Malwarebytes Anti-Malware
www.malwarebytes.orgDatum skenování: 8/19/2015
Cas skenování: 7:03 PM
Protokol: l.txt
Správce: Ano
Verze: 2.1.8.1057
Databáze malwaru: v2015.08.19.05
Databáze rootkitu: v2015.08.16.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: TOM
Typ skenu: Sken hrozeb
Výsledek: Dokonceno
Prohledaných objektu: 359228
Uplynulý cas: 10 min, 32 sek
Pamet: Zapnuto
Po spuštení: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 2
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\00000000-1439979317-0000-0000-8C89A5316306\knso9423.tmp, 2364, , [09a842c8fd8e81b57c489b1426de2bd5]
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\AFC Secure Net\privoxy.exe, 2336, , [723fe5258902f93dcdf91afa7b88817f]
Moduly: 1
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\AFC Secure Net\mgwz.dll, , [723fe5258902f93dcdf91afa7b88817f],
Klíce registru: 83
PUP.Optional.IQIYI.A, HKLM\SOFTWARE\CLASSES\CLSID\{5CD76C57-6893-478A-B776-47E7C82504BE}, , [9e13db2f9fecc4721e184c48e41eff01],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{B0660298-91AA-421F-BF0D-BFF6BB8BF3AE}, , [80315caeff8cf5416581fcd9768c748c],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}, , [80315caeff8cf5416581fcd9768c748c],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}, , [80315caeff8cf5416581fcd9768c748c],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EAC7DE5C-9520-435D-91AA-4A02E4773CEA}, , [80315caeff8cf5416581fcd9768c748c],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{B0660298-91AA-421F-BF0D-BFF6BB8BF3AE}, , [80315caeff8cf5416581fcd9768c748c],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{B0660298-91AA-421F-BF0D-BFF6BB8BF3AE}, , [80315caeff8cf5416581fcd9768c748c],
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\rycymozu, , [09a842c8fd8e81b57c489b1426de2bd5],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{5ADB067E-40D9-49AD-BDFC-2DBD725D3842}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8772EB82-7261-4CD9-8A86-DE155B461D9E}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{8E76BEF1-650D-4C37-92CA-301FE1715505}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{AE293C34-0380-4BEB-B499-003F0A34605C}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EC137CF8-6A75-47AE-958A-6127DE633658}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8772EB82-7261-4CD9-8A86-DE155B461D9E}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8E76BEF1-650D-4C37-92CA-301FE1715505}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{AE293C34-0380-4BEB-B499-003F0A34605C}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EC137CF8-6A75-47AE-958A-6127DE633658}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8772EB82-7261-4CD9-8A86-DE155B461D9E}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8E76BEF1-650D-4C37-92CA-301FE1715505}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{AE293C34-0380-4BEB-B499-003F0A34605C}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EC137CF8-6A75-47AE-958A-6127DE633658}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{5ADB067E-40D9-49AD-BDFC-2DBD725D3842}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AllDaySale.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{5ADB067E-40D9-49AD-BDFC-2DBD725D3842}, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\CLASSES\CRSBRWSHTML, , [b7fa35d5c0cb26106da9061dd330659b],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE, , [05ac9e6cf9925dd9f91bffa7aa5ae917],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE, , [b8f955b56c1f95a165afc8ded52f2fd1],
