TechSpot

Laptop infected with msupdate71/dwm.exe

By AbbbY Sen
Feb 18, 2015
  1. I have got AVG which detects the threat every time but is not able to remove it. I tried to delete the folder itself but it always come back and had made my laptop run slow.
    I'll be very thankful to you guys if you help me in getting my laptop cleaned. I want your pro assistance and I'll follow everything you tell me to do! Thanks again!
     
  2. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    Welcome aboard [​IMG]


    Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
    Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
    Attached logs won't be reviewed.


    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
     
  3. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    I tried the safe mode thing and deleted msupdate71 folder, which however is not showing up in the Temp as if now. But there seems many more malwares as checked by MBAM

    1. MBAM Log
    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 19-02-2015
    Scan Time: 02:50:01
    Logfile: malwareLogFile.txt
    Administrator: Yes

    Version: 2.00.4.1028
    Malware Database: v2015.02.18.09
    Rootkit Database: v2015.02.03.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: Abhishek

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 355159
    Time Elapsed: 23 min, 7 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 56
    PUP.Optional.Wajam.A, HKLM\SOFTWARE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [27ca20ff33578fa7d606c57ffc07a35d],
    PUP.Optional.Wajam.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GamesAppIntegrationService, , [27ca20ff33578fa7d606c57ffc07a35d],
    PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [27ca20ff33578fa7d606c57ffc07a35d],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, , [7f7279a69feb26101ef1d56fd132a55b],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [7f7279a69feb26101ef1d56fd132a55b],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [7f7279a69feb26101ef1d56fd132a55b],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc.1, , [7f7279a69feb26101ef1d56fd132a55b],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc, , [7f7279a69feb26101ef1d56fd132a55b],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc, , [7f7279a69feb26101ef1d56fd132a55b],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc.1, , [7f7279a69feb26101ef1d56fd132a55b],
    PUP.Optional.Snapdo.T, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [d51c110ef49649edc6c4cb7c739050b0],
    PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, , [d51c110ef49649edc6c4cb7c739050b0],
    PUP.Optional.SearchProtect.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, , [36bb849ba8e2e3535f67a4660ef5c937],
    PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, , [faf7d649fa90be7812b5a56541c21fe1],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, , [faf7d649fa90be7812b5a56541c21fe1],
    PUP.Optional.Wajam.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}, , [767bd14e3f4b54e2bbb08d84d0337987],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\iagcajndpnfncplednpbnkahadegklfa, , [e110110e7416cb6b348aefdd897ad927],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [925fd44ba5e57cbafec7d50a7c87926e],
    PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [fcf5859a29610135af1c55a981831ae6],
    PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BonanzaDealsLive.exe, , [648da877286244f28cb7cb30eb1921df],
    PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\WOW6432NODE\BonanzaDealsLive, , [07ea1f003e4c320445fd7b803dc7b44c],
    PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, , [91609e812b5fd26441c74f72cc37d62a],
    PUP.Optional.Qone8.A, HKLM\SOFTWARE\WOW6432NODE\qone8Software, , [b63b4cd35d2dd46295eb629b3cc811ef],
    PUP.Optional.Ligtning.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\cekcjpgehmohobmdiikfnopibipmgnml, , [5998db44dab0d264653652873ec5b64a],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\defdhglnppeioeflggkmglipcecffkhk, , [f0011f00d4b63bfb333340d30bfa7090],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\iagcajndpnfncplednpbnkahadegklfa, , [42af25fa1575f73f605e4983867d5ea2],
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [727fe53ac0cace68279ec41b31d2d32d],
    PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BonanzaDealsLive.exe, , [f6fbb867f199340275cee6154bb99967],
    PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [ac45e63958328caaf79702f210f4748c],
    PUP.Optional.BonanzaDeals.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BonanzaDealsLive, , [d41dcf507b0fab8b41ff6e8d6b99d52b],
    PUP.Optional.DataMngr.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, , [db1675aab6d463d338e530c338cc56aa],
    PUP.Optional.DataMngr.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [826fde41503a003659c3ad460afaac54],
    PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\mysearchdial.com, , [1cd5908f32586ccadd60965ee1237e82],
    PUP.Optional.Softonic.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, , [4aa7a07f5832f145d8819c01b54e5ca4],
    PUP.Optional.SProtector.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SProtector, , [33be9887870373c30da85e973ec63ec2],
    PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\iagcajndpnfncplednpbnkahadegklfa, , [24cdfe214a40a195c2fdd6f68b78f30d],
    PUP.Optional.DVDVideoSoftTB.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp, , [33be44db91f9c76fef3073379a69fa06],
    PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [ce2355ca1674c373596b9d42f310bf41],
    PUP.Optional.InstallCore.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [529f5dc2fe8cfd392a323f9e2ad9cb35],
    PUP.Optional.InstallCore.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [fbf6a976f09aee4885bbc3307292e21e],
    PUP.Optional.OptimizerPro.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OptimizerPro, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO.1, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SuggestMeYes.SuggestMeYesBHO, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SuggestMeYes.SuggestMeYesBHO.1, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\INPROCSERVER32, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],

