PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Kontrola logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=136411

Stránka 1 z 3

Kontrola logu

Napsal: 16 črc 2014 21:04
od DzuZi
Zdravím, žádám o kontrolu Logu z HJT

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:01:17, on 17.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)

FIREFOX: 30.0 (cs)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\regsvr32.exe
C:\Users\Uio\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\ComplexWebServer\bin\ServiceDirect.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\Uio\AppData\Roaming\Identities\AppServices.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Norpalla\bin\Norpalla.BrowserAdapter.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
C:\Program Files (x86)\PSPad editor\PSPad.exe
C:\Users\Uio\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... A_5JT21HCR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=16194
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... A_5JT21HCR
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp ... A_5JT21HCR
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: CrossriderApp0059568 - {11111111-1111-1111-1111-110511951168} - C:\Program Files (x86)\HD-V1.8\HD-V1.8-bho.dll
O2 - BHO: Norpalla - {18b20944-f54e-4509-88fa-f0ad137bf8de} - C:\Program Files (x86)\Norpalla\Norpallabho.dll
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [ComplexWebServer] "C:\ComplexWebServer\bin\ServiceDirect.exe" /RUNHIDE /CONF="C:\ComplexWebServer\bin\ServiceDirect.conf"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [MSStp] C:\Windows\inf\msstp.vbe
O4 - HKLM\..\Run: [mnclecsjSrv] C:\Windows\system32\mnclecsj.vbe
O4 - HKCU\..\Run: [reg_svr] "C:\Windows\SysWoW64\regsvr32.exe" /s "C:\Users\Uio\AppData\Roaming\gleam\nvm.dll"
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Uio\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Uio\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Unknown file in Winsock LSP: c:\windows\system32\safeips.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\safeips.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\safeips.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\safeips.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\safeips.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/s ... wflash.cab
O20 - AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: CWS_Apache_80 - Apache Software Foundation - C:\ComplexWebServer\apache\bin\apache.exe
O23 - Service: CWS_MySQL_3306 - Unknown owner - C:\ComplexWebServer\mysql\bin\mysqld-nt.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: SafeIPS - SafeIP - C:\Program Files (x86)\SafeIP\SafeIPs.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update Norpalla - Unknown owner - C:\Program Files (x86)\Norpalla\updateNorpalla.exe
O23 - Service: Util Norpalla - Unknown owner - C:\Program Files (x86)\Norpalla\bin\utilNorpalla.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - Fuyu LIMITED - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10542 bytes


Díky :)

Re: Kontrola logu

Napsal: 16 črc 2014 21:30
od memphisto
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Re: Kontrola logu

Napsal: 16 črc 2014 22:38
od DzuZi
Ty logy se tu nevejdou, takže je hodím na http://leteckaposta.cz/

Malwarebytes: http://leteckaposta.cz/947218722

AdwCleaner: http://leteckaposta.cz/309881664

a pročistil jsem historii prohlížeče s ATF Cleaner

Re: Kontrola logu

Napsal: 16 črc 2014 22:41
od Orcus
Logy rozděl na více částí, po letecký poště to opravdu lovit nebudeme.

Díky.

Re: Kontrola logu

Napsal: 16 črc 2014 22:44
od DzuZi
Dobře,

Adw Cleaner log: # AdwCleaner v3.215 - Report created 17/07/2014 at 22:19:01
# Updated 09/07/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Uio - UIOBY
# Running from : C:\Users\Uio\Desktop\adwcleaner_3.215.exe
# Option : Scan

***** [ Services ] *****

Service Found : be0fb33b
Service Found : globalUpdate
Service Found : globalUpdatem
Service Found : IePluginServices
Service Found : nethfdrv
Service Found : NethxxpService
Service Found : ServiceUpdater

***** [ Files / Folders ] *****

File Found : C:\Windows\System32\drivers\nethfdrv.sys
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-1
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-10
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-11
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-2
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-3
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-4
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5_user
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-6
File Found : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-7
File Found : C:\Windows\System32\Tasks\AmiUpdXp
File Found : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
File Found : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
File Found : C:\Windows\SysWOW64\hfpapi.dll
File Found : C:\Windows\SysWOW64\installd.exe
File Found : C:\Windows\SysWOW64\nethtsrv.exe
File Found : C:\Windows\SysWOW64\netupdsrv.exe
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-1.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-10.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-11.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-2.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-3.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-4.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5_user.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-6.job
File Found : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-7.job
File Found : C:\Windows\Tasks\AmiUpdXp.job
File Found : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
File Found : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
Folder Found : C:\Program Files (x86)\driver-soft
Folder Found : C:\Program Files (x86)\globalUpdate
Folder Found : C:\Program Files (x86)\supporter
Folder Found : C:\Program Files (x86)\SupTab
Folder Found : C:\Program Files\PCDApp
Folder Found : C:\ProgramData\IePluginServices
Folder Found : C:\ProgramData\WindowsMangerProtect
Folder Found : C:\Users\Administrator\AppData\Local\Chromatic Browser
Folder Found : C:\Users\Administrator\AppData\Local\torch
Folder Found : C:\Users\Guest\AppData\Local\Chromatic Browser
Folder Found : C:\Users\Guest\AppData\Local\torch
Folder Found : C:\Users\Uio\AppData\Local\globalUpdate
Folder Found : C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi
Folder Found : C:\Users\Uio\AppData\Local\Chromatic Browser
Folder Found : C:\Users\Uio\AppData\Local\torch
Folder Found : C:\Users\Uio\AppData\Local\webplayer
Folder Found : C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com
Folder Found : C:\Users\Uio\AppData\Roaming\webssearches

***** [ Shortcuts ] *****

Shortcut Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk ( hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR )
Shortcut Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Player\Uninstall.lnk ( _?=C:\Users\Uio\AppData\Local\WebPlayer\FLV Player )
Shortcut Found : C:\Users\Uio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk ( hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR )
Shortcut Found : C:\Users\Uio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk ( hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR )
Shortcut Found : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk ( hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR )
Shortcut Found : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ( hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR )
Shortcut Found : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk ( hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR )
Shortcut Found : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk ( hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR )

