AdwCleaner[S0]: Code:
# AdwCleaner v4.110 - Bericht erstellt 15/02/2015 um 20:10:34
# Aktualisiert 05/02/2015 von Xplode
# Datenbank : 2015-02-14.2 [Server]
# Betriebssystem : Windows 8.1 (x64)
# Benutzername : Nikolas - KAVELL
# Gestarted von : C:\Users\Nikolas\Downloads\AdwCleaner_4.110.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\baidu
Ordner Gelöscht : C:\ProgramData\12189901095735080612
Ordner Gelöscht : C:\ProgramData\f018dc58000009c2
Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
Ordner Gelöscht : C:\Program Files (x86)\predm
Ordner Gelöscht : C:\Users\Nikolas\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Nikolas\Documents\Optimizer Pro
Ordner Gelöscht : C:\Users\Nikolas\Documents\PC Speed Maximizer
Ordner Gelöscht : C:\ProgramData\fibagakbgnpmiidianmojbhblnhbflka
Datei Gelöscht : C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\user.js
Datei Gelöscht : C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Nikolas\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Nikolas\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
***** [ Geplante Tasks ] *****
Task Gelöscht : LaunchSignup
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Nikolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Nikolas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Nikolas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\P12b8ef41_327f_43f4_8440_284c721aea52_.P12b8ef41_327f_43f4_8440_284c721aea52_
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\P12b8ef41_327f_43f4_8440_284c721aea52_.P12b8ef41_327f_43f4_8440_284c721aea52_.9
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\P1fe64051_817d_495b_a27b_9049b3767fb3_.P1fe64051_817d_495b_a27b_9049b3767fb3_
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\P1fe64051_817d_495b_a27b_9049b3767fb3_.P1fe64051_817d_495b_a27b_9049b3767fb3_.9
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{12b8ef41-327f-43f4-8440-284c721aea52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1fe64051-817d-495b-a27b-9049b3767fb3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{12b8ef41-327f-43f4-8440-284c721aea52}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{12b8ef41-327f-43f4-8440-284c721aea52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{12b8ef41-327f-43f4-8440-284c721aea52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1fe64051-817d-495b-a27b-9049b3767fb3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{12b8ef41-327f-43f4-8440-284c721aea52}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{1fe64051-817d-495b-a27b-9049b3767fb3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InetStat
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Optimizer Pro
Schlüssel Gelöscht : HKCU\Software\Tutorials
Schlüssel Gelöscht : HKCU\Software\Super Optimizer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstallCore
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
***** [ Internetbrowser ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Mozilla Firefox v31.0 (x86 de)
[t8t5na1b.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.BirthDate", "1407968375");
-\\ Google Chrome v39.0.2171.95
[C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
[C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : flcnmdehjfeflkohlockkbmoglehckdf
[C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb
[C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : mfhkgfigejkhikbkfkkglinnkfojkdek
[C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : oilkkkefbalmbfppgjmgjoefbclebkce
[C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : fibagakbgnpmiidianmojbhblnhbflka
[C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Homepage] : hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M533E912E-712F-464B-A3F4-ED22FAF4AE97&SearchSource=55&CUI=&UM=8&UP=SP7AE17A06-E768-4AFB-A707-190BBC97C381&SSPV=
-\\ Opera v27.0.1689.54
*************************
AdwCleaner[R0].txt - [7094 Bytes] - [15/02/2015 20:08:56]
AdwCleaner[S0].txt - [6854 Bytes] - [15/02/2015 20:10:34]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6913 Bytes] ########## JRT: Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 8.1 x64
Ran by Nikolas on 15.02.2015 at 20:13:35,62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
Successfully deleted: [File] "C:\Windows\wininit.ini"
~~~ Folders
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.02.2015 at 20:17:50,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ mbam: Code:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 15.02.2015
Scan Time: 19:54:15
Logfile: mbam.txt
Administrator: Yes
Version: 2.00.4.1028
Malware Database: v2015.02.15.04
Rootkit Database: v2015.02.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows 8.1
CPU: x64
File System: NTFS
User: Nikolas
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 364350
Time Elapsed: 8 min, 39 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 3
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, 1928, Delete-on-Reboot, [2a967da10c7e20163ea1ea20f30f8c74]
PUP.Optional.ZombieNews.A, C:\ProgramData\ocqWmKEcRF\VxVeErTGUaO.exe, 2688, Delete-on-Reboot, [0fb15ac41278ec4a2a76ba066b96ea16]
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\upmbot_de_421.exe, 6300, Delete-on-Reboot, [269aa57953376ccaa6ec9ad946bdee12]
Modules: 2
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, Delete-on-Reboot, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, Delete-on-Reboot, [734d8b935a30ea4c1e09850fe71cf709],