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\Crossbrowse, , [cfe2cc3ee0abe4523903a87bab5855ab],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\29777, , [b100e02ad9b2b284bd340e4ebf44ee12],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\32846, , [7b364fbbc9c2ce68d9185a027d866a96],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-1-6, , [8d241ded3f4ce4522cdad448679c9f61],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-1-7, , [773ab159bccf83b326e025f7f90acf31],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-10_user, , [139e2edcf992e74f8383fe1eba493dc3],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-3, , [832e19f1aeddd06621e529f33ec540c0],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-4, , [19980cfebdce57df2fd7908c43c0827e],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-5, , [278a57b31d6e53e3fe08cd4f14efe11f],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-5_user, , [3b76d5350d7e3402e52146d659aacf31],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-6, , [961be228ee9d1422df27819b09fa9070],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\2b164832-4f49-438d-97d2-21c6c4b777d8-7, , [e2cf2fdb7e0d201625e18f8d7291d22e],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-1-6, , [228f9f6b8a0157dfe521c359a55e837d],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-1-7, , [d1e01bef315ae650fb0ba37963a0a25e],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-10_user, , [7140907ae0ab86b016f055c7857e43bd],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-11, , [28895eac2a61f83ef016ba62c73cde22],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-3, , [01b0a268c0cb8ea891757e9ea85b9070],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-4, , [5a5730da87042d09b4527d9f4ab90000],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-5, , [0ea30505513a68cee91d1705d0335aa6],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-5_user, , [139ec446fe8d47efdb2bf4284db68878],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-6, , [2e830505296284b2b1552fed40c3827e],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\a95d80d7-6c37-4f3d-bfb6-3938f6b98167-7, , [6a47fe0cb1da03335ea8bc60a360718f],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Advanced System~Protector, , [0fa2e129c8c3d95d55411ffc5aa9d22e],
PUP.Optional.AdvancedSystemProtector, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Advanced System~Protector_startup, , [b1003bcf2962c1751481cd4ef70cf60a],
PUP.SoftwareUpdater.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\AmiUpdXp, , [d2dff9113655c472e88150cb8b782bd5],
PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ASP, , [ac053dcd48438ea8494e63b737cc39c7],
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Crossbrowse, , [fcb5d83225669a9c42c171abaa59629e],
PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\RegClean Pro, , [3c75b753a0eba98dd0c8b4662bd860a0],
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\crossbrowse.exe, , [cae7f812c4c7c373aa6d8b98fb081ce4],
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\WOW6432NODE\Crossbrowse, , [dad74ac05c2f290da891c85b877ce020],
PUP.Optional.GoHD.A, HKLM\SOFTWARE\WOW6432NODE\GoHD-nv, , [e8c94ebc7714d2647090f831f40f23dd],
PUP.Optional.GoHD.A, HKLM\SOFTWARE\WOW6432NODE\GoHD-nv-ie, , [e4cd17f39fec1d19ab55c96052b1a759],
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CRSBRWSHTML, , [f9b84dbd27646fc766b08d9633d0e020],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE, , [cbe69c6ed3b82b0b070d7d2952b2748c],
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\Crossbrowse, , [49683bcfe0ab7eb83ffd58cb35ce27d9],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\29777, , [f1c038d2bccf2a0c7c751349b64d8b75],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\32846, , [575a39d1bad1a2944ba6acb0e41f6d93],
PUP.Optional.HotSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}, , [af028a801d6e5dd98834773a1aeaf20e],
PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\MEDIAPLAYER\SHIMINCLUSIONLIST\crossbrowse.exe, , [02afd03a9bf0f83e39015fc427dcb947],
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\crossbrowse.exe, , [0ca5e723aae155e186918c97000308f8],
PUP.Optional.Crossbrowse.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Crossbrowse, , [e3ce15f5a4e761d51507948fdb28c040],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [d5dc38d2602b68ce0f7fe2b3dc286898],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [09a840cab7d48caafa951e77fa0a2dd3],
PUP.Optional.Somoto.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHULT, , [357c759505864fe7fe7c6450828251af],
