Inactive Joy wallet

Status
Not open for further replies.
Dont know how it got there or how to get rid of it. but it has implanted itself in my laptop
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 12/6/2014
Scan Time: 4:02:32 AM
Logfile: declog.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.06.05
Rootkit Database: v2014.12.03.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: Remote-

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 298865
Time Elapsed: 42 min, 13 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 2
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1214440339-1078145449-839522115-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CROSSRIDER, Quarantined, [9b0258075626bf77dfd007972ada20e0],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [8419e778225a03330f688da2e320867a],

Registry Values: 1
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1214440339-1078145449-839522115-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CROSSRIDER|Verifier, adf7bfc0c32b4609c55fd812fd340e05, Quarantined, [9b0258075626bf77dfd007972ada20e0]

Registry Data: 3
PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|AntiVirusDisableNotify, 1, Good: (0), Bad: (1),Replaced,[29743d22a7d50e28ec274a14818427d9]
PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|FirewallDisableNotify, 1, Good: (0), Bad: (1),Replaced,[2d7048175a22f442c3511846c93c9868]
PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|UpdatesDisableNotify, 1, Good: (0), Bad: (1),Replaced,[f0adc09f4a3282b4fc19e47a60a53bc5]

Folders: 17
PUP.Optional.OpenCandy, C:\Documents and Settings\Remote-\Application Data\OpenCandy, Quarantined, [1e7f5d0287f55ed8b4fb7d988b782fd1],
PUP.Optional.OpenCandy, C:\Documents and Settings\Remote-\Application Data\OpenCandy\78D156A2CFA14BE48B787FEE334363E6, Quarantined, [1e7f5d0287f55ed8b4fb7d988b782fd1],
PUP.Optional.OpenCandy, C:\Documents and Settings\Remote-\Application Data\OpenCandy\OpenCandy_78D156A2CFA14BE48B787FEE334363E6, Quarantined, [1e7f5d0287f55ed8b4fb7d988b782fd1],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults\preferences, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale\en-US, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342, Quarantined, [8419e778225a03330f688da2e320867a],

Files: 128
PUP.Optional.Bundle, C:\Documents and Settings\Remote-\My Documents\Downloads\XvidInstaller (1).exe, Quarantined, [544968f75f1d65d1fd8f7cd725e09c64],
PUP.Optional.Bundle, C:\Documents and Settings\Remote-\My Documents\Downloads\XvidInstaller.exe, Quarantined, [613cbba4df9de353f498a2b19d68f50b],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome.manifest, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\install.rdf, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\0c2692c770eb5c13589b44a2761d86ae.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\16223ca789d557bb5cb699e275a41187.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\4f7057cd6eb7898f92041ddf509b8243.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\816d6771a30cf3777cc25b35041f00d9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\b63e7f4826fe1baaed59dd9c98737a07.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\bacf3ec6d46fe1ac5657248343db0e52.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\background.html, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\browser.xul, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\dialog.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\options.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\options.xul, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\search_dialog.xul, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\7b521e8fbf0b7e824d82ee3c274fbd20.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\02ac58c925f51c4e7c3229959213860d.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\05e82df65cd3e66a92977e0678ad5f07.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\137e737e6edc21e627b4ad3c26d9ca99.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\18b5bc854e0c6ca2366b4bef37e212fc.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\2a326739631b1915846fbf7bdb33dd95.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\37044689f8bd89c0f2675d8bc52a7ca5.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\503a43e99ebe9d4074f0cb83787fb700.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\53312545bd8731ad2a0863900955c111.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\7d59492ff4892b9d3bc33b4d8374729b.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\92d9fd7c0c6353b2b3299752b70a52c9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\99fe2365872094a8a6a660e0593ce8c9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\a5682bdb82b1af4ccee55f1d7dba0282.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\bc0b05a539732dae00f4590da85898a7.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\c08273a161afa4d67fd5e9891189c8c6.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\fd14fe24c52f8d578937f4fe256021e0.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\9fd006321a042b2d70a969708cec8817.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\030eb8ee89bed8600d56eebfddce1018.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\0cc9e588f0f599b116dcb2649362d185.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\0e6f74d6223a6c3228c22c152b7271fd.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\10618d5939237784d5d1d0f816af9444.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\278d775dc6eba17b336b967cfe0c2870.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\3d18f051cf329416ecfef7762f9c1043.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\3e213f97f1da06fc05ca613889edf451.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\44b471e0babb6b985ecbb443cfe39a32.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\51cde7082b68961ac3f94ded2e4b9e54.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\6c4bbf6e56d18ab6d5ae931076275c4d.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\774f96665881397b8629fbe5b913f8eb.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\89ea68bb50eb065e4dea0da0157ae7dd.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\9d35e6d9c092f95d021da12ab3b502b6.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\a33967e91e921095662cf3a1f158f39f.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\ab0f579c75f715ded43c79a91316f130.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\ab27ec2dc0c0acdb5ac68c7e553260d0.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\b04336534542feb8fc5e6f58e75c2974.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\cfa080c17964c81a22acbf206054e695.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\fb77cb26c6843ff95882a6d52e5bc4bb.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\installer.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults\preferences\prefs.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\manifest.xml, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins.json, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\223.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\1.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\102.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\104.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\13.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\14.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\16.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\17.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\177.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\180.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\182.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\183.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\184.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\192.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\195.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\200.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\207.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\21.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\22.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\220.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\221.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\226.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\242.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\244.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\246.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\262.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\263.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\268.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\273.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\28.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\281.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\289.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\301.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\4.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\47.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\64.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\7.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\72.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\78.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\91.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\93.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\98.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode\background.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode\extension.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale\en-US\translations.dtd, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button1.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button2.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button3.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button4.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button5.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\crossrider_statusbar.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon128.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon16.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon24.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon48.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\panelarrow-up.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\popup.html, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\skin.css, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\update.css, Quarantined, [f1accb946913e94dab65f823996a09f7],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleCrashHandler.exe, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdate.exe, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdateBroker.exe, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdateHelper.msi, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdateOnDemand.exe, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\goopdate.dll, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\goopdateres_en.dll, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\npGoogleUpdate4.dll, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\psmachine.dll, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\psuser.dll, Quarantined, [8419e778225a03330f688da2e320867a],
PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14998baca99db0a7e33af4cef0591530");), Replaced,[524bf669f08cc96dd3835d3e3cc9b54b]