***** [ Registry ] *****

Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc ... A_5JT21HCR
Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~1.DLL
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\installedbrowserextensions
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511951168}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511951168}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511951168}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\powerpack
Key Found : [x64] HKCU\Software\installedbrowserextensions
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : [x64] HKCU\Software\powerpack
Key Found : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4F77-802C-5B295919C205}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952268}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059568.BHO
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059568.BHO.1
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059568.Sandbox
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0059568.Sandbox.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955568}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956668}
Key Found : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : HKLM\SOFTWARE\Classes\PCProxy.DataContainer
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954468}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Found : HKLM\Software\Driver-Soft
Key Found : HKLM\Software\installedbrowserextensions
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{be0fb33b}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Found : HKLM\Software\SupDp
Key Found : HKLM\Software\SupTab
Key Found : HKLM\Software\supWindowsMangerProtect
Key Found : HKLM\Software\supWPM
Key Found : HKLM\Software\webssearchesSoftware
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952268}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955568}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956668}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : [x64] HKLM\SOFTWARE\installedbrowserextensions
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17207

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}

-\\ Mozilla Firefox v30.0 (cs)

[ File : C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\prefs.js ]

Line Found : user_pref("extensions.af80af4ec42b9429d99b04078ec7cf86444882d2088654b13b79eae8470d9a955com59568.59568.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.c[...]
Line Found : user_pref("extensions.af80af4ec42b9429d99b04078ec7cf86444882d2088654b13b79eae8470d9a955com59568.59568.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Line Found : user_pref("extensions.crossrider.bic", "1473b97ec964ad61aac9766ad9bd6ade");

-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}
Found [Startup_urls] : hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Found [Homepage] : hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Found [Extension] : cdihkdldaicijakhchgojcokhpamkibi

*************************

AdwCleaner[R0].txt - [16992 octets] - [17/07/2014 22:19:01]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [17053 octets] ##########

Re: Kontrola logu

Napsal: 16 črc 2014 22:47
od DzuZi
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 17.7.2014
Scan Time: 21:52:04
Logfile: Logs.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.16.07
Rootkit Database: v2014.07.14.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Uio

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 287281
Time Elapsed: 23 min, 27 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 7
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, 1584, , [97a04759d4a73006419fce8f59a8f30d]
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 1672, , [8bac9808c3b81f17864c6e22827fa35d]
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\utilNorpalla.exe, 5448, , [8fa808987b00e25499337af3669b837d]
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\updateNorpalla.exe, 3452, , [a394c8d8e09b87af06c6c1acff021ae6]
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.BrowserAdapter.exe, 4432, , [989f534dcab14bebb5386378917133cd]
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.PurBrowse64.exe, 2404, , [989f534dcab14bebb5386378917133cd]
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-10.exe, 2556, , [b681bbe559221c1a21f69c1abe446e92]

Modules: 2
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, , [4aedb6eab3c8f640ac799fee2bd60ff1],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}.dll, , [989f534dcab14bebb5386378917133cd],

Registry Keys: 100
PUP.Optional.IePluginService.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginServices, , [97a04759d4a73006419fce8f59a8f30d],
PUP.Optional.WPM.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, , [8bac9808c3b81f17864c6e22827fa35d],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WindowsMangerProtect, , [8bac9808c3b81f17864c6e22827fa35d],
PUP.Optional.Norpalla.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util Norpalla, , [8fa808987b00e25499337af3669b837d],
PUP.Optional.Norpalla.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Norpalla, , [a394c8d8e09b87af06c6c1acff021ae6],
PUP.Optional.Amonetize, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NetHttpService, , [c275ced2dc9f82b4353f4252db269769],
PUP.Optional.Amonetize, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ServiceUpdater, , [cf68d5cbaecd41f5caabd3c19b6649b7],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [60d7445c5c1f3bfbd7cd97f65da537c9],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, , [60d7445c5c1f3bfbd7cd97f65da537c9],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{18b20944-f54e-4509-88fa-f0ad137bf8de}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{E766A177-5525-448E-8CA8-76B0E3CC7295}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{DD85F972-6C6F-482E-A3DB-82FABC0AA142}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DD85F972-6C6F-482E-A3DB-82FABC0AA142}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E766A177-5525-448E-8CA8-76B0E3CC7295}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{18B20944-F54E-4509-88FA-F0AD137BF8DE}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.Norpalla.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{18B20944-F54E-4509-88FA-F0AD137BF8DE}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.Norpalla.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{18B20944-F54E-4509-88FA-F0AD137BF8DE}, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CE681A67-9477-CBE6-EB9D-FE534875F98D}, , [092ed3cdfe7def47ac35cb8808fab24e],
PUP.Optional.Skytech.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\webssearches uninstall, , [9d9ac1dfdba0c07602233c51e21f4ab6],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3A8C08FC-AFB9-4CC1-999C-119667210ED7}, , [54e3c8d89fdce0565efd3417a95718e8],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}, , [54e3c8d89fdce0565efd3417a95718e8],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}, , [54e3c8d89fdce0565efd3417a95718e8],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3A8C08FC-AFB9-4CC1-999C-119667210ED7}, , [54e3c8d89fdce0565efd3417a95718e8],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}, , [e057544cdd9ec96d2948a79c2ed22cd4],
PUP.Optional.OffersWizard.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\inethnfd, , [4beca4fcd5a644f2c58f0cb2b54d619f],
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\nethfdrv, , [da5d90107803e1557262ab1880824fb1],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Norpalla, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{ac225167-00fc-452d-94c5-bb93600e7d9a}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}Gw64, , [f344e1bf2358d165178323f8749003fd],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059568.BHO, , [66d16b359fdce155b7d8778518eba45c],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059568.BHO.1, , [dd5ac1df88f32412b5da2fcd9c676898],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059568.Sandbox, , [3700bbe5413a39fd1f70b24a0ef50af6],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059568.Sandbox.1, , [51e68f11de9dc4729bf49666e51e4bb5],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, , [84b337691566ee48073c38a116ec4fb1],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [90a78e12ceade84ebd9dc740fb09c937],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\HD-V1.8, , [4fe8ccd46813181e351df6d06b97d62a],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\Norpalla, , [69cec3ddf18a112508e72dae10f27c84],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [44f3930d730863d32bb4819aae56d12f],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, , [33042f712f4cbb7b859fe9f0ff03b34d],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0059568.BHO, , [f146950b9be08da9f09f78843dc6837d],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0059568.BHO.1, , [f641960a5229a88e3d5217e5f013c937],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0059568.Sandbox, , [d85fe0c0126975c1dbb4cc30ed1638c8],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0059568.Sandbox.1, , [989f8d135a21b185850a897332d18080],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [70c719877902b185d41f4f6e818149b7],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\19979, , [3afd4b5599e2ed490241e1f8669c3cc4],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [c6713769f68581b52832010664a0d12f],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5F189DF5-2D05-472B-9091-84D9848AE48B}{be0fb33b}, , [2d0a2d73532804323fdbe6db6c9638c8],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8, , [6ccbf9a7d9a28aac4e02be08c63c0000],
PUP.Optional.Norpalla.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Norpalla, , [e057fba5e3984ee821cd2ead06fca15f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [2a0dced2e7942313bf4649c77a8a1be5],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8, , [1c1bd7c9ccaf181e82cedde91ae842be],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, , [47f0960ac3b888aedc68bf1a9b674bb5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\InfoHD-V1.8, , [3bfc0997c9b2ac8a452b8d345ea4b54b],
PUP.Optional.Qone8, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [9b9c851badce7fb7fd5c2fd86d978977],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HD-V1.8, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110511951168}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544954468}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555955568}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566956668}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555955568}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566956668}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544954468}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511951168}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511951168}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511951168}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522952268}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220522952268}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511951168}\INPROCSERVER32, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511951168}, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, , [c176c4dc9edd1422aa3b546614ee33cd],