Registry Keys: 56
PUP.Optional.XTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, Quarantined, [2a967da10c7e20163ea1ea20f30f8c74],
PUP.Optional.ZombieNews.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VxVeErTGUaO, Quarantined, [0fb15ac41278ec4a2a76ba066b96ea16],
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, Quarantined, [c3fd36e84b3f4fe7ebb8aa627b88e61a],
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, Quarantined, [c3fd36e84b3f4fe7ebb8aa627b88e61a],
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, Quarantined, [903025f98bff3303b0c247c506fd10f0],
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, Quarantined, [903025f98bff3303b0c247c506fd10f0],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [be02c05e73176fc7ca136d9eef146d93],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, Quarantined, [be02c05e73176fc7ca136d9eef146d93],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, Quarantined, [be02c05e73176fc7ca136d9eef146d93],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, Quarantined, [be02c05e73176fc7ca136d9eef146d93],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, Quarantined, [be02c05e73176fc7ca136d9eef146d93],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, Quarantined, [be02c05e73176fc7ca136d9eef146d93],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Quarantined, [546c120c454585b14ef1b650e41f6a96],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Quarantined, [546c120c454585b14ef1b650e41f6a96],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Quarantined, [546c120c454585b14ef1b650e41f6a96],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Quarantined, [546c120c454585b14ef1b650e41f6a96],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, Quarantined, [b7096bb32c5e2214e6a35fa8e71c23dd],
PUP.Optional.SearchProtect.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, Quarantined, [b7096bb32c5e2214e6a35fa8e71c23dd],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, Quarantined, [af1105193c4e74c2a667ce73d82b5da3],
PUP.Optional.WordProser.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wpnfd_1_10_0_6, Quarantined, [8040a975602a6acca265465a18eb56aa],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\CLASSES\Iminent, Quarantined, [7749ee306327cf67ed7846bd33d2ee12],
PUP.Optional.Vosteran.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\oilkkkefbalmbfppgjmgjoefbclebkce, Quarantined, [328ef826cebc58dedcb8801751b218e8],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [1aa6a17d89012214f02bea107e86e818],
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe, Quarantined, [912f63bb8a009f979f27ded39b688c74],
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\GAMESDESKTOP, Quarantined, [d7e97da1a0eaee487afad5c3e71c5fa1],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, Quarantined, [5f612ef0ef9b92a49195a5eff70ca15f],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, Quarantined, [556b819d9feb73c31e75f4e5bc47fa06],
PUP.Optional.MBot.A, HKLM\SOFTWARE\WOW6432NODE\MYBESTOFFERSTODAY, Quarantined, [b50b0d11c4c605311a3d505bc93ac739],
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, Quarantined, [0bb5e43a2d5d50e6b34c7526bd463fc1],
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\omiga-plusSoftware, Quarantined, [ecd4150975152016d49b56b09f66fe02],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, Quarantined, [2a96041a3159e84e6de822ec59ac22de],
PUP.Optional.WordProser.A, HKLM\SOFTWARE\WOW6432NODE\WordProser_1.10.0.6, Quarantined, [eed275a98ffb191d16f4ced271928779],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Iminent, Quarantined, [7f414dd194f6f4427beafe0506ff659b],
PUP.Optional.Vosteran.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\oilkkkefbalmbfppgjmgjoefbclebkce, Quarantined, [744c27f7a3e785b1088c1f78c340d32d],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [3a868a94abdfe94df02b4dad4db71ae6],
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\DatamngrCoordinator.exe, Quarantined, [dee258c60684d462ccfa5c55b84b26da],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, Quarantined, [8f3116089bef2016de07fcb8e71c3dc3],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, Quarantined, [ead61c024941e94d32d77f2928db659b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, Quarantined, [229ec05e63272b0b816f07a255ae48b8],
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, Quarantined, [4e72cb53d7b30a2c54a80515c73ee719],
PUP.Optional.BrowserGood.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Browser Good, Quarantined, [cdf3f6288208b6803e840c8a5ea5db25],
PUP.Optional.CommonShare.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update CommonShare, Quarantined, [695770ae74163501938ae4cd976cea16],
PUP.Optional.PlumoWeb.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update PlumoWeb, Quarantined, [635d5ec0addd50e6cbfe04a3a261a15f],
PUP.Optional.WordProser.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wpsvc_1.10.0.6, Quarantined, [299708169ded989e7494811f0ff4eb15],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, Quarantined, [11af1a04d7b3b3838d99ddc2fc07be42],
PUP.Optional.MBOT.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\mybestofferstoday, Quarantined, [724e100e58322b0b22fcff907d8653ad],
PUP.Optional.StormWatchApp.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\StormWatchApp, Quarantined, [714f948abad074c2f37b5947c63dc838],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TutoTag, Quarantined, [c8f83fdf93f77bbb4ff840d1bf4630d0],
