TechSpot

Joy wallet

By atomatik
Dec 6, 2014
  1. Dont know how it got there or how to get rid of it. but it has implanted itself in my laptop
    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 12/6/2014
    Scan Time: 4:02:32 AM
    Logfile: declog.txt
    Administrator: Yes

    Version: 2.00.4.1028
    Malware Database: v2014.12.06.05
    Rootkit Database: v2014.12.03.01
    License: Trial
    Malware Protection: Enabled
    Malicious Website Protection: Enabled
    Self-protection: Disabled

    OS: Windows XP Service Pack 3
    CPU: x86
    File System: NTFS
    User: Remote-

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 298865
    Time Elapsed: 42 min, 13 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 2
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-1214440339-1078145449-839522115-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CROSSRIDER, Quarantined, [9b0258075626bf77dfd007972ada20e0],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [8419e778225a03330f688da2e320867a],

    Registry Values: 1
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-1214440339-1078145449-839522115-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CROSSRIDER|Verifier, adf7bfc0c32b4609c55fd812fd340e05, Quarantined, [9b0258075626bf77dfd007972ada20e0]

    Registry Data: 3
    PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|AntiVirusDisableNotify, 1, Good: (0), Bad: (1),Replaced,[29743d22a7d50e28ec274a14818427d9]
    PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|FirewallDisableNotify, 1, Good: (0), Bad: (1),Replaced,[2d7048175a22f442c3511846c93c9868]
    PUM.Disabled.SecurityCenter, HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER|UpdatesDisableNotify, 1, Good: (0), Bad: (1),Replaced,[f0adc09f4a3282b4fc19e47a60a53bc5]

    Folders: 17
    PUP.Optional.OpenCandy, C:\Documents and Settings\Remote-\Application Data\OpenCandy, Quarantined, [1e7f5d0287f55ed8b4fb7d988b782fd1],
    PUP.Optional.OpenCandy, C:\Documents and Settings\Remote-\Application Data\OpenCandy\78D156A2CFA14BE48B787FEE334363E6, Quarantined, [1e7f5d0287f55ed8b4fb7d988b782fd1],
    PUP.Optional.OpenCandy, C:\Documents and Settings\Remote-\Application Data\OpenCandy\OpenCandy_78D156A2CFA14BE48B787FEE334363E6, Quarantined, [1e7f5d0287f55ed8b4fb7d988b782fd1],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults\preferences, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale\en-US, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342, Quarantined, [8419e778225a03330f688da2e320867a],

