Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Mal und möglicherweise spyware verseucht? (https://www.trojaner-board.de/168814-mal-moeglicherweise-spyware-verseucht.html)

Safiroth 18.07.2015 23:50
Mal und möglicherweise spyware verseucht?
 
Liste der Anhänge anzeigen (Anzahl: 3)
N schönen abend ich würde gerne bestimmte schadware entfernen aber meine programme finden entweder nichts oder die die ich heruntergeladen hab brauchen eine kaufbestätigung zum entfernen .. würde gerne wissen rorum es sich handelt und wie es sich auch mitunter manuell entfernen lässt :heulen:

habe drei pngs beigefügt
hoffe hilft :applaus:

Edit: es soll eine ubisoft datei verseucht seien (diese dateien sind legal erworben und sind wohl auch nicht der ursprung des virus ( original cd ) )
Edit2: habe die ubisoft datei durch diese google virenseite gejagt in png eins ist was dabei rausgekommen ist

schrauber 19.07.2015 05:14
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Safiroth 19.07.2015 17:52
Mehf info
 
danke für die schnelle antwort!
Wollte ich gerade machen dann bekomme ich auf einmal eine bedrohungs meldung, der download bricht ab und ich kann nicht mehr auf den DL mirror für die 32bit version, komischer weise aber noch auf die für 64..

Edit: das system ist ein amd sempron 2800+ 1,25ram
win 7 sp1 ult
habe avast und upgrade grad auf 10 tage kstnlos extra schutz und so zudem hab adw drauf
advance sys care pro
spy hunt 4 unregistered
hab über advane sys die window sicherheits updates laufen lassen
zudem hab ich alles an cookies gelöscht und alles an website verfolgung im firefox durch avast geblockt und coockies ect aus
dazu noch ein master passwort erstellt und
im reg edit die "bösen" regestrierungen rausgelöscht weis aber nicht ob es was gebracht hat..
zudem hab ich die ubisoft dateien mit adwanced sys care iobit uninstaller 99 mal nach gutmann methode vernichten lassen
zudem hab ich ein benutzerkonto gelöscht welches erstellter benutzer hies und die rechte über ich glaube welche von diesen adwares hatte also ich bin mir fast sicher das ich n trojaner habe
:killpc:

die dateien aus dem quarantäne ordner hab ich auch vernichtet da ich
recht verzweifelt bin und mir adw cleaner auch mal als virus angezigt wurde daher hab ich es auch schon neu installiert
gruss