Physical Sectors: 0
(No malicious items detected)


(end)
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.71.2
Run by Remote- at 6:01:47 on 2014-12-06
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1918.841 [GMT -7:00]
.
AV: AVG AntiVirus Free Edition 2015 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\D-Link\SharePort Utility\Spnuhelper.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\D-Link\SharePort Utility\Connect.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HPQ\shared\hpqwmi.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.ca/ig
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=Q305&bd=presario&pf=laptop
uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_CA&c=Q305&bd=presario&pf=laptop
BHO: AcroIEHlprObj Class: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
mRun: [Cpqset] c:\program files\hpq\default settings\cpqset.exe
mRun: [hpWirelessAssistant] c:\program files\hpq\hp wireless assistant\HP Wireless Assistant.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [AVG_UI] "c:\program files\avg\avg2015\avgui.exe" /TRAYONLY
StartupFolder: c:\docume~1\remote-\startm~1\programs\startup\sharep~1.lnk - c:\program files\d-link\shareport utility\Connect.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC} - c:\program files\java\jre7\bin\ssv.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1354122251718
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
DPF: {B479199A-1242-4E3C-AD81-7F0DF801B4AE} - hxxp://download.microsoft.com/download/C/9/C/C9C3D86D-84AC-4AF0-8584-842756A66467/MicrosoftDownloadManager.cab
DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
TCP: NameServer = 192.168.1.254 192.168.1.254
TCP: Interfaces\{3871DE3A-B732-4322-8349-31B14BA1A928} : DHCPNameServer = 192.168.1.254 192.168.1.254
TCP: Interfaces\{A084B7F7-C801-4E6F-A42A-AB64A7B4E906} : DHCPNameServer = 192.168.0.5
Notify: AtiExtEvent - Ati2evxx.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\remote-\application data\mozilla\firefox\profiles\71evqvip.default\
FF - plugin: c:\documents and settings\remote-\local settings\application data\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\common files\tencent\npchrome\npchrome.dll
FF - plugin: c:\program files\common files\tencent\npqscall\npqscall.dll
FF - plugin: c:\program files\common files\tencent\txsso\1.2.2.1\bin\npSSOAxCtrlForPTLogin.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\npMSDM.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_15_0_0_239.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2014-6-18 147736]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2014-7-18 230680]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2014-10-5 98584]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2014-6-18 27416]
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [2014-6-18 121624]
R1 AVGIDSDriverl;AVGIDSDriverl;c:\windows\system32\drivers\avgidsdriverlx.sys [2014-10-29 198936]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2014-6-18 21272]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2014-8-28 192792]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2014-10-10 200984]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2015\avgidsagent.exe [2014-11-9 3488784]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2015\avgwdsvc.exe [2014-11-9 298080]
R2 D-Link SharePort Helper;D-Link SharePort Helper;c:\program files\d-link\shareport utility\Spnuhelper.exe [2011-10-1 40960]
R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [2007-10-9 38144]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes anti-malware\mbamscheduler.exe [2014-12-6 1871160]
R2 MBAMService;MBAMService;c:\program files\malwarebytes anti-malware\mbamservice.exe [2014-12-6 969016]
R2 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2009-7-3 246920]
R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [2011-2-20 200192]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-12-6 23256]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-12-6 114904]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\drivers\netaapl.sys [2012-12-12 18432]
S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8192su.sys [2009-9-16 590080]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-7-20 754856]
.
=============== Created Last 30 ================
.
2014-12-06 12:38:41 52440 ----a-w- c:\windows\system32\drivers\webdyld.sys
2014-12-06 11:01:27 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-12-06 10:59:08 54360 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-12-06 10:59:08 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-12-06 10:59:08 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-12-06 10:59:08 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes
2014-11-30 08:50:39 -------- d-----w- c:\windows\pss
2014-11-30 04:38:53 -------- d-----w- c:\documents and settings\remote-\application data\AVG2015
2014-11-30 04:37:55 -------- d-----w- c:\documents and settings\remote-\application data\TuneUp Software
2014-11-30 04:36:36 -------- d--h--w- C:\$AVG
2014-11-30 04:36:36 -------- d-----w- c:\documents and settings\all users\application data\AVG2015
2014-11-30 04:35:23 -------- d-----w- c:\program files\AVG
2014-11-30 04:31:00 -------- d--h--w- c:\documents and settings\all users\application data\Common Files
2014-11-30 04:30:59 -------- d-----w- c:\documents and settings\remote-\local settings\application data\MFAData
2014-11-30 04:30:59 -------- d-----w- c:\documents and settings\remote-\local settings\application data\Avg2015
2014-11-30 04:30:59 -------- d-----w- c:\documents and settings\all users\application data\MFAData
2014-11-16 14:48:26 91136 ----a-w- c:\windows\system32\kswdmcap.ax
2014-11-16 14:48:26 61952 ----a-w- c:\windows\system32\kstvtune.ax
2014-11-16 14:48:26 53760 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2014-11-16 14:48:26 53760 ----a-w- c:\windows\system32\vfwwdm32.dll
2014-11-16 14:48:26 43008 ----a-w- c:\windows\system32\ksxbar.ax
2014-11-11 03:51:15 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-11-10 06:27:05 -------- d-----w- c:\documents and settings\remote-\local settings\application data\Mozilla
2014-11-10 06:26:51 -------- d-----w- c:\program files\Mozilla Maintenance Service
2014-11-09 23:33:38 -------- d-----w- c:\program files\iPod
2014-11-09 23:33:27 -------- d-----w- c:\program files\iTunes
2014-11-09 23:33:27 -------- d-----w- c:\documents and settings\all users\application data\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
2014-11-09 07:05:43 -------- d-----w- c:\program files\globalUpdate
2014-11-09 07:05:42 -------- d-----w- c:\documents and settings\remote-\local settings\application data\globalUpdate
2014-11-09 07:04:58 225280 ----a-w- c:\windows\system32\rewire.dll
2014-11-09 07:04:58 -------- d-----w- c:\program files\VstPlugins
2014-11-09 07:04:31 1554944 ----a-w- c:\windows\system32\vorbis.acm
2014-11-09 07:04:24 -------- d-----w- c:\program files\Outsim
2014-11-09 06:59:53 -------- d-----w- c:\program files\Image-Line
2014-11-09 06:15:19 -------- d-----w- c:\documents and settings\remote-\local settings\application data\Pogoplug
2014-11-08 23:07:28 -------- d-----w- c:\documents and settings\remote-\local settings\application data\SoulseekQt
2014-11-08 05:30:17 -------- d-----w- c:\program files\VideoLAN
2014-11-08 04:19:24 -------- d-----w- c:\documents and settings\remote-\application data\uTorrent
2014-11-08 04:18:39 -------- d-----w- c:\program files\SoulseekQt
2014-11-08 03:15:30 -------- d-----w- c:\windows\system32\MRT
.
==================== Find3M ====================
.
2014-11-30 04:19:37 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-11-30 04:19:36 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-10-30 04:35:14 198936 ----a-w- c:\windows\system32\drivers\avgidsdriverlx.sys
2014-10-10 21:13:58 200984 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2014-09-27 01:16:32 145408 ----a-w- c:\windows\system32\javacpl.cpl
.
============= FINISH: 6:03:08.59 ===============
 