    Files: 128
    PUP.Optional.Bundle, C:\Documents and Settings\Remote-\My Documents\Downloads\XvidInstaller (1).exe, Quarantined, [544968f75f1d65d1fd8f7cd725e09c64],
    PUP.Optional.Bundle, C:\Documents and Settings\Remote-\My Documents\Downloads\XvidInstaller.exe, Quarantined, [613cbba4df9de353f498a2b19d68f50b],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome.manifest, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\install.rdf, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\0c2692c770eb5c13589b44a2761d86ae.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\16223ca789d557bb5cb699e275a41187.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\4f7057cd6eb7898f92041ddf509b8243.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\816d6771a30cf3777cc25b35041f00d9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\b63e7f4826fe1baaed59dd9c98737a07.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\bacf3ec6d46fe1ac5657248343db0e52.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\background.html, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\browser.xul, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\dialog.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\options.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\options.xul, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\search_dialog.xul, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\7b521e8fbf0b7e824d82ee3c274fbd20.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\02ac58c925f51c4e7c3229959213860d.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\05e82df65cd3e66a92977e0678ad5f07.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\137e737e6edc21e627b4ad3c26d9ca99.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\18b5bc854e0c6ca2366b4bef37e212fc.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\2a326739631b1915846fbf7bdb33dd95.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\37044689f8bd89c0f2675d8bc52a7ca5.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\503a43e99ebe9d4074f0cb83787fb700.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\53312545bd8731ad2a0863900955c111.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\7d59492ff4892b9d3bc33b4d8374729b.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\92d9fd7c0c6353b2b3299752b70a52c9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\99fe2365872094a8a6a660e0593ce8c9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\a5682bdb82b1af4ccee55f1d7dba0282.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\bc0b05a539732dae00f4590da85898a7.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\c08273a161afa4d67fd5e9891189c8c6.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\api\fd14fe24c52f8d578937f4fe256021e0.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\9fd006321a042b2d70a969708cec8817.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\030eb8ee89bed8600d56eebfddce1018.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\0cc9e588f0f599b116dcb2649362d185.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\0e6f74d6223a6c3228c22c152b7271fd.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\10618d5939237784d5d1d0f816af9444.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\278d775dc6eba17b336b967cfe0c2870.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\3d18f051cf329416ecfef7762f9c1043.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\3e213f97f1da06fc05ca613889edf451.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\44b471e0babb6b985ecbb443cfe39a32.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\51cde7082b68961ac3f94ded2e4b9e54.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\6c4bbf6e56d18ab6d5ae931076275c4d.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\774f96665881397b8629fbe5b913f8eb.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\89ea68bb50eb065e4dea0da0157ae7dd.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\9d35e6d9c092f95d021da12ab3b502b6.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\a33967e91e921095662cf3a1f158f39f.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\ab0f579c75f715ded43c79a91316f130.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\ab27ec2dc0c0acdb5ac68c7e553260d0.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\b04336534542feb8fc5e6f58e75c2974.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\cfa080c17964c81a22acbf206054e695.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\fb77cb26c6843ff95882a6d52e5bc4bb.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\chrome\content\core\installer.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\defaults\preferences\prefs.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\manifest.xml, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins.json, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\223.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\1.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\102.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\104.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\13.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\14.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\16.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\17.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\177.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\180.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\182.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\183.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\184.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\192.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\195.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\200.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\207.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\21.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\22.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\220.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\221.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\226.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\242.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\244.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\246.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\262.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\263.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\268.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\273.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\28.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\281.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\289.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\301.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\4.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\47.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\64.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\7.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\72.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\78.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\9.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\91.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\93.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\plugins\98.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode\background.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\extensionData\userCode\extension.js, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\locale\en-US\translations.dtd, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button1.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button2.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button3.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button4.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\button5.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\crossrider_statusbar.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon128.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon16.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon24.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\icon48.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\panelarrow-up.png, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\popup.html, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\skin.css, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\extensions\1853a82e-ce44-4a8c-a6fe-9bcf74a65575@4b6b1c16-5f0a-4ef0-866f-b063e235ef97.com\skin\update.css, Quarantined, [f1accb946913e94dab65f823996a09f7],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleCrashHandler.exe, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdate.exe, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdateBroker.exe, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdateHelper.msi, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\GoogleUpdateOnDemand.exe, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\goopdate.dll, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\goopdateres_en.dll, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\npGoogleUpdate4.dll, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\psmachine.dll, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.GlobalUpdate.A, C:\Documents and Settings\Remote-\Local Settings\Temp\comh.418342\psuser.dll, Quarantined, [8419e778225a03330f688da2e320867a],
    PUP.Optional.CrossRider.A, C:\Documents and Settings\Remote-\Application Data\Mozilla\Firefox\Profiles\71evqvip.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14998baca99db0a7e33af4cef0591530");), Replaced,[524bf669f08cc96dd3835d3e3cc9b54b]