    Registry Values: 5
    PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [e40dfe215a3066d0a5a97a3358ab54ac]
    PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [f100041b6822290dd37bdfce7f841fe1]
    PUP.Optional.InstallCore.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O1C1R1H2Z1S1G1M1F, , [fbf6a976f09aee4885bbc3307292e21e]
    PUP.Optional.Snapdo.T, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [db169f803357072f7a137a3c63a02cd4]
    PUP.BitcoinMiner, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|tsiVideo, C:\Windows\SysWOW64\rundll32.exe C:\Users\Abhishek\AppData\Local\Temp\\mdi564.dll,asdasd, , [98594cd36426ae88e65c55c4ae577d83]

    Registry Data: 10
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=1&...8693&ir=),,[40b168b76129fb3b7b0f4283b55026da]
    PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[2dc42ff0afdb320479979135db2a35cb]
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://start.mysearchdial.com/?f=2&...yBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=122594302&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=2&...4302&ir=),,[ad44ee3157330a2c8eab5c607d886b95]
    PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=1&...8693&ir=),,[e809b56a97f33cfa71199d289f664cb4]
    PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[925fee31f1994cea3330fcbeaa5bbd43]
    PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[51a0ea35b2d81c1a56107a40699cb34d]
    PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[c52cf52a7911c571afb66159c73e8d73]
    PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[1cd538e77a101c1ad7913288ff064ab6]
    PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[0be6af70fd8dc0761950ebcf9c69c53b]
    PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[b43d9a855139e353f17303b71ce90ff1]
     
  4. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    Folders: 67
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\chrome, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\defaults, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\defaults\preferences, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log, , [d61ba57a3e4cc175288f9742c043f10f],
    PUP.Optional.BrowseToSave.A, C:\ProgramData\Browse2save, , [e90853ccc9c178be0805510763a02dd3],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\BetterSoft\OptimizerPro, , [6b867da2d7b325110b093f19db28966a],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\BetterSoft\OptimizerPro\3036567561, , [6b867da2d7b325110b093f19db28966a],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive, , [8170a976b3d7da5ca165ca8f40c3a35d],
    PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive\Update, , [8170a976b3d7da5ca165ca8f40c3a35d],
    PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive\Update\Log, , [8170a976b3d7da5ca165ca8f40c3a35d],
    PUP.Optional.BonanzaDeals.A, C:\Users\Abhishek\AppData\Local\BonanzaDealsLive, , [7c75f6293852e94db84f65f432d12ad6],
    PUP.Optional.BonanzaDeals.A, C:\Users\Abhishek\AppData\Local\BonanzaDealsLive\CrashReports, , [7c75f6293852e94db84f65f432d12ad6],
    PUP.Optional.BonanzaDeals.A, C:\Program Files (x86)\BonanzaDealsLive, , [2ec38a955733ba7c16f3b0a9c73c6997],
    PUP.Optional.BonanzaDeals.A, C:\Program Files (x86)\BonanzaDealsLive\CrashReports, , [2ec38a955733ba7c16f3b0a9c73c6997],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\misc, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Updater.A, C:\Users\Abhishek\AppData\Roaming\FoxTab\UpdateProc, , [da1728f724661224f631f97b8d76649c],
    PUP.Optional.BonanzaDeals.A, C:\Program Files (x86)\BonanzaDeals, , [8869cf501d6d5bdbf182324cf01321df],