PUP.Optional.Crossrider.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [a20f44c67e0d12246c35f6ae1fe5f40c],
PUP.Optional.Crossbrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\Crossbrowse, , [a50cd931d7b48fa779bff92ade258c74],
PUP.Optional.GoHD.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\GoHD-nv, , [d0e12fdb5c2f5ed80004138bd1337e82],
PUP.Optional.GoHD.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\GoHD-nv-ie, , [e9c8e5253655c76fd62efba312f202fe],
PUP.Optional.SavePass.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\SavePass 1.1-nv, , [8a27fe0c6526b185173cd66f1be8639d],
PUP.Optional.SavePass.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\SavePass 1.1-nv-ie, , [f9b8be4cf19adf570c47261fb84b0cf4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\29777, , [a1103dcd2d5e2b0b3a1c75cba75cf709],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\32846, , [2f82cb3fb5d6ac8aff574bf55aa9c33d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\InstallMoon, , [4170a1694f3ce452a7e6c6899073e917],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\OB, , [edc43ecc0487ee4817a07eb01fe450b0],
PUP.Optional.HotSearches.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}, , [1b96f119632840f6b10af8b9e0242ad6],
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB, , [0ea3d733c8c386b04adc496c62a206fa],
PUP.Optional.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PrivoxyService, , [723fe5258902f93dcdf91afa7b88817f],
Hodnoty registru: 34
PUP.Optional.Crossbrowse.C, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_840E321357FD93C05375999D496D9679, "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window, , [0da4090123682d09429bfd89a85d01ff]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\.HTML\OPENWITHPROGIDS|CRSBRWSHTML, , [248d4cbe32591e18e64ee3c3ab59f30d],
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\.HTM\OPENWITHPROGIDS|CRSBRWSHTML, , [c4ed6c9ee3a8072f171cf9ad5da759a7],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [05ac9e6cf9925dd9f91bffa7aa5ae917]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\.HTML\OPENWITHPROGIDS|CRSBRWSHTML, , [b6fb2ae0becd2f074aeab8eeeb198d73],
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\.HTM\OPENWITHPROGIDS|CRSBRWSHTML, , [c5ec56b482098aace0535452d92b817f],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [b8f955b56c1f95a165afc8ded52f2fd1]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\REGISTEREDAPPLICATIONS|Crossbrowse, Software\Clients\StartMenuInternet\Crossbrowse\Capabilities, , [af027397246760d6cdd3663ef90b15eb]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\.HTML\OPENWITHPROGIDS|CRSBRWSHTML, , [1d94a367335856e090a403a3bb4919e7],
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\.HTM\OPENWITHPROGIDS|CRSBRWSHTML, , [1c95e5255c2f290dfd36c6e0966e9d63],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, , [cbe69c6ed3b82b0b070d7d2952b2748c]
PUP.Optional.CrossBrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS, Crossbrowse, , [862b907a701b88ae2f27e237a2617b85]
PUP.Optional.CrossBrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|StubPath, "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level, , [8f22ac5e4546bb7be47266b3c2419f61]
PUP.Optional.CrossBrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|Localized Name, Crossbrowse, , [d3dec446494237ffd28468b1d23156aa]
PUP.Optional.HotSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURL,
http://websearch.hotsearches.info/favicon.ico, , [af028a801d6e5dd98834773a1aeaf20e]
PUP.Optional.HotSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURLFallback,
http://websearch.hotsearches.info/favicon.ico, , [f6bbae5ca0eb71c59725c5ec43c127d9]
PUP.Optional.HotSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}|URL,
http://websearch.hotsearches.info/?l=1&q={searchTerms}&pid=24475&r=2015/08/19&hid=1040474618219217059&lg=EN&cc=CZ&unqvl=90, , [3d74c248206b7db99d1f9a1748bca65a]
PUP.Optional.DefaultSearchProtected.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|defsearchp@gmail.com, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\defsearchp@gmail.com, , [f9b84ebcafdc61d5e248cee335cf4eb2]