k



anbei das quarantine log ich hoffe so ist das richtig eingefügt


C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe->C:\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe.vir
C:\ProgramData\IHProtectUpDate\update\conf->C:\AdwCleaner\Quarantine\C\ProgramData\IHProtectUpDate\update\conf.vir
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverTuner\DriverTuner.lnk->C:\AdwCleaner\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverTuner\DriverTuner.lnk.vir
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverTuner\update.lnk->C:\AdwCleaner\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverTuner\update.lnk.vir
C:\Program Files\XTab\BrowerWatchCH.dll->C:\AdwCleaner\Quarantine\C\Program Files\XTab\BrowerWatchCH.dll.vir
C:\Program Files\XTab\BrowerWatchFF.dll->C:\AdwCleaner\Quarantine\C\Program Files\XTab\BrowerWatchFF.dll.vir
C:\Program Files\XTab\BrowserAction.dll->C:\AdwCleaner\Quarantine\C\Program Files\XTab\BrowserAction.dll.vir
C:\Program Files\XTab\CmdShell.exe->C:\AdwCleaner\Quarantine\C\Program Files\XTab\CmdShell.exe.vir
C:\Program Files\XTab\conf->C:\AdwCleaner\Quarantine\C\Program Files\XTab\conf.vir
C:\Program Files\XTab\ffsearch_toolbar!1.0.0.1028.xpi->C:\AdwCleaner\Quarantine\C\Program Files\XTab\ffsearch_toolbar!1.0.0.1028.xpi.vir
C:\Program Files\XTab\HPNotify.exe->C:\AdwCleaner\Quarantine\C\Program Files\XTab\HPNotify.exe.vir
C:\Program Files\XTab\IeWatchDog.dll->C:\AdwCleaner\Quarantine\C\Program Files\XTab\IeWatchDog.dll.vir
C:\Program Files\XTab\install.data->C:\AdwCleaner\Quarantine\C\Program Files\XTab\install.data.vir
C:\Program Files\XTab\msvcp110.dll->C:\AdwCleaner\Quarantine\C\Program Files\XTab\msvcp110.dll.vir
C:\Program Files\XTab\msvcr110.dll->C:\AdwCleaner\Quarantine\C\Program Files\XTab\msvcr110.dll.vir
C:\Program Files\XTab\ProtectService.exe->C:\AdwCleaner\Quarantine\C\Program Files\XTab\ProtectService.exe.vir
C:\Program Files\XTab\searchProvider.xml->C:\AdwCleaner\Quarantine\C\Program Files\XTab\searchProvider.xml.vir
C:\Program Files\XTab\SupTab.dll->C:\AdwCleaner\Quarantine\C\Program Files\XTab\SupTab.dll.vir
C:\Program Files\XTab\uninstall.exe->C:\AdwCleaner\Quarantine\C\Program Files\XTab\uninstall.exe.vir
C:\Program Files\XTab\web\data.html->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\data.html.vir
C:\Program Files\XTab\web\indexIE.html->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\indexIE.html.vir
C:\Program Files\XTab\web\indexIE8.html->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\indexIE8.html.vir
C:\Program Files\XTab\web\main.css->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\main.css.vir
C:\Program Files\XTab\web\ver.txt->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\ver.txt.vir
C:\Program Files\XTab\web\_locales\zh-TW\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\zh-TW\messages.json.vir
C:\Program Files\XTab\web\_locales\zh-CN\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\zh-CN\messages.json.vir
C:\Program Files\XTab\web\_locales\vi-VI\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\vi-VI\messages.json.vir
C:\Program Files\XTab\web\_locales\tr-TR\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\tr-TR\messages.json.vir
C:\Program Files\XTab\web\_locales\ru-MO\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\ru-MO\messages.json.vir
C:\Program Files\XTab\web\_locales\ru\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\ru\messages.json.vir
C:\Program Files\XTab\web\_locales\pt-BR\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\pt-BR\messages.json.vir
C:\Program Files\XTab\web\_locales\pt\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\pt\messages.json.vir
C:\Program Files\XTab\web\_locales\pl\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\pl\messages.json.vir
C:\Program Files\XTab\web\_locales\it-IT\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\it-IT\messages.json.vir
C:\Program Files\XTab\web\_locales\it-CH\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\it-CH\messages.json.vir
C:\Program Files\XTab\web\_locales\fr-LU\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\fr-LU\messages.json.vir
C:\Program Files\XTab\web\_locales\fr-FR\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\fr-FR\messages.json.vir
C:\Program Files\XTab\web\_locales\fr-CH\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\fr-CH\messages.json.vir
C:\Program Files\XTab\web\_locales\fr-CA\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\fr-CA\messages.json.vir
C:\Program Files\XTab\web\_locales\fr-BE\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\fr-BE\messages.json.vir
C:\Program Files\XTab\web\_locales\es-ES\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\es-ES\messages.json.vir
C:\Program Files\XTab\web\_locales\es-419\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\es-419\messages.json.vir
C:\Program Files\XTab\web\_locales\en-US\messages.json->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\_locales\en-US\messages.json.vir
C:\Program Files\XTab\web\js\common.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\common.js.vir
C:\Program Files\XTab\web\js\ga.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\ga.js.vir
C:\Program Files\XTab\web\js\jquery-1.11.0.min.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\jquery-1.11.0.min.js.vir
C:\Program Files\XTab\web\js\jquery.autocomplete.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\jquery.autocomplete.js.vir
C:\Program Files\XTab\web\js\js.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\js.js.vir
C:\Program Files\XTab\web\js\library.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\library.js.vir
C:\Program Files\XTab\web\js\xagainit-ie8.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\xagainit-ie8.js.vir
C:\Program Files\XTab\web\js\xagainit2.0.js->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\js\xagainit2.0.js.vir
C:\Program Files\XTab\web\img\google_trends.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\img\google_trends.png.vir
C:\Program Files\XTab\web\img\icon128.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\img\icon128.png.vir
C:\Program Files\XTab\web\img\icon16.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\img\icon16.png.vir
C:\Program Files\XTab\web\img\icon48.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\img\icon48.png.vir
C:\Program Files\XTab\web\img\loading.gif->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\img\loading.gif.vir
C:\Program Files\XTab\web\img\logo32.ico->C:\AdwCleaner\Quarantine\C\Program Files\XTab\web\img\logo32.ico.vir
C:\Program Files\XTab\skin\about.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\about.png.vir
C:\Program Files\XTab\skin\about_bk.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\about_bk.png.vir
C:\Program Files\XTab\skin\btn.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\btn.png.vir
C:\Program Files\XTab\skin\btn_apply.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\btn_apply.png.vir
C:\Program Files\XTab\skin\close.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\close.png.vir
C:\Program Files\XTab\skin\conf.xml->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\conf.xml.vir
C:\Program Files\XTab\skin\conf_back.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\conf_back.png.vir
C:\Program Files\XTab\skin\input_bk.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\input_bk.png.vir
C:\Program Files\XTab\skin\logo.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\logo.png.vir
C:\Program Files\XTab\skin\main.xml->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\main.xml.vir
C:\Program Files\XTab\skin\radio_1.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\radio_1.png.vir
C:\Program Files\XTab\skin\radio_2.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\radio_2.png.vir
C:\Program Files\XTab\skin\rigth_arrow.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\rigth_arrow.png.vir
C:\Program Files\XTab\skin\settings.png->C:\AdwCleaner\Quarantine\C\Program Files\XTab\skin\settings.png.vir
C:\Program Files\DriverTuner\DPInst32.exe->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\DPInst32.exe.vir
C:\Program Files\DriverTuner\DPInst64.exe->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\DPInst64.exe.vir
C:\Program Files\DriverTuner\DriverTuner.exe->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\DriverTuner.exe.vir
C:\Program Files\DriverTuner\drivertuner.url->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\drivertuner.url.vir
C:\Program Files\DriverTuner\language.ini->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\language.ini.vir