    Files: 289
    PUP.Optional.Wajam.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, , [27ca20ff33578fa7d606c57ffc07a35d],
    Trojan.MSIL.Injector, C:\Users\Abhishek\AppData\Local\Temp\Runner2.exe, , [a44dbb64345689ade5c9a11737cec43c],
    Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX4\key.exe, , [b63bf52ae6a4d264cbfa4a9835ccfb05],
    Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX5\key.exe, , [b23fb9661b6f989e289dbc269d64d927],
    Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX6\key.exe, , [b73a68b71f6bbf77f4d120c2a160619f],
    Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX7\key.exe, , [718062bd1a7070c60eb702e0b849bf41],
    Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX8\key.exe, , [8a678e919beff0467e474c9627da3cc4],
    Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX9\key.exe, , [14dd1f00a9e1e05624a1f9e9d62bc937],
    PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsv5E3F.exe, , [23ce39e6602af046f085e66baa577789],
    PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsv5E40.exe, , [a54c26f90585fd39dd981b36e9183fc1],
    PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsb8BC6.exe, , [3fb2c45bc4c6e551542155fc38c9f50b],
    Trojan.MSIL.Injector, C:\Users\Abhishek\Downloads\Imtoo_Video_Converter_Ultimate_6.0.15.1110_keymaker.exe, , [d61b849b1c6ed660446a2f890df8827e],
    PUP.Optional.Amonetize.A, C:\Users\Abhishek\Downloads\Xilisoft Video Converter Ultimate 6 0 15 Build 1110 Serial_10924_i34265566_il345.exe, , [628fd54aff8b3600eb7376f5f01029d7],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\unins000.dat, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\FireFoxExtension.exe, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\InstTracker.exe, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\chrome\autocompleteprochrome.crx, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome.manifest, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\install.rdf, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\appIcon.png, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\browserOverlay.xul, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\options.js, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\options.xul, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\utils.js, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\defaults\preferences\predictad.js, , [b33e100f7f0b2e08ce657b2dc0430ff1],
    PUP.Optional.Claro.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dcillohgikpecbmgioknapdpcjofaafl_0.localstorage, , [1ad7091695f56cca872a06a4946f7f81],
    PUP.Optional.ContinueToSave.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage, , [22cf9c834f3bfb3b446b8a298182af51],
    PUP.Optional.ContinueToSave.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal, , [9a57e23dd2b80c2a6f40892a6a9924dc],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\mysearchdial-speeddial.crx, , [fff2f12e6b1fcc6a6392eec99370e917],
    PUP.Optional.Speedial.A, C:\Users\Abhishek\AppData\Local\speedial.crx, , [6c85f02fcbbfe05640f3289f04ffca36],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iagcajndpnfncplednpbnkahadegklfa_0.localstorage, , [d021d946206a1422e6d618b4ba49926e],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iagcajndpnfncplednpbnkahadegklfa_0.localstorage-journal, , [3db47da28307ff3715a78c40e51e27d9],
    PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log\eGdpSvc.LOG, , [d61ba57a3e4cc175288f9742c043f10f],
    PUP.Optional.BrowseToSave.A, C:\ProgramData\Browse2save\51195a4b2bc24.tlb, , [e90853ccc9c178be0805510763a02dd3],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\BetterSoft\OptimizerPro\3036567561.ini, , [6b867da2d7b325110b093f19db28966a],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Readme.txt, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Setup.dat, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Setup.exe, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Setup.ico, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\TsuDll.dll, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\_Setup.dll, , [b23fe936c7c357df00210f4927dc6c94],
    PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive\Update\Log\BonanzaDealsLive.log, , [8170a976b3d7da5ca165ca8f40c3a35d],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\background.html, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\background.js, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\icon128.png, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\jquery.js, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\manifest.json, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\xa.js, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\xagainit.js, , [529fd14e0882bb7b7742451534cf768a],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\manifest.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\background.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\background.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\misc\screenshot.inject.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_de.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_en_gb.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_en_us.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_fr.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_he.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_it.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_pt_br.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_ru.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_tr.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\angular.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\crypto-js.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery-2.1.0.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.autocomplete.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.balloon.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.fittext.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.Jcrop.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.simplecolorpicker.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\mustache.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\string.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\underscore-min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\gallery.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\gallery.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\newtab.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\newtab.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\review.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\review.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\foundation.min.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\indicator.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\Jcrop.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\jquery.autocomplete.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\jquery.Jcrop.min.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\jquery.simplecolorpicker.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\normalize.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\arrow-gallery-cat-selected.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\arrow.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\emptyArea.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\gallery.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\gallery_templates.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\icon-gallery-search.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\not_available_32.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\plus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons\128.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons\16.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons\48.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\buttons.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\footer.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\header.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\list.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\newtab.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\search.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\themes.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-layout.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-bar.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-medium.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-small.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\arrow-footer.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\arrow-header.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\attachment.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\close-bar2.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\close.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\edit-button.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-apps-dark.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-apps.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-chrome.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-close.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-contents-light.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-contents.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-edit.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-plus-dark.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-plus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-right.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-search.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-theme.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\menu_v.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\menu_v_white.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\x-button.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\arab_tile.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\batthern_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\bo_play_pattern_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\dark_wood_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\diagonal_striped_brick.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\escheresque_ste_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\gold_scale.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\purty_wood_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\readme.txt, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\starring_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\tileable_wood_texture_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
     