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  2. atomatik

    atomatik TS Rookie Topic Starter

    DDS (Ver_2012-11-20.01) - NTFS_x86
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.71.2
    Run by Remote- at 6:01:47 on 2014-12-06
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1918.841 [GMT -7:00]
    .
    AV: AVG AntiVirus Free Edition 2015 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    .
    ============== Running Processes ================
    .
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\D-Link\SharePort Utility\Spnuhelper.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\D-Link\SharePort Utility\Connect.exe
    C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\HPQ\shared\hpqwmi.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k NetworkService
    C:\WINDOWS\system32\svchost.exe -k LocalService
    C:\WINDOWS\system32\svchost.exe -k LocalService
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.google.ca/ig
    uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=Q305&bd=presario&pf=laptop
    uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_CA&c=Q305&bd=presario&pf=laptop
    BHO: AcroIEHlprObj Class: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
    mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
    mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
    mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
    mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
    mRun: [Cpqset] c:\program files\hpq\default settings\cpqset.exe
    mRun: [hpWirelessAssistant] c:\program files\hpq\hp wireless assistant\HP Wireless Assistant.exe
    mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    mRun: [AVG_UI] "c:\program files\avg\avg2015\avgui.exe" /TRAYONLY
    StartupFolder: c:\docume~1\remote-\startm~1\programs\startup\sharep~1.lnk - c:\program files\d-link\shareport utility\Connect.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC} - c:\program files\java\jre7\bin\ssv.dll
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1354122251718
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
    DPF: {B479199A-1242-4E3C-AD81-7F0DF801B4AE} - hxxp://download.microsoft.com/download/C/9/C/C9C3D86D-84AC-4AF0-8584-842756A66467/MicrosoftDownloadManager.cab
    DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
    TCP: NameServer = 192.168.1.254 192.168.1.254
    TCP: Interfaces\{3871DE3A-B732-4322-8349-31B14BA1A928} : DHCPNameServer = 192.168.1.254 192.168.1.254
    TCP: Interfaces\{A084B7F7-C801-4E6F-A42A-AB64A7B4E906} : DHCPNameServer = 192.168.0.5
    Notify: AtiExtEvent - Ati2evxx.dll
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\remote-\application data\mozilla\firefox\profiles\71evqvip.default\
    FF - plugin: c:\documents and settings\remote-\local settings\application data\unity\webplayer\loader\npUnity3D32.dll
    FF - plugin: c:\program files\common files\tencent\npchrome\npchrome.dll
    FF - plugin: c:\program files\common files\tencent\npqscall\npqscall.dll
    FF - plugin: c:\program files\common files\tencent\txsso\1.2.2.1\bin\npSSOAxCtrlForPTLogin.dll
    FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
    FF - plugin: c:\windows\npMSDM.dll
    FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_15_0_0_239.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2014-6-18 147736]
    R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2014-7-18 230680]
    R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2014-10-5 98584]
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2014-6-18 27416]
    R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [2014-6-18 121624]
    R1 AVGIDSDriverl;AVGIDSDriverl;c:\windows\system32\drivers\avgidsdriverlx.sys [2014-10-29 198936]
    R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2014-6-18 21272]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2014-8-28 192792]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2014-10-10 200984]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2015\avgidsagent.exe [2014-11-9 3488784]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg2015\avgwdsvc.exe [2014-11-9 298080]
    R2 D-Link SharePort Helper;D-Link SharePort Helper;c:\program files\d-link\shareport utility\Spnuhelper.exe [2011-10-1 40960]
    R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [2007-10-9 38144]
    R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes anti-malware\mbamscheduler.exe [2014-12-6 1871160]
    R2 MBAMService;MBAMService;c:\program files\malwarebytes anti-malware\mbamservice.exe [2014-12-6 969016]