PUP.Optional.Vosteran.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Vosteran Browser, Quarantined, [bb0567b76f1b49edb2969df7956e16ea],
PUP.Optional.MultiIE.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, Quarantined, [ebd5fd21c1c99a9ca72757b455b0a060],
PUP.Optional.Vosteran.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\oilkkkefbalmbfppgjmgjoefbclebkce, Quarantined, [4b759985ddad3ef8a2f32a6d699a5fa1],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [318fb46aa7e3eb4b2481dcfc996a926e],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [fac6fd217812c274306040aef60e1fe1],
PUP.Optional.Qone8, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Quarantined, [3987ea3406844de93edccd2de51f817f],
PUP.Optional.FastStart.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS, Quarantined, [28981d01b7d3bc7aa3660b9c986b5ba5],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\TUTORIALS\updatetutorialeshp, Quarantined, [39872df13e4cb48255d1c4ca54afc63a],
Registry Values: 10
PUP.Optional.Iminent.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [a9176eb07d0d171f4b56a69a41c206fa],
PUP.Optional.Iminent.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [a9176eb07d0d171f4b56a69a41c206fa],
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\WSE_Vosteran\\, Quarantined, [11afa27c0a80b086bcff42d6838201ff]
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_88, Quarantined, [6c54ea34ee9ccd698a5f3266847f9c64],
PUP.Optional.FastStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|faststartff@gmail.com, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com, Quarantined, [d0f017071f6b62d4a2d465a84bba41bf]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, smt, Quarantined, [229ec05e63272b0b816f07a255ae48b8]
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, 8C14419B-A02B-4776-8F30-B8163D691240, Quarantined, [4e72cb53d7b30a2c54a80515c73ee719]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0N2Y1N1N1S2X, Quarantined, [fac6fd217812c274306040aef60e1fe1]
PUP.Optional.FastStart.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, faststartff@gmail.com, Quarantined, [28981d01b7d3bc7aa3660b9c986b5ba5]
PUP.Optional.MBot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|upmbot_de_421.exe, C:\Users\Nikolas\AppData\Local\mbot_de_421\upmbot_de_421.exe -runonce, Quarantined, [269aa57953376ccaa6ec9ad946bdee12]
Registry Data: 14
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}),Replaced,[fec23ee0b0da44f26298981c7590fc04]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99),Replaced,[3090be605139dc5a54a5e0d4e91ccd33]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99),Replaced,[6d53b16df595d85e374affc3ad586997]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}),Replaced,[a917ac72335788ae0af1ecc8778e3ac6]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[a41c25f9701ac4725e6a00c0df26e719]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}),Replaced,[a020d747deac82b4b04a0ba9fd08bb45]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99),Replaced,[caf6d747b2d86fc7a257c5ef20e5da26]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99),Replaced,[912f1608f892b581522f81410bfa629e]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/web/?type=dspp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}),Replaced,[754b1707a5e59c9afffca60e0ef755ab]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[8838928c602ab77fa523259bb25330d0]
PUP.Optional.OmigaPlus.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://isearch.omiga-plus.com/web/?type=dspp&ts=1421254794&from=adks&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/web/?type=dspp&ts=1421254794&from=adks&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}),Replaced,[972955c9e3a76acc9f0f4b69f80dbf41]
PUP.Optional.Trovi.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M4C5843D0-9567-44D9-A870-FD87F6B42A40&SearchSource=55&CUI=&UM=8&UP=SP10F3D055-7788-4BD1-9FA5-7979FA87FB59&SSPV=, Good: (www.google.com), Bad: (hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M4C5843D0-9567-44D9-A870-FD87F6B42A40&SearchSource=55&CUI=&UM=8&UP=SP10F3D055-7788-4BD1-9FA5-7979FA87FB59&SSPV=),Replaced,[259bca541d6d40f6949b5066a065916f]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99, Good: (www.google.com), Bad: (hxxp://www.mystartsearch.com/?type=hppp&ts=1421600431&from=smt&uid=KINGSTONXSV300S37A60G_50026B7744034C99),Replaced,[ad13a37be8a24beb13e9e6ce9d685da3]
PUP.Optional.OmigaPlus.A, HKU\S-1-5-21-1395782937-2529212249-1045901662-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://isearch.omiga-plus.com/web/?type=dspp&ts=1421254794&from=adks&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}, Good: (www.google.com), Bad: (hxxp://isearch.omiga-plus.com/web/?type=dspp&ts=1421254794&from=adks&uid=KINGSTONXSV300S37A60G_50026B7744034C99&q={searchTerms}),Replaced,[526ecf4f692120169914d6de2bda19e7]
Folders: 83
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab, Delete-on-Reboot, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\image, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\weather, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.InetStat.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InetStat, Quarantined, [4878be6062282c0abe8bed2abe475aa6],
PUP.Optional.AdPeak.A, C:\Program Files\005, Quarantined, [338d2fef6525ea4c550abc5be12427d9],