Registry Values: 4
Trojan.Agent.SCR, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|MSStp, C:\Windows\inf\msstp.vbe, , [f0475b4596e5d75fba11b31ff70b6d93]
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [70c719877902b185d41f4f6e818149b7]
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NETHTTPSERVICE|ImagePath, C:\Windows\SysWOW64\nethtsrv.exe, , [4cebb0f0c1ba3ff760852beffe067c84]
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SERVICEUPDATER|ImagePath, C:\Windows\SysWOW64\netupdsrv.exe, , [132498081e5d191dd11555c5e12343bd]

Registry Data: 12
PUP.Optional.Skytech.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\PROGRA~2\SupTab\SEARCH~1.DLL, Good: (), Bad: (C:\PROGRA~2\SupTab\SEARCH~1.DLL),,[3007a3fdff7c1a1c190cfb9213eebb45]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... A_5JT21HCR, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... A_5JT21HCR),,[0d2a138d3c3f2313ffbd65340cf857a9]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}, Good: (www.google.com), Bad: (http://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}),,[2017643c374489ad5162d2c7c73daa56]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://istart.webssearches.com/?type=hp ... A_5JT21HCR, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... A_5JT21HCR),,[6fc8c2de770459dd5061ff9a44c011ef]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://istart.webssearches.com/?type=hp ... A_5JT21HCR, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... A_5JT21HCR),,[6ccb970992e965d1e0d502978e764db3]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[9f98633dec8f4ceaf7ed4c57f60e5ba5]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... A_5JT21HCR, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... A_5JT21HCR),,[8bacbae6265560d64478a9f0f212b14f]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}, Good: (www.google.com), Bad: (http://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}),,[85b2f1aff289be78179c85149272b24e]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://istart.webssearches.com/?type=hp ... A_5JT21HCR, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... A_5JT21HCR),,[3304a1ff522943f3575aedac4abaa45c]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://istart.webssearches.com/?type=hp ... A_5JT21HCR, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... A_5JT21HCR),,[10274a56354671c52e874752db299d63]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[b2854858bdbe3ef836aec0e36c9802fe]
PUP.Optional.WebsSearches.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://istart.webssearches.com/?type=hp ... A_5JT21HCR, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... A_5JT21HCR),,[0f28bae6c1ba51e5d9d9cacf34d0fb05]

Folders: 71
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [4beca4fcd5a644f2c58f0cb2b54d619f],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\TEMP, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\defaults, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\defaults\preferences, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\userCode, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\locale, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\locale\en-US, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices, , [45f28917285378bed5c0b303ce34a15f],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update, , [45f28917285378bed5c0b303ce34a15f],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\userCode, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\icons, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\icons\actions, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\api, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\popupResource, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0, , [7fb83d63f784d6609cfb6355a9591de3],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, , [66d1ccd4ef8c270fc148a217ef1345bb],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\log, , [66d1ccd4ef8c270fc148a217ef1345bb],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, , [66d1ccd4ef8c270fc148a217ef1345bb],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{5FFDE4C3-FA96-43B4-A894-1BFB7FB0167A}, , [c176c4dc9edd1422aa3b546614ee33cd],