C:\Program Files\DriverTuner\libcurlds.dll->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\libcurlds.dll.vir
C:\Program Files\DriverTuner\license.txt->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\license.txt.vir
C:\Program Files\DriverTuner\msvcp100.dll->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\msvcp100.dll.vir
C:\Program Files\DriverTuner\msvcr100.dll->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\msvcr100.dll.vir
C:\Program Files\DriverTuner\setup.dat->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\setup.dat.vir
C:\Program Files\DriverTuner\unins000.dat->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\unins000.dat.vir
C:\Program Files\DriverTuner\unins000.exe->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\unins000.exe.vir
C:\Program Files\DriverTuner\zlibwapi.dll->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\zlibwapi.dll.vir
C:\Program Files\DriverTuner\update\update.EXE->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\update\update.EXE.vir
C:\Program Files\DriverTuner\update\update.LOG->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\update\update.LOG.vir
C:\Program Files\DriverTuner\update\update.URS->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\update\update.URS.vir
C:\Program Files\DriverTuner\update\UpdateLang.ini->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\update\UpdateLang.ini.vir
C:\Program Files\DriverTuner\image\uninstall_btn_de.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_btn_de.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_btn_en.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_btn_en.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_btn_es.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_btn_es.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_btn_fr.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_btn_fr.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_btn_it.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_btn_it.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_btn_jp.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_btn_jp.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_btn_pt.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_btn_pt.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_main_de.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_main_de.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_main_en.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_main_en.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_main_es.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_main_es.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_main_fr.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_main_fr.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_main_it.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_main_it.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_main_jp.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_main_jp.bmp.vir
C:\Program Files\DriverTuner\image\uninstall_main_pt.bmp->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\image\uninstall_main_pt.bmp.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c.zip->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c.zip.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\AGP440.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\AGP440.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\AMDAGP.SYS->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\AMDAGP.SYS.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\isapnp.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\isapnp.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\machine.inf->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\machine.inf.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\machine.PNF->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\machine.PNF.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\msisadrv.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\msisadrv.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\mssmbios.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\mssmbios.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\NV_AGP.SYS->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\NV_AGP.SYS.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\pci.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\pci.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\SISAGP.SYS->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\SISAGP.SYS.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\streamci.dll->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\streamci.dll.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\swenum.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\swenum.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\termdd.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\termdd.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\ULIAGPKX.SYS->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\ULIAGPKX.SYS.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\vdrvroot.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\vdrvroot.sys.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\VIAAGP.SYS->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\VIAAGP.SYS.vir
C:\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\volmgr.sys->C:\AdwCleaner\Quarantine\C\Program Files\DriverTuner\download\7b68ebfd1e2fd876ffdf4c6f4f963c2c\volmgr.sys.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome.manifest->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome.manifest.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\install.rdf->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\install.rdf.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\faststart.update.rdf->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\faststart.update.rdf.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\ff.update.rdf->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\ff.update.rdf.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\istart.update.rdf->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\istart.update.rdf.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\istart_ffnt#5.3.6.xpi->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\istart_ffnt#5.3.6.xpi.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\istart_ffnt.xpi->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\istart_ffnt.xpi.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\lightning.update.rdf->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\updateinfo\lightning.update.rdf.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\addonmanager.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\addonmanager.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\aes.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\aes.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\config.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\config.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\dialogs.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\dialogs.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\last_tab.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\last_tab.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\misc.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\misc.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\properties.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\properties.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\remoterequest.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\remoterequest.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\restoreprefs.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\restoreprefs.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\settings.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\modules\settings.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\defaults\preferences\fvd.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\defaults\preferences\fvd.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\defaults\preferences\preferences.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\defaults\preferences\preferences.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\default_logo.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\default_logo.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\googlelogo.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\googlelogo.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\google_trends.