Rogue.Multiple, C:\ProgramData\374311380, Quarantined, [0fb1fd21aae039fd5cf748fdb25152ae],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\_metadata, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\_metadata, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\include, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\include\tools, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\lib, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\module, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\pack, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\en, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\en-US, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\es, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\es-419, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\it, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\pl, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\ru, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\tr, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\vi, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\defaults, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\defaults\preferences, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Quarantined, [bf01d44a6d1dd2645abbadbf3dc6ab55],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, Quarantined, [bf01d44a6d1dd2645abbadbf3dc6ab55],
PUP.Optional.ZombieNews.A, C:\Users\Nikolas\AppData\Local\ZombieNews, Quarantined, [269ac5599af0de58a666086ab94aa45c],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421, Delete-on-Reboot, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\Download, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\mbot_de_421, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\mbot_de_421\1.20, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY, Quarantined, [ecd48f8fbbcfae8845ad12626a994ab6],
PUP.Optional.FLVMPlayer, C:\Program Files (x86)\FLVM Player, Quarantined, [20a075a9dcae2d09caba4c2b00036e92],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, Quarantined, [457bb26c7e0c06304f657711e71cc739],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, Quarantined, [457bb26c7e0c06304f657711e71cc739],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
Files: 286
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, Delete-on-Reboot, [2a967da10c7e20163ea1ea20f30f8c74],
PUP.Optional.ZombieNews.A, C:\ProgramData\ocqWmKEcRF\VxVeErTGUaO.exe, Delete-on-Reboot, [0fb15ac41278ec4a2a76ba066b96ea16],
PUP.Optional.SupTab.A, C:\Program Files (x86)\XTab\SupTab.dll, Quarantined, [be02c05e73176fc7ca136d9eef146d93],
PUP.Optional.ZombieNews.A, C:\ProgramData\ocqWmKEcRF\dat\DraYWeUO.exe, Delete-on-Reboot, [724ee03e87038ea8257b734d5ca54ab6],
PUP.Optional.ZombieNews.A, C:\ProgramData\ocqWmKEcRF\dat\GLtCyTLJCb.exe, Delete-on-Reboot, [259bb36b99f1eb4b1e82437ddd24a759],
PUP.Optional.ZombieInvasion.A, C:\ProgramData\ocqWmKEcRF\dat\VlhHweC.dll, Delete-on-Reboot, [cdf3011dff8bdf575e937e35f114a15f],
PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, Quarantined, [615f4ad4bdcde74f399a12b706fbdb25],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\Temp\Setup.exe, Quarantined, [07b9a6784842e94d73d26252bc4532ce],
PUP.Optional.DeskTopDock.A, C:\Users\Nikolas\AppData\Local\Temp\setup_460.exe, Quarantined, [01bf1806c2c87fb7357b43b7f90822de],
PUP.Optional.SearchProtect, C:\Users\Nikolas\AppData\Local\Temp\~nsu.tmp\Au_.exe, Quarantined, [38889d813c4ef2442d90a073c0429967],
PUP.Optional.BPlug, C:\Users\Nikolas\AppData\Local\Temp\is-10G0G.tmp\browsergood_soft_partner.exe, Quarantined, [348c55c92f5b1521faf14b86fb06748c],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_plushd_installer_multilang.exe, Quarantined, [dae6120cf496ff3718c6e116bf42936d],
Riskware.Vmdetector, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\InstallManager.exe, Quarantined, [37898797b2d844f22aa5edbea461867a],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_quickref_installer_multilang.exe, Quarantined, [4a7643dbfb8f2c0ae8f614e3857cc63a],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_SByoutube_installer_multilang.exe, Quarantined, [457b8a94b1d92b0b49952ccb946d28d8],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_secprotwhite_installer_multilang.exe, Quarantined, [c4fc5ac46129f5413ba314e3758c2fd1],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_secureprotect_installer_multilang.exe, Quarantined, [ad1342dc4842a294429c599e59a8d62a],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_snapdo_linkury_installer_multilang.exe, Quarantined, [1fa185998efcbd79d40ac730f40df10f],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_speeditup_installer_multilang.exe, Quarantined, [e6daeb33464471c58d51688f926fa55b],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_superpc_installer_multilang.exe, Quarantined, [328e29f590fa112511cdcd2ab948da26],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_wordproser_pariente_installer_multilang.exe, Quarantined, [10b05dc1068446f0e6f86c8b25dccb35],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_zombie_installer_multilang.exe, Quarantined, [39876db1c0ca6acca43a37c0f30eaa56],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_amonetize_plushd_installer_multilang.exe, Quarantined, [635d87973a50181e5589d4237e83e61a],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_browsergood_installer_multilang.exe, Quarantined, [962a2fefcebc1d19a539ac4b7d8416ea],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_BubbleSound_installer_multilang.exe, Quarantined, [af11a07e2c5e9c9a845a40