Re: Kontrola logu

Napsal: 16 črc 2014 22:48
od DzuZi
..
Files: 436
PUP.Optional.IePluginService.A, C:\ProgramData\IePluginServices\PluginService.exe, , [97a04759d4a73006419fce8f59a8f30d],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\DpInterface32.dll, , [4aedb6eab3c8f640ac799fee2bd60ff1],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, , [8bac9808c3b81f17864c6e22827fa35d],
Trojan.SProtector, C:\Program Files (x86)\Supporter\SupporterSvc.dll, , [d562e6ba6c0f4fe7b7630f53bc454bb5],
Trojan.SProtector, C:\Program Files (x86)\Supporter\Supporter.dll, , [b87f1b859edd0b2b2bee3e24d32ed927],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SearchProtect32.dll, , [3007a3fdff7c1a1c190cfb9213eebb45],
PUP.Optional.Skytech.A, C:\Program Files (x86)\SupTab\SpAPPSv32.dll, , [c671257bfe7dc175a4816e1f10f156aa],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\utilNorpalla.exe, , [8fa808987b00e25499337af3669b837d],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\updateNorpalla.exe, , [a394c8d8e09b87af06c6c1acff021ae6],
PUP.Optional.Amonetize, C:\Windows\SysWOW64\nethtsrv.exe, , [c275ced2dc9f82b4353f4252db269769],
PUP.Optional.Amonetize, C:\Windows\SysWOW64\netupdsrv.exe, , [cf68d5cbaecd41f5caabd3c19b6649b7],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\NorpallaBHO.dll, , [2f08b3edbcbf88aea60861f60ef4629e],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SupTab.dll, , [1a1dc7d903788fa79008cb8dc73bfa06],
PUP.Optional.Skytech.A, C:\Users\Uio\AppData\Roaming\webssearches\UninstallManager.exe, , [9d9ac1dfdba0c07602233c51e21f4ab6],
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumnclecsj.exe, , [52e53d63d6a540f6c9178120d32ecc34],
PUP.BitCoinMiner, C:\Windows\SysWOW64\lcpmnclecsj.exe, , [8daa336df68526106d185db85ba6a060],
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmnclecsj.exe, , [f3446e326f0c0e282fafc2f0a45d966a],
HackTool.Agent, C:\Users\Uio\Downloads\Bog Final.rar, , [d562d3cdceadba7cc8e0f75b619fe719],
PUP.Optional.Somoto.A, C:\Users\Uio\Downloads\FLVPlayerSetup-N2uwxBNvg.exe, , [fe3940608eed8caa997ec7cb50b1768a],
PUP.Optional.Somoto.A, C:\Users\Uio\Downloads\FLVPlayerSetup-N3pmalz0r.exe, , [48efc5db512a132353c498fa29d859a7],
PUP.Optional.Somoto.A, C:\Users\Uio\Downloads\FLVPlayerSetup-N7ZLQfF6A.exe, , [ba7d3f61fa81f83e2fe8dcb6867bd32d],
PUP.Optional.Bandoo, C:\Users\Uio\Downloads\iLividSetup-r1720-n-bc.exe, , [3cfbdfc1bfbcc274e956d83946bb58a8],
PUP.Optional.Amonetize.A, C:\Users\Uio\AppData\Local\27082\a11049.exe, , [d661dbc524570e286d04cb7809f70000],
PUP.Optional.Amonetize.A, C:\Users\Uio\AppData\Local\30198\a20870.exe, , [54e3c8d89fdce0565efd3417a95718e8],
PUP.Optional.Amonetize.A, C:\Users\Uio\AppData\Local\4673\a26274.exe, , [e057544cdd9ec96d2948a79c2ed22cd4],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-1, , [6dca208090ebeb4b13db714caf53a858],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-10, , [f641b0f0156694a215d9269713efdd23],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-11, , [61d6168aabd0b08646a83d80ff03df21],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-2, , [1b1c6c34542762d4c628e9d41ae8ae52],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-3, , [85b21987f08bdd595797912c08fa8c74],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-4, , [bc7b534d81fa76c0628c98259d654bb5],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5, , [92a5b0f09cdf48ee1ed0526bce3415eb],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5_user, , [ee493769017a56e0c42a15a853af3cc4],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-6, , [092e445c81fadd5920ce6b52df238d73],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-7, , [e552f6aa4f2cab8ba14da21b768cf50b],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\ver.xml, , [4beca4fcd5a644f2c58f0cb2b54d619f],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\data.xml, , [4beca4fcd5a644f2c58f0cb2b54d619f],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe, , [4beca4fcd5a644f2c58f0cb2b54d619f],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0.localstorage, , [1522ddc3d5a6dc5a6411309142c0f808],
PUP.SoftwareUpdater.A, C:\Windows\System32\Tasks\AmiUpdXp, , [6ccb811fd7a4ec4a357869592cd6ab55],
PUP.Optional.NetworkUpdate.A, C:\Windows\System32\drivers\nethfdrv.sys, , [da5d90107803e1557262ab1880824fb1],
Trojan.Agent.SCR, C:\Windows\inf\msstp.vbe, , [f0475b4596e5d75fba11b31ff70b6d93],
PUP.Optional.Norpalla.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}.xpi, , [1a1d8818de9d63d3e7648d4b5aa85ca4],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\Norpalla.ico, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\0, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\7za.exe, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\Norpalla.BrowserFilter.Helper.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\NorpallaBrowserFilter.exe, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\NorpallaUn.exe, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\NorpallaUninstall.exe, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\updateNorpalla.InstallState, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\7za.exe, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\BrowserAdapterS.7z, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.BrowserAdapter.exe, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.PurBrowse64.exe, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.PurBrowseG.zip, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\NorpallaBAApp.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\sqlite3.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\utilNorpalla.InstallState, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.Bromon.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.BroStats.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.BrowserAdapterS.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.CompatibilityChecker.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.FFUpdate.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.IEUpdate.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.PurBrowseG.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.Repmon.dll, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\TEMP\mfs223F.tmp, , [989f534dcab14bebb5386378917133cd],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\install.data, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\DpInterface64.dll, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\ient.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\RSHP.exe, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\SpAPPSv64.dll, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\uninstall.exe, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\WebDataJs, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\data.html, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE.html, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\indexIE8.html, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\main.css, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\ver.txt, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\arrow.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\default_logo.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\googlelogo2.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\google_trends.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon128.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon16.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\icon48.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\loading.gif, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\logo32.ico, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\img\weather\0.png, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\common.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ga.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\ie8.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\js.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\library.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\js\xagainit.js, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Optional.SupTab.A, C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json, , [0f28059b6a1145f1e884568c8f73ca36],
PUP.Software.Updater, C:\Windows\Tasks\AmiUpdXp.job, , [a493c8d8d3a8ae88062c529bd42ef60a],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}Gw64.sys, , [f344e1bf2358d165178323f8749003fd],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-1.job, , [bf787b256417e4526b13b369d3316d93],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-10.job, , [22159d032e4d6bcb8df154c8e71d2cd4],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-11.job, , [7dba5f4168131e18c6b82cf0897bbc44],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-2.job, , [52e5712f28531026730bcf4d7094e11f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-3.job, , [4ceb3868bac179bda8d6b6667f854ab6],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-4.job, , [1621e3bda3d8bb7b19650c1025dfd12f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5.job, , [b97e09974536c2742757e63617edba46],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5_user.job, , [96a1aff13c3fa09689f51507ea1a8779],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-6.job, , [310640600d6e1323621c968619eb4bb5],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-7.job, , [7bbca2fe1c5fb77f0b734ad2867ef30d],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, , [b7805f4138434ee8e0b42bf18f75ea16],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, , [db5cc2de38432511ade89b81ce36ca36],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, , [15226937ee8dd85eaceacc5052b238c8],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, , [80b7f1af06752e08afe848d42fd5d12f],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome.manifest, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\install.rdf, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\11e3bcfbe77b09dc64bd765a214b301a.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\386e94e5d9c589b35aa69a06bbf1fd9b.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\52539c77b0ad7bd8dd8d695e0f313372.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\background.html, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\bcfc32072c4a3d2c9f9b4975f94c2e88.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\browser.xul, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\dialog.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\f8048c7592f321c7dba28013e006de6c.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\ffCoreFilesIndex.txt, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\options.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\options.xul, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\search_dialog.xul, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\98e20a7fa41b0cb0a3f9cbf15d07106f.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\0fd5a00c12521f82dcf7fdb0987f1f01.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\209d5f0c16d5226333f77421a525bd2d.