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 2/20/2011 5:59:49 PM
System Uptime: 12/6/2014 5:40:25 AM (1 hours ago)
.
Motherboard: Quanta | | 3097
Processor: Mobile AMD Sempron(tm) Processor 3000+ | U23 | 1794/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 37 GiB total, 19.751 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek RTL8139/810x Family Fast Ethernet NIC
Device ID: PCI\VEN_10EC&DEV_8139&SUBSYS_3091103C&REV_10\4&13826118&0&00A4
Manufacturer: Realtek Semiconductor Corp.
Name: Realtek RTL8139/810x Family Fast Ethernet NIC
PNP Device ID: PCI\VEN_10EC&DEV_8139&SUBSYS_3091103C&REV_10\4&13826118&0&00A4
Service: RTL8023xp
.
==== System Restore Points ===================
.
RP76: 11/7/2014 9:18:37 AM - System Checkpoint
RP78: 11/7/2014 10:32:09 AM - Configured TIxx21
RP79: 11/7/2014 10:50:08 AM - Software Distribution Service 3.0
RP80: 11/7/2014 8:13:35 PM - Software Distribution Service 3.0
RP81: 11/9/2014 1:11:42 AM - System Checkpoint
RP82: 11/9/2014 11:22:58 PM - Removed Zone Deluxe Games
RP83: 11/10/2014 8:50:03 PM - Installed Java 7 Update 71
RP84: 11/15/2014 2:23:26 AM - Software Distribution Service 3.0
RP85: 11/16/2014 7:38:19 AM - Logitech Webcam Software v12.10.1110
RP86: 11/29/2014 9:35:19 PM - Installed AVG 2015
RP87: 11/29/2014 9:36:12 PM - Installed AVG 2015
RP88: 11/30/2014 2:03:40 AM - december14
RP89: 12/1/2014 2:21:07 AM - System Checkpoint
RP90: 12/2/2014 2:55:32 AM - System Checkpoint
RP91: 12/3/2014 3:46:49 AM - System Checkpoint
RP92: 12/4/2014 4:38:08 AM - System Checkpoint
RP93: 12/5/2014 5:29:47 AM - System Checkpoint
.
==== Installed Programs ======================
.
µTorrent
Adobe Flash Player 15 ActiveX
Adobe Flash Player 15 Plugin
Adobe Reader 7.0
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Asus 802.11n Network Adapter
Athlon 64 Processor Driver
ATI - Software Uninstall Utility
ATI Control Panel
ATI Display Driver
AVG 2015
Bonjour
Broadcom 802.11 Wireless LAN Adapter
Conexant AC-Link Audio
Data Fax SoftModem with SmartCP
FL Studio 10
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB2756822)
Hotfix for Windows XP (KB2779562)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB981793)
HP Help and Support
HP Update
HP User Guides 0001
HP Wireless Assistant 1.01 A2
IL Download Manager
InterVideo WinDVD
iTunes
J2SE Runtime Environment 5.0 Update 2
Java 7 Update 71
Java Auto Updater
Malwarebytes Anti-Malware version 2.0.4.1028
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Download Manager
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Mozilla Firefox 33.1.1 (x86 en-US)
Mozilla Maintenance Service
muvee autoProducer 4.0 - SE
PL-2303 USB-to-Serial
REALTEK Gigabit and Fast Ethernet NIC Driver
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2861188)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2898855v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2901110v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2901110v2)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2559049)
Security Update for Windows Internet Explorer 8 (KB2675157)
Security Update for Windows Internet Explorer 8 (KB2699988)
Security Update for Windows Internet Explorer 8 (KB2744842)
Security Update for Windows Internet Explorer 8 (KB2761465)
Security Update for Windows Internet Explorer 8 (KB2792100)
Security Update for Windows Internet Explorer 8 (KB2797052)
Security Update for Windows Internet Explorer 8 (KB2817183)
Security Update for Windows Internet Explorer 8 (KB2909210)
Security Update for Windows Internet Explorer 8 (KB2936068)
Security Update for Windows Internet Explorer 8 (KB2964358)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB2834902-v2)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2621440)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2685939)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2695962)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219-v2)