b77091768a],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_cp_desktopdock_installer_multilang.exe, Quarantined, [229ec25c8bffc076835b6592a25fc838],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_CubepileShopperz_installer_multilang.exe, Quarantined, [cef21ffff4964fe77e60599ef908d32d],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_cubepile_speedcheck_installer_multilang.exe, Quarantined, [8d33031ba9e12b0b8955ba3d05fc0ef2],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_FlashBeat_installer_multilang.exe, Quarantined, [457b45d95d2dd4628d516493629f9b65],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_iminent_p_installer_multilang.exe, Quarantined, [2a96ac728406e74f5f7f44b3c63bae52],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_istartsurfp_installer_multilang.exe, Quarantined, [6957b16d4d3d93a3449a13e435cc05fb],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_MyStartSearch_installer_multilang.exe, Quarantined, [be02809e0288082eb42af106cc35e818],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_optimizerpro_installer_multilang.exe, Quarantined, [bb05aa74652558de2cb252a542bf7f81],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-1VVNP.tmp\package_plumoweb_installer_multilang.exe, Quarantined, [0bb56bb37b0fef474d91f601e41de51b],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_quickref_installer_multilang.exe, Quarantined, [06ba2af40a80cd694f8ffff8bf42fc04],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_secprotwhite_installer_multilang.exe, Quarantined, [318ff925e1a9bc7a548a30c727dad52b],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_secureprotect_installer_multilang.exe, Quarantined, [fec2db43e7a3e84e03dbb83fdd240ff1],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_snapdo_linkury_installer_multilang.exe, Quarantined, [8e32110dd8b2c6706c729562bb466d93],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_speeditup_installer_multilang.exe, Quarantined, [536d74aaef9be94dbe2091667b86a957],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_stormpverti_installer_multilang.exe, Quarantined, [ccf468b64c3e2b0bce1048afbf4246ba],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_superpc_installer_multilang.exe, Quarantined, [6b5507171e6c56e0845a94636998a45c],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_taplika_installer_multilang.exe, Quarantined, [bd0348d67d0da591eaf4e2151ae720e0],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_wordproser_pariente_installer_multilang.exe, Quarantined, [0bb5c75792f8cb6b8559a84f5aa75ba5],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_zombie_installer_multilang.exe, Quarantined, [922e3de1e1a957df2cb2b24545bc718f],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_browsergood_installer_multilang.exe, Quarantined, [823eb9654d3d2412fae42ec946bbcc34],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_BubbleSound_installer_multilang.exe, Quarantined, [566a3be3296131058559ae497988857b],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_cp_desktopdock_installer_multilang.exe, Quarantined, [ead62ef04f3be94d1cc26c8b36cb46ba],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_CubepileShopperz_installer_multilang.exe, Quarantined, [3f8162bc34568caac21c6b8c956c07f9],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_FlashBeat_installer_multilang.exe, Quarantined, [e3ddda4466240432b52954a3b54cfd03],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_gamehug_installer_multilang.exe, Quarantined, [e1df5bc3a0eae94d6f6f6a8d867bdb25],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_linkey_installer_multilang.exe, Quarantined, [427e819de7a3102696488c6b11f07e82],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_MyStartSearch_installer_multilang.exe, Quarantined, [d3ed56c85931fd3918c646b11ce5a759],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_omiga_pariente_installer_multilang.exe, Quarantined, [7a468797612961d5ab33e80ff80914ec],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_optimizerpro_installer_multilang.exe, Quarantined, [754b6faf67230c2adc02c13602ff5aa6],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_plumoweb_installer_multilang.exe, Quarantined, [b10f1b033d4dbc7a27b77a7d827f59a7],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-JO132.tmp\package_plushd_installer_multilang.exe, Quarantined, [358bfb239ded2c0aba2423d4857c847c],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_quickref_installer_multilang.exe, Quarantined, [9f21120c9febbe78449a52a5d52c46ba],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_SByoutube_installer_multilang.exe, Quarantined, [2f9125f96c1ed462c717a453b9487c84],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_secprotwhite_installer_multilang.exe, Quarantined, [fdc353cb46449f976e70827588798b75],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_secureprotect_installer_multilang.exe, Quarantined, [a8180e10ed9d320417c7886fe41da45c],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_snapdo_linkury_installer_multilang.exe, Quarantined, [5e628698c4c6d75f5b8352a5699852ae],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_speeditup_installer_multilang.exe, Quarantined, [f9c722fc0f7bb77f4d91df18f908bb45],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_spimali_installer_multilang.exe, Quarantined, [e7d976a82763d85e6975c82f1ce55ba5],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_superpc_installer_multilang.exe, Quarantined, [c00076a8f89268ce805e1cdbc53c4bb5],