    R2 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2009-7-3 246920]
    R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [2011-2-20 200192]
    R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-12-6 23256]
    R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-12-6 114904]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\drivers\netaapl.sys [2012-12-12 18432]
    S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8192su.sys [2009-9-16 590080]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-7-20 754856]
    .
    =============== Created Last 30 ================
    .
    2014-12-06 12:38:41 52440 ----a-w- c:\windows\system32\drivers\webdyld.sys
    2014-12-06 11:01:27 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
    2014-12-06 10:59:08 54360 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
    2014-12-06 10:59:08 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
    2014-12-06 10:59:08 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
    2014-12-06 10:59:08 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes
    2014-11-30 08:50:39 -------- d-----w- c:\windows\pss
    2014-11-30 04:38:53 -------- d-----w- c:\documents and settings\remote-\application data\AVG2015
    2014-11-30 04:37:55 -------- d-----w- c:\documents and settings\remote-\application data\TuneUp Software
    2014-11-30 04:36:36 -------- d--h--w- C:\$AVG
    2014-11-30 04:36:36 -------- d-----w- c:\documents and settings\all users\application data\AVG2015
    2014-11-30 04:35:23 -------- d-----w- c:\program files\AVG
    2014-11-30 04:31:00 -------- d--h--w- c:\documents and settings\all users\application data\Common Files
    2014-11-30 04:30:59 -------- d-----w- c:\documents and settings\remote-\local settings\application data\MFAData
    2014-11-30 04:30:59 -------- d-----w- c:\documents and settings\remote-\local settings\application data\Avg2015
    2014-11-30 04:30:59 -------- d-----w- c:\documents and settings\all users\application data\MFAData
    2014-11-16 14:48:26 91136 ----a-w- c:\windows\system32\kswdmcap.ax
    2014-11-16 14:48:26 61952 ----a-w- c:\windows\system32\kstvtune.ax
    2014-11-16 14:48:26 53760 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
    2014-11-16 14:48:26 53760 ----a-w- c:\windows\system32\vfwwdm32.dll
    2014-11-16 14:48:26 43008 ----a-w- c:\windows\system32\ksxbar.ax
    2014-11-11 03:51:15 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
    2014-11-10 06:27:05 -------- d-----w- c:\documents and settings\remote-\local settings\application data\Mozilla
    2014-11-10 06:26:51 -------- d-----w- c:\program files\Mozilla Maintenance Service
    2014-11-09 23:33:38 -------- d-----w- c:\program files\iPod
    2014-11-09 23:33:27 -------- d-----w- c:\program files\iTunes
    2014-11-09 23:33:27 -------- d-----w- c:\documents and settings\all users\application data\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB
    2014-11-09 07:05:43 -------- d-----w- c:\program files\globalUpdate
    2014-11-09 07:05:42 -------- d-----w- c:\documents and settings\remote-\local settings\application data\globalUpdate
    2014-11-09 07:04:58 225280 ----a-w- c:\windows\system32\rewire.dll
    2014-11-09 07:04:58 -------- d-----w- c:\program files\VstPlugins
    2014-11-09 07:04:31 1554944 ----a-w- c:\windows\system32\vorbis.acm
    2014-11-09 07:04:24 -------- d-----w- c:\program files\Outsim
    2014-11-09 06:59:53 -------- d-----w- c:\program files\Image-Line
    2014-11-09 06:15:19 -------- d-----w- c:\documents and settings\remote-\local settings\application data\Pogoplug
    2014-11-08 23:07:28 -------- d-----w- c:\documents and settings\remote-\local settings\application data\SoulseekQt
    2014-11-08 05:30:17 -------- d-----w- c:\program files\VideoLAN
    2014-11-08 04:19:24 -------- d-----w- c:\documents and settings\remote-\application data\uTorrent
    2014-11-08 04:18:39 -------- d-----w- c:\program files\SoulseekQt
    2014-11-08 03:15:30 -------- d-----w- c:\windows\system32\MRT
    .
    ==================== Find3M ====================
    .
    2014-11-30 04:19:37 701104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2014-11-30 04:19:36 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2014-10-30 04:35:14 198936 ----a-w- c:\windows\system32\drivers\avgidsdriverlx.sys
    2014-10-10 21:13:58 200984 ----a-w- c:\windows\system32\drivers\avgtdix.sys
    2014-09-27 01:16:32 145408 ----a-w- c:\windows\system32\javacpl.cpl
    .
    ============= FINISH: 6:03:08.59 ===============
     