PUP.Optional.CrossBrowse.C, HKLM\SOFTWARE\WOW6432NODE\REGISTEREDAPPLICATIONS|Crossbrowse, Software\Clients\StartMenuInternet\Crossbrowse\Capabilities, , [8f2220eadbb0f640c3dd9e060ef66c94]
PUP.Optional.Somoto.A, HKLM\SOFTWARE\WOW6432NODE\SEARCHULT|Somo, , , [357c759505864fe7fe7c6450828251af]
PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\rycymozu|ImagePath, C:\Program Files (x86)\00000000-1439979317-0000-0000-8C89A5316306\knso9423.tmp, , [3a77ec1e8cff4fe7af57b4ec0ef60df3]
PUP.Optional.HotSearches.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURL,
http://websearch.hotsearches.info/favicon.ico, , [1b96f119632840f6b10af8b9e0242ad6]
PUP.Optional.HotSearches.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}|FaviconURLFallback,
http://websearch.hotsearches.info/favicon.ico, , [278a58b2533878becbf0e5cc3cc8936d]
PUP.Optional.HotSearches.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB82DE59-BC4C-4172-9AC4-73315F71CFFE}|URL,
http://websearch.hotsearches.info/?l=1&q={searchTerms}&pid=24475&r=2015/08/19&hid=1040474618219217059&lg=EN&cc=CZ&unqvl=90, , [822f45c51a71c1751d9e545da55f10f0]
PUP.Optional.CrossBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_840E321357FD93C05375999D496D9679, "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window, , [a9087b8f216a132302932a824fb5da26]
PUP.Optional.IQIYI.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|HCDNClient, "C:\IQIYI Video\Common\QyKernel.exe" -shell_start, , [6c45c6449cef7cbad8a787961ae9bc44]
PUP.Optional.IQIYI.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|HCDNClient, "C:\IQIYI Video\Common\QyKernel.exe" -shell_start, , [6c45c6449cef7cbad8a787961ae9bc44]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB|monitype20, 8/19/15 12:15:19, , [0ea3d733c8c386b04adc496c62a206fa]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB|monitype24, 8/19/15 12:15:19, , [1e93070383085bdb3fe713a230d440c0]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB|monitype27, 8/19/15 12:15:19, , [8d2458b279125dd92df9932260a460a0]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB|monitype6, 8/19/15 12:16:34, , [862bf01ad2b957df2ff7476ea75d24dc]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB|monitype15, 8/19/15 12:16:48, , [d4ddac5e612ad75f78aeae0735cfb34d]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB|monitype21, 8/19/15 12:17:30, , [cbe6fe0c4a41a88ed452664f23e1a957]
PUP.Optional.OutBrowse.A, HKU\S-1-5-21-3772393103-1989253770-2045647073-1000\SOFTWARE\OB|monitype14, 8/19/15 12:18:15, , [a60b8d7d96f514228d991b9aef1504fc]
Data registru: 7
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL,
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}, Dobré: (
www.google.com), Špatné: (
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}),,[bbf6d733028944f24c3ce465b451fb05]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page,
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}, Dobré: (
www.google.com), Špatné: (
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}),,[4f62f01ad3b8ec4a3b4d96b37d8852ae]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL,
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}, Dobré: (
www.google.com), Špatné: (
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}),,[a1100505741780b64048d6735da83fc1]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page,
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}, Dobré: (
www.google.com), Špatné: (
http://www.mystartsearch.com/web/?type= ... 5861558&q={searchTerms}),,[5d54cf3bb7d488aec5c3f5547a8b1de3]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{0EAEB469-8FC8-40FC-97E1-CBC4DE7B7626}|NameServer, 52.18.92.32,8.8.8.8, Dobré: (), Špatné: (52.18.92.32,8.8.8.

,,[a20f25e5395237ffb2de5ef9d530b14f]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}|NameServer, 52.18.92.32,8.8.8.8, Dobré: (), Špatné: (52.18.92.32,8.8.8.

,,[89283ccef299ef47b3ddfe5912f3c13f]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{9925BD68-979A-478C-B670-77696CECCBD7}|NameServer, 52.18.92.32,8.8.8.8, Dobré: (), Špatné: (52.18.92.32,8.8.8.