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_taplika_installer_multilang.exe, Quarantined, [2c945ac4543656e00dd131c60df422de],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_wordproser_pariente_installer_multilang.exe, Quarantined, [2e92d24c701a0432fce238bf08f9d12f],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_zombie_installer_multilang.exe, Quarantined, [c2fe120cd9b1de58c11d09ee728fbf41],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_amonetize_plushd_installer_multilang.exe, Quarantined, [3a866cb244464beb786654a38a77ba46],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_browsergood_installer_multilang.exe, Quarantined, [744c9c827515d56112cc28cf2cd56799],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_BubbleSound_installer_multilang.exe, Quarantined, [12aede40bbcf65d1fbe31ed918e97c84],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_cp_desktopdock_installer_multilang.exe, Quarantined, [546c7da12d5d41f5edf127d0c33e25db],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_CubepileShopperz_installer_multilang.exe, Quarantined, [07b939e587030e289b43bf388e73ea16],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_cubepile_speedcheck_installer_multilang.exe, Quarantined, [ad138797167445f14c9230c760a1ea16],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_FlashBeat_installer_multilang.exe, Quarantined, [566ade408a00ce6812cc55a25ba64db3],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_iminent_p_installer_multilang.exe, Quarantined, [fac634ea6a203ef8d40aab4cb849926e],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_istartsurfp_installer_multilang.exe, Quarantined, [9d23cc527713d3631ac48c6b8d74d22e],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_MyStartSearch_installer_multilang.exe, Quarantined, [a31de23c9eec280edc023bbc3ac756aa],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_optimizerpro_installer_multilang.exe, Quarantined, [d2ee120c3e4c1125776755a2b44d728e],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_plumoweb_installer_multilang.exe, Quarantined, [bd039e801872c373607e28cf867bb848],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-T3SQ6.tmp\package_plushd_installer_multilang.exe, Quarantined, [b40c21fd62289a9c924ccb2c17ea1ae6],
PUP.Optional.SearchProtect, C:\Users\Nikolas\AppData\Local\Temp\nsbA4AB.tmp\SPtool.dll, Quarantined, [8c34da44fe8c92a4417cb55e8c76be42],
PUP.Optional.Tuto4PC.A, C:\Users\Nikolas\AppData\Local\Temp\is-PMBB3.tmp\package_browsergood_installer_multilang.exe, Quarantined, [5b65e737f59580b604da1cdbc8396f91],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsdBA9B.tmp\SPtool.dll, Quarantined, [a02076a8543666d03687b95a34ce02fe],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsf49A9.tmp\SPtool.dll, Quarantined, [78485cc2206a39fd6f4ee033fa089769],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsiB03E.tmp\SPtool.dll, Quarantined, [526ee03e781237ff833a888be81aca36],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsoD9DC.tmp\SPtool.dll, Quarantined, [f7c9db4325652a0cc8f5fa19d72bb947],
PUP.Optional.SearchProtect, C:\Windows\Temp\nspDD45.tmp\SPtool.dll, Quarantined, [ae12f12d7119d26413aa080ba260ab55],
PUP.Optional.SearchProtect, C:\Windows\Temp\nssD8EC.tmp\SPtool.dll, Quarantined, [b50b809ed4b6d75f6e4f5cb74db5837d],
PUP.Optional.SearchProtect, C:\Windows\Temp\nst9FC9.tmp\SPtool.dll, Quarantined, [5769e8364f3b69cd308db65dc33fc739],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsu4CC2.tmp\SPtool.dll, Quarantined, [b30d8e9085058caa269755be06fc649c],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsu9D0E.tmp\SPtool.dll, Quarantined, [8f314ad4fe8ca492912c957e3fc324dc],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsw90D0.tmp\SPtool.dll, Quarantined, [cef2a7771f6b52e4b508080bb34fe917],
PUP.Optional.SearchProtect, C:\Windows\Temp\nsyA650.tmp\SPtool.dll, Quarantined, [b709fa2441490c2abd00f51eb25032ce],
PUP.Optional.SearchProtect, C:\Users\Nikolas\AppData\Local\avaxvavya\avaxvavya.exe, Quarantined, [942c7da1e6a4e650d1ecbf54dc2651af],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\pbqrmvbub, Quarantined, [3a8664ba81092d099ea70ba9e51c2bd5],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\uninstall.exe, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowerWatchCH.dll, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowerWatchFF.dll, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowserAction.dll, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\CmdShell.exe, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\conf, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ffsearch_toolbar!1.0.0.1025.xpi, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\HPNotify.exe, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\IeWatchDog.dll, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\install.data, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, Delete-on-Reboot, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, Delete-on-Reboot, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\searchProvider.xml, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about_bk.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn_apply.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\close.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf.xml, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf_back.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\input_bk.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\logo.