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\20d17314e9722de02f639b9823d43436.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\2136734bcfd173f970f10aa2baa90024.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\23068889ae722eeb1f320e4fa3626a3a.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\2b32929355fdc6df23d113640402a922.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\7e866086bdb6d5803b22f75f55884763.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\941ff2c0be661d109106a866930746e9.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\a278fbd4ce8656cc7664dcb7f864ba37.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\a6e65b3d6aa4b63b325c38f6d050dcf0.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\b2012e70271afe4a1e8d34696e384622.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\b63f20fc1428c6b25fcc89edfce7efc5.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\f1e3d71472c4a5416acfeefb364aec01.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\f3f0cea30aa8da13b7f486f0a69fc501.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api\ffc8c89d9a5ea5c28f663653cbdf7317.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\afcddfdcc0258358a8a8b1e75d9ce5ac.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\081afadabc0cdacecef147422cf08d3c.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\155194e221577fd4363d40308891546a.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\2911ccc08a341abd64c3fdd4cf5a3852.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\2ab3c8601c1657b90cf7b39d24756f22.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\3058fd940b280eb2cff6c0284ced7957.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\3802118db2e19fc0199b8790577504c3.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\477504ef8ba7ba85f54c7cd79a4caee4.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\49b4fd81e5cd40322ccbd27e7af8c7b4.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\59679440f4ccfcfe44a712f129a42fc0.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\6a1991911637a0e263f11852076ccf1a.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\6a588d6a74362587219f47f97099ca8a.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\808deffbefd5142f10aed17ac0492fab.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\9f1e540724a191fafd104557147b378c.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\be55da7a958ec14b603a7f96fae9f20f.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\bfe880f6c795245b5a2e609ffe3fc14f.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\d53559dcd1b717ea1ba3ec6b616ce619.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\d94039628cee6ab2f435fa6c159b2290.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\e821aac350cd1d22cbfc1129983d4f29.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\f84feb90a048dc8f55011485e7cb7f02.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core\installer.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\defaults\preferences\prefs.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\manifest.xml, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins.json, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\246.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\1.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\102.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\104.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\119.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\123.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\13.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\14.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\16.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\17.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\177.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\178.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\179.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\180.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\182.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\183.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\184.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\191.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\195.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\198.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\199.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\207.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\21.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\22.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\220.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\221.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\223.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\226.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\231.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\232.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\242.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\244.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\260.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\262.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\263.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\268.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\273.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\275.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\28.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\281.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\286.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\287.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\289.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\4.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\47.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\64.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\7.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\72.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\78.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\9.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\91.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\93.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins\98.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\userCode\background.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\userCode\extension.js, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\locale\en-US\translations.dtd, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\button1.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\button2.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\button3.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\button4.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\button5.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\crossrider_statusbar.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\icon128.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\icon16.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\icon24.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\icon48.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\panelarrow-up.png, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\popup.html, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\skin.css, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin\update.css, , [e4533b65552664d2ca7a3c6a6b97b34d],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\136.json, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\MessageBox.xml, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\uninstallDlg2.xml, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\bg.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\bg1.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\bk_shadow.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\button.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\button1.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\checkbox.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\checkbox_select.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\checked.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\close.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\loading_bg.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\loading_light.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\min.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\scrollbar.bmp, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\Thumbs.db, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\unchecked.png, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code\code1.jpg, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code\code2.jpg, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code\code3.jpg, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code\code4.jpg, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code\code5.jpg, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code\code6.jpg, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Roaming\webssearches\images\code\Thumbs.db, , [70c7b6ea2556f541ef811b8cb64ccc34],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\1293297481.mxaddon, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\360-59568.crx, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\59568.crx, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\59568.xpi, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-10.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-11.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-2.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-3.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-4.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-5.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74.crx, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\Interop.IWshRuntimeLibrary.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\Newtonsoft.Json.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\SuperSocket.ClientEngine.Common.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\SuperSocket.ClientEngine.Core.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\SuperSocket.ClientEngine.Protocol.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\Uninstall.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\utils.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\WebSocket4Net.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\background.html, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\bgNova.html, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-bg.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-bho.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-bho64.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-codedownloader.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-nova.dll, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-nova.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-novainstaller.exe, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8.ico, , [b681bbe559221c1a21f69c1abe446e92],
PUP.Optional.IePluginServices.A, C:\ProgramData\IePluginServices\update\conf, , [45f28917285378bed5c0b303ce34a15f],