  3. atomatik

    atomatik TS Rookie Topic Starter

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows XP Home Edition
    Boot Device: \Device\HarddiskVolume1
    Install Date: 2/20/2011 5:59:49 PM
    System Uptime: 12/6/2014 5:40:25 AM (1 hours ago)
    .
    Motherboard: Quanta | | 3097
    Processor: Mobile AMD Sempron(tm) Processor 3000+ | U23 | 1794/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 37 GiB total, 19.751 GiB free.
    D: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: Realtek RTL8139/810x Family Fast Ethernet NIC
    Device ID: PCI\VEN_10EC&DEV_8139&SUBSYS_3091103C&REV_10\4&13826118&0&00A4
    Manufacturer: Realtek Semiconductor Corp.
    Name: Realtek RTL8139/810x Family Fast Ethernet NIC
    PNP Device ID: PCI\VEN_10EC&DEV_8139&SUBSYS_3091103C&REV_10\4&13826118&0&00A4
    Service: RTL8023xp
    .
    ==== System Restore Points ===================
    .
    RP76: 11/7/2014 9:18:37 AM - System Checkpoint
    RP78: 11/7/2014 10:32:09 AM - Configured TIxx21
    RP79: 11/7/2014 10:50:08 AM - Software Distribution Service 3.0
    RP80: 11/7/2014 8:13:35 PM - Software Distribution Service 3.0
    RP81: 11/9/2014 1:11:42 AM - System Checkpoint
    RP82: 11/9/2014 11:22:58 PM - Removed Zone Deluxe Games
    RP83: 11/10/2014 8:50:03 PM - Installed Java 7 Update 71
    RP84: 11/15/2014 2:23:26 AM - Software Distribution Service 3.0
    RP85: 11/16/2014 7:38:19 AM - Logitech Webcam Software v12.10.1110
    RP86: 11/29/2014 9:35:19 PM - Installed AVG 2015
    RP87: 11/29/2014 9:36:12 PM - Installed AVG 2015
    RP88: 11/30/2014 2:03:40 AM - december14
    RP89: 12/1/2014 2:21:07 AM - System Checkpoint
    RP90: 12/2/2014 2:55:32 AM - System Checkpoint
    RP91: 12/3/2014 3:46:49 AM - System Checkpoint
    RP92: 12/4/2014 4:38:08 AM - System Checkpoint
    RP93: 12/5/2014 5:29:47 AM - System Checkpoint
    .
    ==== Installed Programs ======================
    .
    ĀµTorrent
    Adobe Flash Player 15 ActiveX
    Adobe Flash Player 15 Plugin
    Adobe Reader 7.0
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Asus 802.11n Network Adapter
    Athlon 64 Processor Driver
    ATI - Software Uninstall Utility
    ATI Control Panel
    ATI Display Driver
    AVG 2015
    Bonjour
    Broadcom 802.11 Wireless LAN Adapter
    Conexant AC-Link Audio
    Data Fax SoftModem with SmartCP
    FL Studio 10
    Hotfix for Windows XP (KB2443685)
    Hotfix for Windows XP (KB2570791)
    Hotfix for Windows XP (KB2633952)
    Hotfix for Windows XP (KB2756822)
    Hotfix for Windows XP (KB2779562)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB981793)
    HP Help and Support
    HP Update
    HP User Guides 0001
    HP Wireless Assistant 1.01 A2
    IL Download Manager
    InterVideo WinDVD
    iTunes
    J2SE Runtime Environment 5.0 Update 2
    Java 7 Update 71
    Java Auto Updater
    Malwarebytes Anti-Malware version 2.0.4.1028
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB2698023)
    Microsoft .NET Framework 1.1 Security Update (KB2833941)
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 4 Client Profile
    Microsoft .NET Framework 4 Extended
    Microsoft Download Manager
    Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
    Mozilla Firefox 33.1.1 (x86 en-US)
    Mozilla Maintenance Service
    muvee autoProducer 4.0 - SE
    PL-2303 USB-to-Serial
    REALTEK Gigabit and Fast Ethernet NIC Driver
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2861188)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2898855v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2901110v2)
    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
    Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
    Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
    Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)
    Security Update for Microsoft .NET Framework 4 Extended (KB2901110v2)
    Security Update for Microsoft Windows (KB2564958)
    Security Update for Windows Internet Explorer 8 (KB2482017)
    Security Update for Windows Internet Explorer 8 (KB2510531)
    Security Update for Windows Internet Explorer 8 (KB2544521)
    Security Update for Windows Internet Explorer 8 (KB2559049)
    Security Update for Windows Internet Explorer 8 (KB2675157)
    Security Update for Windows Internet Explorer 8 (KB2699988)
    Security Update for Windows Internet Explorer 8 (KB2744842)
    Security Update for Windows Internet Explorer 8 (KB2761465)
    Security Update for Windows Internet Explorer 8 (KB2792100)
    Security Update for Windows Internet Explorer 8 (KB2797052)