Security Update for Windows XP (KB2707511)
Security Update for Windows XP (KB2709162)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135-v2)
Security Update for Windows XP (KB2724197)
Security Update for Windows XP (KB2727528)
Security Update for Windows XP (KB2753842-v2)
Security Update for Windows XP (KB2753842)
Security Update for Windows XP (KB2757638)
Security Update for Windows XP (KB2758857)
Security Update for Windows XP (KB2761226)
Security Update for Windows XP (KB2770660)
Security Update for Windows XP (KB2778344)
Security Update for Windows XP (KB2779030)
Security Update for Windows XP (KB2780091)
Security Update for Windows XP (KB2799494)
Security Update for Windows XP (KB2802968)
Security Update for Windows XP (KB2807986)
Security Update for Windows XP (KB2808735)
Security Update for Windows XP (KB2813170)
Security Update for Windows XP (KB2813345)
Security Update for Windows XP (KB2820917)
Security Update for Windows XP (KB2834886)
Security Update for Windows XP (KB2847311)
Security Update for Windows XP (KB2850869)
Security Update for Windows XP (KB2859537)
Security Update for Windows XP (KB2862152)
Security Update for Windows XP (KB2862330)
Security Update for Windows XP (KB2862335)
Security Update for Windows XP (KB2864063)
Security Update for Windows XP (KB2868038)
Security Update for Windows XP (KB2868626)
Security Update for Windows XP (KB2876217)
Security Update for Windows XP (KB2876331)
Security Update for Windows XP (KB2892075)
Security Update for Windows XP (KB2893294)
Security Update for Windows XP (KB2898715)
Security Update for Windows XP (KB2900986)
Security Update for Windows XP (KB2914368)
Security Update for Windows XP (KB2916036)
Security Update for Windows XP (KB2922229)
Security Update for Windows XP (KB2929961)
Security Update for Windows XP (KB2930275)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982381)
Security Update for Windows XP (KB982665)
SharePort Utility
Sonic Audio Module
Sonic Copy Module
Sonic Data Module
Sonic Express Labeler
Sonic MyDVD Plus
Sonic Update Manager
SoulseekQt
Synaptics Pointing Device Driver
Texas Instruments PCIxx21/x515 drivers.
TIxx21
Unity Web Player
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2616676-v2)
Update for Windows XP (KB2661254-v2)
Update for Windows XP (KB2718704)
Update for Windows XP (KB2736233)
Update for Windows XP (KB2749655)
Update for Windows XP (KB2904266)
Update for Windows XP (KB2934207)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
virtual DJ
Virtual DJ 8.0 Evolution
Visual Studio 2012 x86 Redistributables
VLC media player
WebFldrs XP
Windows Driver Package - FTDI CDM Driver Package (02/17/2009 2.04.16)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8
Windows Media Format Runtime
Windows Media Player 10
Windows XP Service Pack 3
WinRAR 4.00 (32-bit)
.
==== Event Viewer Messages From Past Week ========
.
12/6/2014 5:44:29 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the MBAMService service.
12/6/2014 5:43:55 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the MBAMScheduler service to connect.
12/6/2014 5:43:55 AM, error: Service Control Manager [7000] - The MBAMScheduler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
12/6/2014 5:41:59 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
11/30/2014 1:46:31 AM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
11/30/2014 1:46:23 AM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
11/29/2014 9:07:05 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: eabfiltr
.
==== End Of File ===========================
 