  5. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\weave_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\wild_oliva_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\woven.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\groups.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\list.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\activetabs.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\favorites.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\layout.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-add.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-edit.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-group.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\readitlater.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\recentlyclosed.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\theme.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\webapps.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\bookmarks.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\download.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloads.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloas.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\extensions.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\history.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\trash.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\empty.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\error.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\shadow.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\contactus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\facebook.ico, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\rateus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\twitter.ico, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\activetabs.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\favorites.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\layout.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-add.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-edit.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-group.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_content.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\recentlyclosed.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\theme.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps_contextmenu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_1.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_3.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_4.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_5.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\rating-star.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\review.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\bg.html, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\contentscript.js, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\manifest.json, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\128.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\16.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\256.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\32.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\48.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\64.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\AutocompletePro.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\AutocompletePro64.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.mysearchdial.AL", 2);), ,[e70a53ccd3b7df577c2c986aa264c43c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ser Preferences

    /* Do not edit this file.
    *
    * If yo), ,[7f729f80098134029b0d699960a6f20e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to this file while the appl), ,[7d7449d67c0e72c4c3e5f60c63a38b75]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_), ,[46ab62bd5832e94dc0e8709247bf34cc]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (adfind.flashBar", 0);
    user_pref("aol_toolbar.def), ,[cd249e81f09a93a32781cb37818520e0]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

    /* Do not edit this file.
    *
    * If you ), ,[ab46a7789bef1b1b337531d109fd8779]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

    /* Do not edit this file.
    *
    * If you ), ,[945de837305aad892d7b8a78c44255ab]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