Re: Kontrola logu

Napsal: 16 črc 2014 22:50
od DzuZi
..
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\background.html, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\chromeCoreFilesIndex.txt, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\manifest.json, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\popup.html, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\Settings.json, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\manifest.xml, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins.json, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\232.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\1.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\102.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\104.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\119.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\123.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\13.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\14.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\155.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\17.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\177.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\178.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\179.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\180.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\182.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\183.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\184.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\19.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\191.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\195.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\198.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\199.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\207.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\21.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\22.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\220.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\221.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\223.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\231.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\242.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\244.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\246.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\260.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\262.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\263.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\267.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\273.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\275.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\28.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\281.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\286.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\287.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\4.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\47.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\64.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\7.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\72.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\78.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\80.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\9.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\91.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\93.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\plugins\97.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\userCode\background.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\extensionData\userCode\extension.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\icons\icon128.png, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\icons\icon16.png, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\icons\icon48.png, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\icons\actions\1.png, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\background.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\main.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\platformVersion.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\api\chrome.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\api\cookie.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\api\message.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\api\monitor.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\api\pageAction.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\api\pageActionBG.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\app_api.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\bg_app_api.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\consts.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\cookie_store.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\crossriderAPI.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\delegate.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\events.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\extensionDataStore.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\installer.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\logFile.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\logging.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\onBGDocumentLoad.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\reports.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\storageWrapper.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\updateManager.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\util.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\xhr.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\popupResource\newPopup.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi\1.26.53_0\js\lib\popupResource\popup.js, , [67d0ecb44437f73f90054d6b956db34d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\000008.ldb, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\000333.log, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\000334.ldb, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\CURRENT, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\LOCK, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\LOG, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\LOG.old, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\MANIFEST-000331, , [1324f1afb6c5fe38e5b14f695aa841bf],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0\12, , [7fb83d63f784d6609cfb6355a9591de3],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0\12-journal, , [7fb83d63f784d6609cfb6355a9591de3],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\log\ProtectWindowsManager_2014-07-11[16-04-04-607].log, , [66d1ccd4ef8c270fc148a217ef1345bb],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, , [66d1ccd4ef8c270fc148a217ef1345bb],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, , [c176c4dc9edd1422aa3b546614ee33cd],
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://istart.webssearches.com/?type=hppp&ts=1405120928&from=amt&uid=ST3120022A_5JT21HCR" ],), ,[0e296d3395e6e94d961d5181f60e23dd]
PUP.Optional.WebsSearches.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://istart.webssearches.com/?type=hppp&ts=1405120928&from=amt&uid=ST3120022A_5JT21HCR",), ,[82b5cbd57efdaf875d57fed42ed6e719]
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "1473b97ec964ad61aac9766ad9bd6ade");), ,[86b1eab6403b8bab44d2cb081be90000]

Physical Sectors: 0
(No malicious items detected)


(end)

Re: Kontrola logu

Napsal: 17 črc 2014 09:35
od jaro3
Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Re: Kontrola logu

Napsal: 17 črc 2014 12:12
od DzuZi
AdwCleaner: (mimochodem, Adw mi po restartu sám otevřel v *.txt log)

# AdwCleaner v3.215 - Report created 18/07/2014 at 10:59:34
# Updated 09/07/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Uio - UIOBY
# Running from : C:\Users\Uio\Desktop\adwcleaner_3.215.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : be0fb33b
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
Service Deleted : IePluginServices
Service Deleted : nethfdrv
[#] Service Deleted : NethxxpService
[#] Service Deleted : ServiceUpdater

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\Program Files (x86)\driver-soft
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\supporter
Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Program Files\PCDApp
Folder Deleted : C:\Users\Administrator\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\Uio\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Uio\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Uio\AppData\Local\torch
Folder Deleted : C:\Users\Uio\AppData\Local\webplayer
Folder Deleted : C:\Users\Uio\AppData\Roaming\webssearches
Folder Deleted : C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com
Folder Deleted : C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi
File Deleted : C:\Windows\SysWOW64\hfpapi.dll
File Deleted : C:\Windows\SysWOW64\installd.exe
File Deleted : C:\Windows\SysWOW64\nethtsrv.exe
File Deleted : C:\Windows\SysWOW64\netupdsrv.exe
File Deleted : C:\Windows\System32\drivers\nethfdrv.sys
File Deleted : C:\Windows\Tasks\AmiUpdXp.job
File Deleted : C:\Windows\System32\Tasks\AmiUpdXp
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-1.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-1
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-10.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-10
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-11.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-11
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-2.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-2
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-3.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-3
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-4.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-4
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5_user.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-5_user
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-6.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-6
File Deleted : C:\Windows\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-7.job
File Deleted : C:\Windows\System32\Tasks\6125f106-992d-4924-86a1-6ebd20befa74-7

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Player\Uninstall.lnk
Shortcut Disinfected : C:\Users\Uio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Uio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Uio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\PCProxy.DataContainer
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{be0fb33b}
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059568.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059568.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059568.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059568.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4F77-802C-5B295919C205}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952268}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955568}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956668}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954468}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511951168}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951168}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952268}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955568}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956668}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951168}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\Driver-Soft
Key Deleted : HKLM\Software\installedbrowserextensions
Key Deleted : HKLM\Software\SupDp
Key Deleted : HKLM\Software\SupTab
Key Deleted : HKLM\Software\supWindowsMangerProtect
Key Deleted : HKLM\Software\supWPM
Key Deleted : HKLM\Software\webssearchesSoftware
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : [x64] HKLM\SOFTWARE\installedbrowserextensions
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~1.DLL
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17207

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v30.0 (cs)

[ File : C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\prefs.js ]

Line Deleted : user_pref("extensions.af80af4ec42b9429d99b04078ec7cf86444882d2088654b13b79eae8470d9a955com59568.59568.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.c[...]
Line Deleted : user_pref("extensions.af80af4ec42b9429d99b04078ec7cf86444882d2088654b13b79eae8470d9a955com59568.59568.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1473b97ec964ad61aac9766ad9bd6ade");

-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... JT21HCR&q={searchTerms}
Deleted [Startup_urls] : hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Deleted [Homepage] : hxxp://istart.webssearches.com/?type=hp ... A_5JT21HCR
Deleted [Extension] : cdihkdldaicijakhchgojcokhpamkibi

*************************

AdwCleaner[R0].txt - [17246 octets] - [17/07/2014 22:19:01]
AdwCleaner[R1].txt - [17307 octets] - [18/07/2014 10:57:35]
AdwCleaner[S0].txt - [14316 octets] - [18/07/2014 10:59:34]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14377 octets] ##########