Welcome aboard

Please, observe following rules:
  • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
  • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
  • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
  • Never run more than one scan at a time.
  • Keep updating me regarding your computer behavior, good, or bad.
  • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
  • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
  • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

=====================================

redtarget.gif
Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

  • Close all the running programs
  • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
  • Otherwise just double-click on RogueKiller.exe
  • Pre-scan will start. Let it finish.
  • Click on SCAN button.
  • Wait until the Status box shows Scan Finished
  • Click on Delete.
  • Wait until the Status box shows Deleting Finished.
  • Click on Report and copy/paste the content of the Notepad into your next reply.
  • RKreport.txt could also be found on your desktop.
  • If more than one log is produced post all logs.
  • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

redtarget.gif
Create new restore point before proceeding with the next step....
How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

Download
51a5f31352b88-icon_MBAR.png
Malwarebytes Anti-Rootkit to your desktop.
  • Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
  • Double click on downloaded file. OK self extracting prompt.
  • MBAR will start. Click "Next" to continue.
  • Click in the following screen "Update" to obtain the latest malware definitions.
  • Once the update is complete select "Next" and click "Scan".
  • When the scan is finished and no malware has been found select "Exit".
  • If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
  • Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
    • "mbar-log-{date} (xx-xx-xx).txt"
    • "system-log.txt"
NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit.
 
Status
Not open for further replies.
Back