    Security Update for Windows Internet Explorer 8 (KB2817183)
    Security Update for Windows Internet Explorer 8 (KB2909210)
    Security Update for Windows Internet Explorer 8 (KB2936068)
    Security Update for Windows Internet Explorer 8 (KB2964358)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Media Player (KB2378111)
    Security Update for Windows Media Player (KB2834902-v2)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB975558)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2121546)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2259922)
    Security Update for Windows XP (KB2296011)
    Security Update for Windows XP (KB2347290)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB2387149)
    Security Update for Windows XP (KB2393802)
    Security Update for Windows XP (KB2412687)
    Security Update for Windows XP (KB2419632)
    Security Update for Windows XP (KB2423089)
    Security Update for Windows XP (KB2440591)
    Security Update for Windows XP (KB2443105)
    Security Update for Windows XP (KB2476490)
    Security Update for Windows XP (KB2476687)
    Security Update for Windows XP (KB2478960)
    Security Update for Windows XP (KB2478971)
    Security Update for Windows XP (KB2479628)
    Security Update for Windows XP (KB2479943)
    Security Update for Windows XP (KB2481109)
    Security Update for Windows XP (KB2483185)
    Security Update for Windows XP (KB2485376)
    Security Update for Windows XP (KB2485663)
    Security Update for Windows XP (KB2503665)
    Security Update for Windows XP (KB2506212)
    Security Update for Windows XP (KB2507618)
    Security Update for Windows XP (KB2507938)
    Security Update for Windows XP (KB2508272)
    Security Update for Windows XP (KB2508429)
    Security Update for Windows XP (KB2509553)
    Security Update for Windows XP (KB2524375)
    Security Update for Windows XP (KB2535512)
    Security Update for Windows XP (KB2536276-v2)
    Security Update for Windows XP (KB2544893-v2)
    Security Update for Windows XP (KB2544893)
    Security Update for Windows XP (KB2555917)
    Security Update for Windows XP (KB2562937)
    Security Update for Windows XP (KB2566454)
    Security Update for Windows XP (KB2567680)
    Security Update for Windows XP (KB2570222)
    Security Update for Windows XP (KB2570947)
    Security Update for Windows XP (KB2584146)
    Security Update for Windows XP (KB2585542)
    Security Update for Windows XP (KB2592799)
    Security Update for Windows XP (KB2598479)
    Security Update for Windows XP (KB2603381)
    Security Update for Windows XP (KB2618451)
    Security Update for Windows XP (KB2619339)
    Security Update for Windows XP (KB2620712)
    Security Update for Windows XP (KB2621440)
    Security Update for Windows XP (KB2624667)
    Security Update for Windows XP (KB2631813)
    Security Update for Windows XP (KB2646524)
    Security Update for Windows XP (KB2653956)
    Security Update for Windows XP (KB2655992)
    Security Update for Windows XP (KB2659262)
    Security Update for Windows XP (KB2661637)
    Security Update for Windows XP (KB2676562)
    Security Update for Windows XP (KB2685939)
    Security Update for Windows XP (KB2686509)
    Security Update for Windows XP (KB2691442)
    Security Update for Windows XP (KB2695962)
    Security Update for Windows XP (KB2698365)
    Security Update for Windows XP (KB2705219-v2)
    Security Update for Windows XP (KB2707511)
    Security Update for Windows XP (KB2709162)
    Security Update for Windows XP (KB2712808)
    Security Update for Windows XP (KB2719985)
    Security Update for Windows XP (KB2723135-v2)
    Security Update for Windows XP (KB2724197)
    Security Update for Windows XP (KB2727528)
    Security Update for Windows XP (KB2753842-v2)
    Security Update for Windows XP (KB2753842)
    Security Update for Windows XP (KB2757638)
    Security Update for Windows XP (KB2758857)
    Security Update for Windows XP (KB2761226)
    Security Update for Windows XP (KB2770660)
    Security Update for Windows XP (KB2778344)
    Security Update for Windows XP (KB2779030)
    Security Update for Windows XP (KB2780091)
    Security Update for Windows XP (KB2799494)
    Security Update for Windows XP (KB2802968)
    Security Update for Windows XP (KB2807986)
    Security Update for Windows XP (KB2808735)
    Security Update for Windows XP (KB2813170)
    Security Update for Windows XP (KB2813345)
    Security Update for Windows XP (KB2820917)
    Security Update for Windows XP (KB2834886)
