 00000000 ____D C:\Users\Suffian\Desktop\Crew Pics 2015-05-31 15:07 - 2015-05-31 15:10 - 00000000 ____D C:\Users\Suffian\Desktop\Kids Bergen Enkheim ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-23 13:08 - 2013-03-29 08:37 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-06-23 13:07 - 2009-07-14 06:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-06-23 13:07 - 2009-07-14 06:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-06-23 13:04 - 2014-12-04 17:31 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-06-23 13:03 - 2011-07-18 19:46 - 01643628 _____ C:\Windows\WindowsUpdate.log 2015-06-23 13:00 - 2013-08-02 11:06 - 00000000 ___RD C:\Users\Suffian\Dropbox 2015-06-23 13:00 - 2013-08-02 10:59 - 00000000 ____D C:\Users\Suffian\AppData\Roaming\Dropbox 2015-06-23 12:57 - 2013-10-10 12:08 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc.job 2015-06-23 12:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-06-23 12:57 - 2009-07-14 06:51 - 00180286 _____ C:\Windows\setupact.log 2015-06-22 20:42 - 2012-10-05 22:47 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-06-20 16:02 - 2010-11-21 08:50 - 00700134 _____ C:\Windows\system32\perfh007.dat 2015-06-20 16:02 - 2010-11-21 08:50 - 00149984 _____ C:\Windows\system32\perfc007.dat 2015-06-20 16:02 - 2009-07-14 07:13 - 01622236 _____ C:\Windows\system32\PerfStringBackup.INI 2015-06-20 15:09 - 2013-08-15 15:56 - 00000000 ____D C:\Users\Suffian\Desktop\Freestyle Beats 2015-06-20 12:32 - 2013-08-15 16:11 - 00000000 ____D C:\Users\Suffian\Desktop\Breakdance 2015-06-19 17:53 - 2015-04-26 00:11 - 00000000 ____D C:\Users\Suffian\Desktop\Bday Workshop Linda 2015-06-19 16:42 - 2014-05-10 20:17 - 00000000 ____D C:\Users\Suffian\Desktop\Musik für MUF 2014 2015-06-18 18:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-06-15 17:54 - 2010-11-21 05:47 - 00687222 _____ C:\Windows\PFRO.log 2015-06-15 17:53 - 2012-10-05 22:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-06-15 17:53 - 2011-09-08 10:48 - 00001006 _____ C:\Users\Suffian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-06-15 17:53 - 2011-09-08 10:40 - 00000000 ____D C:\Users\Suffian 2015-06-15 17:37 - 2013-12-04 16:51 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cec5a0aeaa77bc 2015-06-15 17:37 - 2012-10-05 22:47 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-06-14 00:27 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-06-13 12:08 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-06-13 12:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-06-12 16:52 - 2009-07-14 06:45 - 00396928 _____ C:\Windows\system32\FNTCACHE.DAT 2015-06-11 15:53 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2015-06-11 15:50 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2015-06-11 12:42 - 2015-04-16 20:50 - 00000000 ____D C:\Windows\system32\appraiser 2015-06-11 12:42 - 2014-05-07 16:11 - 00000000 ___SD C:\Windows\system32\CompatTel 2015-06-10 19:50 - 2013-08-15 14:50 - 00000000 ____D C:\Windows\system32\MRT 2015-06-10 19:49 - 2012-03-10 21:15 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-06-09 14:21 - 2014-04-30 15:26 - 00000000 ____D C:\Users\Suffian\Desktop\RdJKids 2015-06-08 12:03 - 2014-08-08 10:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-06-05 19:56 - 2013-08-27 18:42 - 00000000 ____D C:\Users\Suffian\Desktop\Bodylanguage 2015-06-02 07:15 - 2013-11-14 17:17 - 00000000 ____D C:\Users\Suffian\Desktop\Lg 2015-05-31 15:08 - 2014-12-10 17:51 - 00000000 ____D C:\Users\Suffian\Desktop\xmas show 2014 noch bearbeiten 2015-05-31 14:08 - 2015-04-28 19:04 - 00154002 _____ C:\Users\Suffian\Desktop\Freestyle Kids 2014 Welcome Party.MMM ==================== Files in the root of some directories ======= 2013-12-19 13:50 - 2014-10-21 19:50 - 0000201 _____ () C:\Users\Suffian\AppData\Roaming\WB.CFG 2013-10-09 19:22 - 2013-10-09 19:22 - 0000057 _____ () C:\ProgramData\Ament.ini 2012-03-10 21:50 - 2012-03-10 21:50 - 0000056 ____H () C:\ProgramData\ezsidmv.dat Some files in TEMP: ==================== C:\Users\Suffian\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpittqar.dll C:\Users\Suffian\AppData\Local\Temp\Quarantine.exe C:\Users\Suffian\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-06-18 18:34 ==================== End of log ============================ |
|
24.06.2015, 06:29
| #15 |