Re: Kontrola logu

Napsal: 17 črc 2014 12:15
od DzuZi
JRT: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by Uio on p  18.07.2014 at 11:12:50,87
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B4B7B084-C607-45BD-8A5E-AFD9DEDD7741}



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Uio\AppData\Roaming\mozilla\firefox\profiles\ya2v70vm.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  18.07.2014 at 11:29:44,44
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

MbAM:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 18.7.2014
Scan Time: 11:32:43
Logfile: Mabclear.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.17.04
Rootkit Database: v2014.07.14.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Uio

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 286480
Time Elapsed: 13 min, 28 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 23
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{18b20944-f54e-4509-88fa-f0ad137bf8de}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{e766a177-5525-448e-8ca8-76b0e3cc7295}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{DD85F972-6C6F-482E-A3DB-82FABC0AA142}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DD85F972-6C6F-482E-A3DB-82FABC0AA142}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{e766a177-5525-448e-8ca8-76b0e3cc7295}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{18B20944-F54E-4509-88FA-F0AD137BF8DE}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.Norpalla.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{18B20944-F54E-4509-88FA-F0AD137BF8DE}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.Norpalla.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{18B20944-F54E-4509-88FA-F0AD137BF8DE}, Quarantined, [c9cf366a9cdfb48206f7a0b7d03215eb],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CE681A67-9477-CBE6-EB9D-FE534875F98D}, Quarantined, [2375dac6c5b6dd59b080ec683dc50ff1],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3A8C08FC-AFB9-4CC1-999C-119667210ED7}, Quarantined, [b9dfdcc4cdaeb48261faaf9c758b08f8],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3A8C08FC-AFB9-4CC1-999C-119667210ED7}, Quarantined, [b9dfdcc4cdaeb48261faaf9c758b08f8],
PUP.Optional.OffersWizard.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\inethnfd, Quarantined, [f5a32f715a21dd59723fc2fcda2834cc],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Norpalla, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{ac225167-00fc-452d-94c5-bb93600e7d9a}, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}Gw64, Quarantined, [ceca2779f982cb6bd924d348699b6d93],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\HD-V1.8, Quarantined, [a0f8247c1a6145f1b6f901c5ba480cf4],
PUP.Optional.Norpalla.A, HKLM\SOFTWARE\WOW6432NODE\Norpalla, Quarantined, [692ff1af8bf03df9311bf1eb2dd5e719],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, Quarantined, [1880c5dbeb9082b4351bcdf11fe30000],
PUP.Optional.Norpalla.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Norpalla, Quarantined, [0a8ed3cd077416200a4337a51be7f20e],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8, Quarantined, [8414fea2017a70c6b9f4b0166d95639d],
PUP.Optional.Norpalla.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Norpalla, Quarantined, [2f69950b3942b38312396379a1618b75],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-2591339397-1149578058-2469315173-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8, Quarantined, [00987d237ffc6dc9208d1ea86c96ea16],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HD-V1.8, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],

Registry Values: 2
Trojan.Agent.SCR, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|MSStp, C:\Windows\inf\msstp.vbe, Quarantined, [e5b3653b58231c1a50d806cdbf43a957]
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, Quarantined, [1880c5dbeb9082b4351bcdf11fe30000]

Registry Data: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[3f591d8380fb999d085d5a4a669eb848]

Folders: 9
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, Quarantined, [f5a32f715a21dd59723fc2fcda2834cc],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\TEMP, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdihkdldaicijakhchgojcokhpamkibi, Quarantined, [c1d7b6ea710ab680459f21972ed4629e],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0, Quarantined, [2177a1ff2f4ce452885ed6e2ee1416ea],

Files: 81
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumnclecsj.exe, Quarantined, [76226f31285323137bb1495939c82cd4],
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmnclecsj.exe, Quarantined, [bcdc762aa4d790a60723f9ba4bb644bc],
HackTool.Agent, C:\Users\Uio\Downloads\Bog Final.rar, Quarantined, [5f39f9a73c3f51e53789d47ed9279e62],
PUP.Optional.Somoto.A, C:\Users\Uio\Downloads\FLVPlayerSetup-N2uwxBNvg.exe, Quarantined, [b0e8d8c85f1c90a6220c167c61a0bb45],
PUP.Optional.Somoto.A, C:\Users\Uio\Downloads\FLVPlayerSetup-N3pmalz0r.exe, Quarantined, [346478281b60a59140ee8909956c02fe],
PUP.Optional.Somoto.A, C:\Users\Uio\Downloads\FLVPlayerSetup-N7ZLQfF6A.exe, Quarantined, [5e3ab2eef388a3931a14a5edb9486f91],
PUP.Optional.Bandoo, C:\Users\Uio\Downloads\iLividSetup-r1720-n-bc.exe, Quarantined, [2b6db3ed7cffcc6a3026cc4548b9738d],
PUP.Optional.Amonetize.A, C:\Users\Uio\AppData\Local\27082\a11049.exe, Quarantined, [9cfc920ed8a3ad89561be65dfb05c739],
PUP.Optional.Amonetize.A, C:\Users\Uio\AppData\Local\30198\a20870.exe, Quarantined, [b9dfdcc4cdaeb48261faaf9c758b08f8],
PUP.Optional.Amonetize.A, C:\Users\Uio\AppData\Local\4673\a26274.exe, Quarantined, [d2c6d2ce047748eeacc577ccec14eb15],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\ver.xml, Quarantined, [f5a32f715a21dd59723fc2fcda2834cc],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\data.xml, Quarantined, [f5a32f715a21dd59723fc2fcda2834cc],
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe, Quarantined, [f5a32f715a21dd59723fc2fcda2834cc],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0.localstorage, Quarantined, [9dfb5d43bdbe0036d0028839837f5ca4],
Trojan.Agent.SCR, C:\Windows\inf\msstp.vbe, Quarantined, [e5b3653b58231c1a50d806cdbf43a957],
PUP.Optional.Norpalla.A, C:\Users\Uio\AppData\Roaming\Mozilla\Firefox\Profiles\ya2v70vm.default\extensions\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}.xpi, Quarantined, [9404faa69be0ab8b495f43950df543bd],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\Norpalla.ico, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\0, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\7za.exe, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\Norpalla.BrowserFilter.Helper.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\NorpallaBrowserFilter.exe, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\NorpallaUn.exe, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\NorpallaUninstall.exe, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\updateNorpalla.InstallState, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\7za.exe, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\BrowserAdapterS.7z, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.BrowserAdapter.exe, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.PurBrowse64.exe, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\Norpalla.PurBrowseG.zip, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\NorpallaBAApp.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\sqlite3.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\utilNorpalla.InstallState, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.Bromon.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.BroStats.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.BrowserAdapterS.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.CompatibilityChecker.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.FFUpdate.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.IEUpdate.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.PurBrowseG.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\plugins\Norpalla.Repmon.dll, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Norpalla.A, C:\Program Files (x86)\Norpalla\bin\TEMP\mfs223F.tmp, Quarantined, [890f0c945a21d3633e0cd50741c1867a],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{5906ab0f-5417-45a6-a4f5-8bc38ae936d5}Gw64.sys, Quarantined, [ceca2779f982cb6bd924d348699b6d93],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\1293297481.mxaddon, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\360-59568.crx, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\59568.crx, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\59568.xpi, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-11.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-2.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-3.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-4.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74-5.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\6125f106-992d-4924-86a1-6ebd20befa74.crx, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\Interop.IWshRuntimeLibrary.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\Newtonsoft.Json.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\SuperSocket.ClientEngine.Common.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\SuperSocket.ClientEngine.Core.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\SuperSocket.ClientEngine.Protocol.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\Uninstall.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\utils.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\WebSocket4Net.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\background.html, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\bgNova.html, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-bg.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-bho.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-bho64.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-codedownloader.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-nova.dll, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8-novainstaller.exe, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.PlusHD.A, C:\Program Files (x86)\HD-V1.8\HD-V1.8.ico, Quarantined, [d9bf712f4437b28433333a7cc63c8b75],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\000008.ldb, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\000334.ldb, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\000336.ldb, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\000337.log, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\CURRENT, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\LOCK, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\LOG, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\LOG.old, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi\MANIFEST-000335, Quarantined, [3f597e226d0ead8919cca01820e2a35d],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0\12, Quarantined, [2177a1ff2f4ce452885ed6e2ee1416ea],
PUP.Optional.CrossRider.A, C:\Users\Uio\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0\12-journal, Quarantined, [2177a1ff2f4ce452885ed6e2ee1416ea],