    Security Update for Windows XP (KB2847311)
    Security Update for Windows XP (KB2850869)
    Security Update for Windows XP (KB2859537)
    Security Update for Windows XP (KB2862152)
    Security Update for Windows XP (KB2862330)
    Security Update for Windows XP (KB2862335)
    Security Update for Windows XP (KB2864063)
    Security Update for Windows XP (KB2868038)
    Security Update for Windows XP (KB2868626)
    Security Update for Windows XP (KB2876217)
    Security Update for Windows XP (KB2876331)
    Security Update for Windows XP (KB2892075)
    Security Update for Windows XP (KB2893294)
    Security Update for Windows XP (KB2898715)
    Security Update for Windows XP (KB2900986)
    Security Update for Windows XP (KB2914368)
    Security Update for Windows XP (KB2916036)
    Security Update for Windows XP (KB2922229)
    Security Update for Windows XP (KB2929961)
    Security Update for Windows XP (KB2930275)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB979687)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981322)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982132)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982381)
    Security Update for Windows XP (KB982665)
    SharePort Utility
    Sonic Audio Module
    Sonic Copy Module
    Sonic Data Module
    Sonic Express Labeler
    Sonic MyDVD Plus
    Sonic Update Manager
    SoulseekQt
    Synaptics Pointing Device Driver
    Texas Instruments PCIxx21/x515 drivers.
    TIxx21
    Unity Web Player
    Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)
    Update for Microsoft .NET Framework 4 Extended (KB2836939v3)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows XP (KB2141007)
    Update for Windows XP (KB2345886)
    Update for Windows XP (KB2541763)
    Update for Windows XP (KB2616676-v2)
    Update for Windows XP (KB2661254-v2)
    Update for Windows XP (KB2718704)
    Update for Windows XP (KB2736233)
    Update for Windows XP (KB2749655)
    Update for Windows XP (KB2904266)
    Update for Windows XP (KB2934207)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971029)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    virtual DJ
    Virtual DJ 8.0 Evolution
    Visual Studio 2012 x86 Redistributables
    VLC media player
    WebFldrs XP
    Windows Driver Package - FTDI CDM Driver Package (02/17/2009 2.04.16)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Internet Explorer 8
    Windows Media Format Runtime
    Windows Media Player 10
    Windows XP Service Pack 3
    WinRAR 4.00 (32-bit)
    .
    ==== Event Viewer Messages From Past Week ========
    .
    12/6/2014 5:44:29 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the MBAMService service.
    12/6/2014 5:43:55 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the MBAMScheduler service to connect.
    12/6/2014 5:43:55 AM, error: Service Control Manager [7000] - The MBAMScheduler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    12/6/2014 5:41:59 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
    11/30/2014 1:46:31 AM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    11/30/2014 1:46:23 AM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
    11/29/2014 9:07:05 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: eabfiltr
    .
    ==== End Of File ===========================
     
  4. Broni

    Broni Malware Annihilator Posts: 52,890   +344

    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    =====================================

    [​IMG] Download RogueKiller from one of the following links and save it to your Desktop:

    Link 1
    Link 2

    • Close all the running programs
    • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

    [​IMG] Create new restore point before proceeding with the next step....
    How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

    Download [​IMG] Malwarebytes Anti-Rootkit to your desktop.
    • Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
    • Double click on downloaded file. OK self extracting prompt.
    • MBAR will start. Click "Next" to continue.
    • Click in the following screen "Update" to obtain the latest malware definitions.
    • Once the update is complete select "Next" and click "Scan".
    • When the scan is finished and no malware has been found select "Exit".
    • If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
    • Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
      • "mbar-log-{date} (xx-xx-xx).txt"
      • "system-log.txt"
    NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...