| /// the machine /// TB-Ausbilder | Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem Java updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\AdwCleaner\Quarantine\C\Users\Suffian\AppData\Local\AnyProtectScannerSetup.exe.vir
C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir
C:\Qoobox\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll.vir
C:\Qoobox\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe.vir
C:\Qoobox\Quarantine\C\Program Files (x86)\TelevisionFanaticEI\Installr\1.bin\64EIPlug.dll.vir
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8W1DGGFQ\rcpsetup_17970[1].exe
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\BlockAndSurf_2222-5510[1].exe
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\sp-standalone-setup[1].exe
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DPNCMR09\WIE_2.18.1.12[1].exe
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JXULO4E3\policyname[1].exe
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\Cloud_Backup_Setup[1].exe
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\speedupmypc[1].exe
C:\Users\Suffian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TYOAFIGG\Stub[1].exe
F:\DCIM.exe
F:\4jazzmin.exe
F:\EOSMISC.exe
F:\Workshop Vhs.exe
F:\video2day.exe
F:\rockdaJam Musik 2013.exe
F:\HipHooray Battle 2012.exe
F:\Mahnungen.exe
F:\100CANON.exe
F:\Willkommen.exe
F:\Styles and Elements.exe
F:\Vereinbarungen_Verträge.exe
F:\FotosVideos von Franzi.exe
F:\Rock Da Jam Senior Show+Fotos.exe
F:\Weihnachtsfeier 2012.exe
F:\show xmas 2012.exe
F:\Ironman 2012.exe
F:\Weihnachtsfeiervideos 2012.exe
F:\schneide videos.exe
F:\afropopmusic.exe
F:\Dancehall Musik.exe
F:\Fahrtenbuch 2011.exe
F:\Rock da Jam Senior.exe
F:\Weihnachten '12.exe
F:\Iron Man '13.exe
F:\MUF '12.exe
F:\Rock da jam '12.exe
F:\ROCK DA JAM VIDEOS FOTOS.exe
F:\audi A3 4my babies love u 2 4ever.exe
F:\Chill and Grill '13.exe
F:\MUF '13.exe
F:\Ciara 1 2 Step Videos.exe
F:\Videodreh Kids 2013.exe
F:\Welcome Partyshows.exe
F:\Dienstfahrten 2012.exe
F:\Jonathan Capoeira.exe
F:\aaaausdruck.exe
F:\Klassik_Musik.exe
F:\281014_Music.exe
F:\Series.exe
F:\Pagemaker.exe
F:\Anu_s_wedding.exe
F:\Musik.exe
F:\mixHiphop rnb.exe
F:\oldschoolmix.exe
F:\bboy.exe
F:\Africa music.exe
F:\2006 B&Stylez Grill.exe
F:\Uni.exe
F:\2006 Geb Papa.exe
F:\2006 Geb Suf+Jas.exe
F:\2006 Posen Dul+Suf.exe
F:\2006 WM.exe
F:\2007 Geb Jas+Suf.exe
F:\2007 Jas+Suf Sommer.exe
F:\2007 Xmas.exe
F:\2008 Calpe.exe
F:\2009 Entstehung Dance Studio.exe
F:\2009 Ibiza.exe
F:\2009 Indrani.exe
F:\2009 Geb Suffi Jasmin.exe
F:\2009 Rock da Jam.exe
F:\2009 Xmas.exe
F:\2010 England.exe
F:\2010 Hamburg.exe
F:\Kerala Pics.exe
F:\Noah.exe
F:\Papas 50ster.exe
F:\Urlaub+Reisen.exe
F:\neuer Musikordner.exe
F:\me and you.exe
F:\Amy Winehouse.exe
F:\Onkel.exe
F:\claudia & Lutz.exe
F:\MUF2014.exe
F:\lockingbattle.exe
F:\2012[2009]DvDrip[Eng]-FXG.exe
F:\Freiestraining.exe
F:\bboy1.exe
F:\Poppin music.exe
F:\Funkmusic.exe
F:\hiphop1.exe
F:\modern jazz.exe
F:\latinmusica.exe
F:\Bilder Streetdance Battle 2011.exe
F:\Videos B&S.exe
F:\DivX.exe
F:\HIP HOP HOORAY 2013.exe
F:\New folder.exe
F:\Hesentag -Auftrittsmusik.exe
F:\Sony_VideoCam Restore Juni2011.exe
F:\Warmup.exe
F:\Hip Hop Battle.exe
F:\bboy battle Ko runden2011.exe
F:\Bilder Rock da Jam2011.exe
F:\Bilder Kids Battle - 2011-06-26.exe
F:\Interkult2011.exe
F:\Workshop Hiphop Kidz April.exe
F:\Fotos Ostend.exe
F:\ZUMBA.exe
F:\Neuer Ordner.exe
F:\Pagemaker\PAGEMAKER\_ISDEL.EXE
F:\Pagemaker\PAGEMAKER\SETUP.EXE
F:\$RECYCLE.BIN\$RI6GPQW.exe
F:\$RECYCLE.BIN\$RKQZQNQ.exe
F:\$RECYCLE.BIN\$R71ZIAU.exe
F:\$RECYCLE.BIN\$R38D538.exe
F:\DivX\DivX Converter\DivX Converter.exe
F:\DivX\DivX Player\DivX Player.exe
F:\DivX\DivX Updater\DivXVersionChecker.exe
F:\Brothers&Stylez alte sachen\avm_fritz!wlan_usb_stick_build_080905.exe
Removeproxy:
Emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Revo Uninstaller - Download - Filepony damit Chrome deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.google.com/chrome/answer/3296214?hl=de Frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7 - 64bit: PC sehr langsam, Vermutung Malware, Toshiba Service Station Problem |
| antivirus, avira, bobrowser, browser, converter, desktop, device driver, failed, firefox, firefox 38.0.5, flash player, google, home, homepage, iexplore.exe, langsam, launch, malware, mozilla, mp3, problem, realtek, registry, scan, security, software, svchost.exe, system, teredo, windows |
dann auf 
und dann auf 
. 
WARNUNG an die MITLESER: 
Linear-Darstellung