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\main.xml, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_1.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_2.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\rigth_arrow.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\settings.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\data.html, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE.html, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE8.html, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\main.css, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\ver.txt, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\arrow.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_add_logo.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_add_logo_hover.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_logo.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\googlelogo.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\googlelogo2.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\google_trends.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon128.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon16.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon48.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\loading.gif, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\logo32.ico, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\weather\0.png, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\common.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ga.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ie8.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery-1.11.0.min.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.autocomplete.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\js.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\library.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit-ie8.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit2.0.js, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW\messages.json, Quarantined, [734d8b935a30ea4c1e09850fe71cf709],
PUP.Optional.WordProser.A, C:\Windows\System32\drivers\wpnfd_1_10_0_6.sys, Quarantined, [8040a975602a6acca265465a18eb56aa],
PUP.Optional.Iminent.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jdkokpcldhneihjdhigfjmoeojkdcbmg_0.localstorage, Quarantined, [1aa6fd21a0ea91a57f3a3d74fc0752ae],
PUP.Optional.Iminent.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, Quarantined, [576919056525a98d9018576b649f25db],
PUP.Optional.Vosteran.A, C:\Windows\Tasks\WSE_Vosteran.job, Quarantined, [ad13cb533a509d99d31ee630c045c33d],
PUP.Optional.Vosteran.A, C:\Windows\System32\Tasks\WSE_Vosteran, Quarantined, [645c839b5c2e6acc37bbff17d530e818],
PUP.Optional.InetStat.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InetStat\InetStat.lnk, Quarantined, [4878be6062282c0abe8bed2abe475aa6],
PUP.Optional.AdPeak.A, C:\Program Files\005\vulsrsebjh64.exe, Quarantined, [338d2fef6525ea4c550abc5be12427d9],
PUP.Optional.Avaxvavya.A, C:\Windows\System32\Tasks\avaxvavya, Quarantined, [3a86ac72d2b8fd392e73b565b64f18e8],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\background.js, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\icon-128.png, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\icon-16.png, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\icon-48.png, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\manifest.json, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\_metadata\computed_hashes.json, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\0.1_0\_metadata\verified_contents.json, Quarantined, [9f21f6286f1bf2444f40f274c43ff10f],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\background.js, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\contentScript.js, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\icon-128.png, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\icon-16.png, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\icon-48.png, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\manifest.json, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\script.js, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\_metadata\computed_hashes.json, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.CrossRider.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhkgfigejkhikbkfkkglinnkfojkdek\0.1_0\_metadata\verified_contents.json, Quarantined, [eed2918d7c0e79bde10cd296b84b41bf],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome.manifest, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\install.rdf, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\index.html, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\quick_start.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\quick_start.xul, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\include\speed_dial.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\include\tools\about_blank_hook.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\include\tools\misc.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\include\tools\popup_image_helper.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\include\tools\urlrequestor.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\js.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\lib\doT.min.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\module\hotSearch.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\module\mostgrid.