Physical Sectors: 0
(No malicious items detected)


(end)

Re: Kontrola logu

Napsal: 17 črc 2014 12:16
od DzuZi
RogueKiller
RogueKiller V9.2.3.0 (x64) [Jul 11 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Uio [Admin rights]
Mode : Scan -- Date : 07/18/2014 12:04:10

¤¤¤ Bad processes : 3 ¤¤¤
[Suspicious.Path] szndesktop.exe -- C:\Users\Uio\AppData\Roaming\Seznam.cz\bin\szndesktop.exe[7] -> KILLED [TermProc]
[Suspicious.Path] listicka-x64.exe -- C:\Users\Uio\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe[7] -> KILLED [TermThr]
[Suspicious.Path] AppServices.exe -- C:\Users\Uio\AppData\Roaming\Identities\AppServices.exe[-] -> KILLED [TermProc]

¤¤¤ Registry Entries : 26 ¤¤¤
[Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Run | reg_svr : "C:\Windows\SysWoW64\regsvr32.exe" /s "C:\Users\Uio\AppData\Roaming\gleam\nvm.dll" -> FOUND
[Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Run | cz.seznam.software.autoupdate : "C:\Users\Uio\AppData\Roaming\Seznam.cz\szninstall.exe" -c -> FOUND
[Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Run | cz.seznam.software.szndesktop : "C:\Users\Uio\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q -> FOUND
[Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Run | reg_svr : "C:\Windows\SysWoW64\regsvr32.exe" /s "C:\Users\Uio\AppData\Roaming\gleam\nvm.dll" -> FOUND
[Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Run | cz.seznam.software.autoupdate : "C:\Users\Uio\AppData\Roaming\Seznam.cz\szninstall.exe" -c -> FOUND
[Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Run | cz.seznam.software.szndesktop : "C:\Users\Uio\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q -> FOUND
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WindowsMangerProtect -> FOUND
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\WindowsMangerProtect -> FOUND
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\WindowsMangerProtect -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6B2168FE-F602-434E-B668-0EC7B613C242} | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{76F29EA9-DF07-448E-852E-A21879A05713} | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6B2168FE-F602-434E-B668-0EC7B613C242} | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{76F29EA9-DF07-448E-852E-A21879A05713} | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{6B2168FE-F602-434E-B668-0EC7B613C242} | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{76F29EA9-DF07-448E-852E-A21879A05713} | DhcpNameServer : 62.129.50.20 85.135.32.100 -> FOUND
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> FOUND
[PUM.Policies] (X64) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> FOUND
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> FOUND
[PUM.Policies] (X86) HKEY_USERS\S-1-5-21-2591339397-1149578058-2469315173-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> FOUND
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ HOSTS File : 0 ¤¤¤

¤¤¤ Antirootkit : 1 (Driver: LOADED) ¤¤¤
[Filter(Kernel.Filter)] \Driver\atapi @ Unknown : \Driver\cdrom @ \Device\CdRom0 (\SystemRoot\system32\DRIVERS\dtsoftbus01.sys)

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST3120022A ATA Device +++++
--- User ---
[MBR] fa60ccc268ddfe7662e3b23d993e272a
[BSP] bf4adb0271e006a620a98595f26b9335 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 110279 MB
2 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 226060286 | Size: 4092 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: USB DISK 2.0 USB Device +++++
--- User ---
[MBR] 0c6d334f6ae6a4680c483a13d4d176d1
[BSP] 7fa4568747b7725a38951e7856213c8e : Unknown MBR Code
Partition table:
0 - [ACTIVE] FAT32 (0xb) [VISIBLE] Offset (sectors): 2048 | Size: 3824 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] The request is not supported. )
Časové pásmo: UTC+02:00
Stránka 1 z 3
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/