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\google_trends.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\icon.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\icon.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\loading.gif->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\loading.gif.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\logo.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\logo.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\newtab.ico->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\newtab.ico.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\simple.css->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\simple.css.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\style.css->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\skin\style.css.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\zh-TW\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\zh-TW\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\zh-CN\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\zh-CN\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\vi\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\vi\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\tr\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\tr\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\ru-MO\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\ru-MO\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\ru\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\ru\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\pt-BR\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\pt-BR\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\pl\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\pl\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\it-CH\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\it-CH\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\it\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\it\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-LU\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-LU\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-CH\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-CH\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-CA\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-CA\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-BE\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr-BE\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\fr\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\es-419\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\es-419\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\es\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\es\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\en-US\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\en-US\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\en\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\locale\en\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\index.html->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\index.html.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\quick_start.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\quick_start.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\quick_start.xul->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\quick_start.xul.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\js.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\js.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\pack\common.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\pack\common.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\pack\ga.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\pack\ga.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\pack\xagainit.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\pack\xagainit.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\hotSearch.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\hotSearch.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\mostgrid.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\mostgrid.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\search.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\search.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\stat.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\module\stat.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\lib\doT.min.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\lib\doT.min.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\lib\jquery.autocomplete.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\js\lib\jquery.autocomplete.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\speed_dial.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\speed_dial.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\about_blank_hook.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\about_blank_hook.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\misc.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\misc.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\popup_image_helper.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\popup_image_helper.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\urlrequestor.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\istart_ffnt@gmail.com\chrome\content\include\tools\urlrequestor.js.vir
C:\Users\Public\Desktop\DriverTuner.lnk->C:\AdwCleaner\Quarantine\C\Users\Public\Desktop\DriverTuner.lnk.vir
C:\Program Files\Mozilla Firefox\browser\searchplugins\istartsurf.xml->C:\AdwCleaner\Quarantine\C\Program Files\Mozilla Firefox\browser\searchplugins\istartsurf.xml.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\user.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\user.js.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\settings.xml->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\settings.xml.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\ad_generic.jpg->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\ad_generic.jpg.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\close.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\close.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\close_md.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\close_md.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\close_mo.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\close_mo.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\close_pu.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\close_pu.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\close_pu_md.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\close_pu_md.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\close_pu_mo.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\close_pu_mo.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\Logo.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\Logo.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\min.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\min.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\min_md.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\min_md.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\min_mo.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\min_mo.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\progress_glow.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\progress_glow.png.vir
C:\Program Files\Common Files\ParetoLogic\UUS3\Images\topbar_gradient.png->C:\AdwCleaner\Quarantine\C\Program Files\Common Files\ParetoLogic\UUS3\Images\topbar_gradient.png.vir
C:\Users\Kim\AppData\Local\WikiBrowser\extension.crx->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Local\WikiBrowser\extension.crx.vir
C:\Users\Kim\AppData\Local\WikiBrowser\ShortcutsReplacer.exe->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Local\WikiBrowser\ShortcutsReplacer.exe.vir
C:\Users\Kim\AppData\Local\WikiBrowser\Uninstaller.exe->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Local\WikiBrowser\Uninstaller.exe.vir
C:\Users\Kim\AppData\Local\WikiBrowser\Temp\source2020_1448\chrome.7z->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Local\WikiBrowser\Temp\source2020_1448\chrome.7z.vir
C:\Users\Kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain Help.url->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain Help.url.vir
C:\Users\Kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain.url->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceFountain\PriceFountain.url.vir