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\module\search.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\module\stat.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\pack\common.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\pack\ga.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\content\js\pack\xagainit.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\en\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\en-US\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\es\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\es-419\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\it\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\it-CH\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\pl\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\ru\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\tr\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\vi\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW\locale.properties, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\default_logo.png, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\googlelogo.png, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\google_trends.png, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\icon.png, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\loading.gif, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\logo.png, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\newtab.ico, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\simple.css, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\chrome\skin\style.css, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\defaults\preferences\fvd.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\defaults\preferences\preferences.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\addonmanager.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\aes.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\config.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\dialogs.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\last_tab.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\misc.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\properties.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\remoterequest.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\restoreprefs.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.FastStart.A, C:\Users\Nikolas\AppData\Roaming\Mozilla\Firefox\Profiles\t8t5na1b.default\extensions\faststartff@gmail.com\modules\settings.js, Quarantined, [d9e7d34bdab06bcbf8eb2e3c47bcd927],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, Quarantined, [bf01d44a6d1dd2645abbadbf3dc6ab55],
PUP.Optional.ZombieNews.A, C:\Users\Nikolas\AppData\Local\ZombieNews\data2.dat, Quarantined, [269ac5599af0de58a666086ab94aa45c],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\a.db, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\b.db, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\b.res, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\c1.res, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\c1_64.res, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\c2.arc, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\c3.res, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\c4.arc, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\i.arc, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\Sqlite3.dll, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\tb32.arc, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\tb64.arc, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\u.arc, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\ver5BlockAndSurf\temp\Uninstall.exe, Quarantined, [f6caa17dfd8dba7cdeac442fcf341ae6],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\upmbot_de_421.cyl, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\upmbot_de_421.exe, Delete-on-Reboot, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\user_profil.cyp, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\Download\majmp_gentleeu.exe, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\mbot_de_421\1.20\cnf.cyl, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\Users\Nikolas\AppData\Local\mbot_de_421\mbot_de_421\1.20\eorezo.cyl, Quarantined, [269aa57953376ccaa6ec9ad946bdee12],
PUP.Optional.MBot.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY\MyBestOffersToday.lnk, Quarantined, [ecd48f8fbbcfae8845ad12626a994ab6],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\bahvxfk, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\mkfvxfk, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\pvpqbjobmlpfqlovvawq, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\qokvxfk, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\rfobmlpfqlovvawq, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\rpboobmlpfqlovvawq, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\stb.dat, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.SearchProtect.A, C:\Users\Nikolas\AppData\Local\avaxvavya\ycfvxfk, Quarantined, [bc0444dacfbb81b55d36e4a800039e62],
PUP.Optional.Trovi.A, C:\Users\Nikolas\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "hxxp://www.trovi.com/?gd=&ctid=CT3330130&octid=EB_ORIGINAL_CTID&ISID=M533E912E-712F-464B-A3F4-ED22FAF4AE97&SearchSource=55&CUI=&UM=8&UP=SP7AE17A06-E768-4AFB-A707-190BBC97C381&SSPV=",), Replaced,[c1fff32b9cee43f3faecf7055baa31cf]
Physical Sectors: 0
(No malicious items detected)
(end) |