,,[4d64888296f562d450409abd798c2cd4]
Složky: 143
PUP.Optional.MultiPlug.A, C:\Users\TOM\AppData\Local\00000000-1439986562-0000-0000-8C89A5316306, , [1d94d03aabe012244e229e0313f18080],
PUP.Optional.MultiPlug.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\jwmrM@uYj.edu\content, , [d1e03ad0f3981a1cec8b138ea75d6f91],
PUP.Optional.MultiPlug.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\jwmrM@uYj.edu, , [d1e03ad0f3981a1cec8b138ea75d6f91],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\skin, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\chrome, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\chrome\content, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\chrome\content\api, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\chrome\content\core, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\defaults, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\defaults\preferences, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\extensionData, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\extensionData\plugins, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\extensionData\userCode, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\locale, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.CrossRider.A, C:\Users\TOM\AppData\Roaming\Mozilla\Firefox\Profiles\0gna7ih6.default\extensions\f8783004-c434-4bd0-9f81-9a39dd64baaa@08ad07c4-3f21-451d-9045-9e0d5dc8aa9e.com\locale\en-US, , [595834d68ffc999d90e8277ac242c13f],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\00000000-1439979317-0000-0000-8C89A5316306, , [09a842c8fd8e81b57c489b1426de2bd5],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\2936124630538605663, , [dad73ecc9eed04326d5a8d2351b330d0],
PUP.Optional.AllDaySale.A, C:\Program Files (x86)\alLadaysale, , [fcb5bf4b682363d398a7269073918c74],
PUP.Optional.AnyProtect.A, C:\Users\TOM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup, , [a908b05adcafd3633d6ec74a9a69d42c],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Locales, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\PepperFlash, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\VisualElements, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Extensions, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\Icons, , [d1e0a96148432b0b3e9b8f823dc6ca36],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Avatars, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Caps, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\databases, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension Rules, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extension State, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gehmndecgbcffhmfjkenpamdgechcgpe, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gehmndecgbcffhmfjkenpamdgechcgpe\2.0.9_0, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gehmndecgbcffhmfjkenpamdgechcgpe\2.0.9_0\icons, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gehmndecgbcffhmfjkenpamdgechcgpe\2.0.9_0\_metadata, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\css, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\html, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\bg, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ca, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\cs, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\da, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\de, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\el, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en_GB, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es_419, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\et, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fi, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fil, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fr, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hi, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hr, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hu, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\id, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\it, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ja, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ko, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lt, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lv, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nb, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nl, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pl, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_BR, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_PT, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ro, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ru, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sk, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sl, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sr, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sv, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\th, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\tr, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\uk, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\vi, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_CN, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_TW, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_metadata, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIcons, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\JumpListIconsOld, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\Users\TOM\AppData\Local\Crossbrowse\Crossbrowse\User Data\SwReporter, , [6a47de2c29627eb828b335dc8c77956b],
PUP.Optional.Crossbrowse.C, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse, , [cae71af03655e650bd1fb958966d20e0],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\AFC Secure Net, , [723fe5258902f93dcdf91afa7b88817f],
PUP.Optional.IQIYI.A, C:\ProgramData\IQIYI Video, , [6849ab5ff695a195dcfb40d6e51e6e92],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\adsys, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\FDSCache, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\GpUpdate, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\list_pb, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\QyUpdate, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\skin, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\skin\PPSCloudConfigPic, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\skin\TabCfgPlusX, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\vmPage, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\vmPage\1.0.1.155, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\vmPage\1.0.1.155\skin, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\vmPage\1.0.1.155\skin\xml, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\vmPage\download, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\vmPage\download\search, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\LStyle\vmPage\download\search\zipCache, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\PluginConfig, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\PluginConfig\apk, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\PluginConfig\apk\LStyle_0, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\PluginConfig\apk\LStyle_1, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\QiyiHCDN, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\QiyiKernel, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.IQIYI.A, C:\Users\TOM\AppData\Roaming\IQIYI Video\QiyiKernel\Kernel_QyPlayer, , [fab7f01a04870a2c21b6d73f867d57a9],
PUP.Optional.SysAssistByHotWheel.A, C:\Users\TOM\AppData\Local\SysassistByHotWheel, , [e5cc2fdbaddede58a03e5cbae91acd33],
PUP.Optional.SysAssistByHotWheel.A, C:\Users\TOM\AppData\Local\SysassistByHotWheel\log, , [e5cc2fdbaddede58a03e5cbae91acd33],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector, , [545dd535c9c2dc5a938dc156bd4618e8],
PUP.Optional.ProtectWindowsManager.F, C:\ProgramData\3WinManPro3, , [d8d98a804e3dd660f42455c391727e82],
PUP.Optional.ProtectWindowsManager.F, C:\ProgramData\DWinManProD, , [8031a466bbd01d19a771e43434cf6997],
PUP.Optional.ProtectWindowsManager.F, C:\ProgramData\DWinManProD\update, , [8031a466bbd01d19a771e43434cf6997],