C:\Users\Kim\Documents\PC Speed Maximizer\CookieExclusions.txt->C:\AdwCleaner\Quarantine\C\Users\Kim\Documents\PC Speed Maximizer\CookieExclusions.txt.vir
C:\Users\Kim\Documents\PC Speed Maximizer\Minecraft60.png->C:\AdwCleaner\Quarantine\C\Users\Kim\Documents\PC Speed Maximizer\Minecraft60.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome.manifest->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome.manifest.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\install.rdf->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\install.rdf.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\addonmanager.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\addonmanager.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\aes.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\aes.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\config.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\config.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\dialogs.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\dialogs.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\last_tab.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\last_tab.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\misc.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\misc.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\properties.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\properties.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\remoterequest.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\remoterequest.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\restoreprefs.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\restoreprefs.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\settings.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\modules\settings.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\defaults\preferences\fvd.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\defaults\preferences\fvd.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\defaults\preferences\preferences.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\defaults\preferences\preferences.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\default_logo.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\default_logo.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\googlelogo.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\googlelogo.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\google_trends.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\google_trends.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\icon.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\icon.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\loading.gif->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\loading.gif.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\logo.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\logo.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\luck.png->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\luck.png.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\newtab.ico->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\newtab.ico.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\simple.css->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\simple.css.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\style.css->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\skin\style.css.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\zh-TW\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\zh-TW\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\zh-CN\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\zh-CN\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\vi\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\vi\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\tr\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\tr\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\ru-MO\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\ru-MO\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\ru\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\ru\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\pt-BR\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\pt-BR\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\pl\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\pl\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\it-CH\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\it-CH\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\it\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\it\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-LU\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-LU\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-CH\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-CH\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-CA\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-CA\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-BE\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr-BE\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\fr\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\es-419\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\es-419\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\es\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\es\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\en-US\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\en-US\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\en\locale.properties->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\locale\en\locale.properties.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\awesome.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\awesome.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\awesome.xul->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\awesome.xul.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\index.html->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\index.html.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\quick_start.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\quick_start.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\quick_start.xul->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\quick_start.xul.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\js.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\js.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\pack\common.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\pack\common.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\pack\ga.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\pack\ga.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\pack\xagainit.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\pack\xagainit.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\hotSearch.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\hotSearch.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\mostgrid.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\mostgrid.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\search.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\search.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\stat.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\module\stat.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\lib\doT.min.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\lib\doT.min.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\speed_dial.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\speed_dial.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\about_blank_hook.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\about_blank_hook.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\misc.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\misc.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\popup_image_helper.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\popup_image_helper.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\urlrequestor.js->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\quick_searchff@gmail.com\chrome\content\include\tools\urlrequestor.js.vir
C:\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Roaming\Mozilla\Firefox\Profiles\wemrdto8.default\Extensions\{b6a94784-0ffb-4121-88c6-435139067ee2}.xpi.vir
C:\Users\Kim\AppData\Local\WikiUpdate.exe->C:\AdwCleaner\Quarantine\C\Users\Kim\AppData\Local\WikiUpdate.exe.vir

schrauber 20.07.2015 07:52
Avast abschalten, FRST laden und laufen lassen. Und Logs in Codetags posten:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:02 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131