    /* Do not edit this file.
    *
    * If yo), ,[aa4730ef1476b284565244bed432d62a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you), ,[1cd574ab32584beb4c5c976b5ea8ff01]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
    user_pref("app.update.lastUpdateTime.background-update-timer", 1424292174);
    user_pref("app.update.lastUpdateTim), ,[ca27df401b6f78be4a5eb84a4abcb34d]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( 1424292174);
    user_pref("app.update.lastUpdateTime.), ,[18d921fec0ca1323ebbd13ef3bcb45bb]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you make changes to this file whi), ,[d21fd34c147645f19414768c9c6a4cb4]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (s file.
    *
    * If you make changes to this file), ,[b140e13ecdbdf145f6b22cd6af57bd43]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check"), ,[3eb3b16ecebc0e28aefa13efa0661de3]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ();
    user_pref("aol_toolbar.default.search.check", false);
    u), ,[d91898876327b0865454857d3dc97b85]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    /* Do not edit this file.
    *
    * If you make changes), ,[cc25889737537cba06a227dba75f01ff]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you make chang), ,[00f120ff1b6f2d092f79c042bf47af51]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visi), ,[a74ac05fe4a6df57396ff80a5bab11ef]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (*
    * To make a manual change to preferences, you can visit the URL), ,[a15029f67218cc6ae2c6fe049d6909f7]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    user_pref(), ,[f5fc5dc2513985b12682828014f21ee2]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    user_pref("aol_toolbar.default.search.check", false);
    user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
    user_pref("app.update.lastUpdateTime.backgrou), ,[c829f926d7b3989e66420ef40cfaba46]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e overwritten when the application exits.
    *
    * To make a), ,[1cd58b943753da5c931553af887ed62a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to t), ,[c928c45b5a303501b9ef90720df99c64]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    /* Do not edit this file.
    *
    * If you make c), ,[e80931ee0288f0464464fa0863a3a55b]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

    /* Do not edit this file.
    *
    * If you make cha), ,[ba370619f8923ff78b1d778b9c6a8e72]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (* Do not edit this file.
    *
    * If you make changes), ,[d41da47b6228d462396fed159c6af60a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    ), ,[0ae78c933951bb7beabec24020e648b8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (r_pref("aol_toolbar.default.search.check", false);
    us), ,[569b0c137e0c6fc7654328da6f97e818]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

    /* Do not edit this file.
    *
    * If you make c), ,[7978c05f3159a09663459a6819edbc44]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you ma), ,[a0518897206a93a31e8acf33ee18847c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

    /* Do not edit this file.
    *
    * If you ), ,[19d89d8273172115fdab7d850501d030]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ences

    /* Do not edit this file.
    *
    * If you make ), ,[b0411708137700363d6b7f83887ee41c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you make changes to t), ,[14dd958a523811259f09887ac54127d9]
    PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prtkDS", 0);), ,[9b569d82434724123b7548bade287d83]
    PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (Preferences

    /* Do not edit this file.
    *
    * If), ,[d918ff2018728ea85858ba485aac2dd3]
    PUP.Optional.ASK.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTR...C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx");), ,[658ce53a90fa9e98b90a689a5da9bc44]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff");), ,[70810c13fd8dd2644f51a55ddf2706fa]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extensions.ir), ,[3cb56db21674a88e2f7146bcb155e818]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extension), ,[5f927ca36b1f79bd8b15d230a75f3cc4]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0Et), ,[03ee809fbcce46f03e62ea1843c3c937]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpg", true);), ,[07eaa27d177372c404a53cc621e58e72]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (sions.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2St), ,[c928b36c365472c46940e022e6203fc1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (B0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0Dy), ,[678aef30f991c96d2386f30f986e44bc]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irm), ,[e011b867a3e751e5acfd52b09274ea16]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (h.aflt", "dvd_14_16_ff");
    user_pref("extensions.I), ,[ec05fa25206aeb4b89203bc7e4222fd1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ons.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("ex), ,[ac45928d87031d19d4d560a2f41228d8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtD), ,[579a110ec6c4b086cfda897914f258a8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
    user_pref("extensions.mysearchdial.hmpg", true);
    user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0E), ,[8f62dd420a803df905a422e0fa0c58a8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0F), ,[05ec87980d7d96a06148699958aeff01]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (arch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irm), ,[32bf3ae53753c373abfeb44e43c3b44c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensio), ,[cd24a9766f1b78be8d1c45bd09fd27d9]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensio), ,[45ac38e775155cda4465639fce38ba46]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysear), ,[2ac7ca55662472c4b1f8986a3fc7ea16]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.ins), ,[0de4110e5931f14521886a98689e5ea2]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysear), ,[f8f90b145a309b9b397053af22e428d8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (earch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmys), ,[cb2642ddb5d5c0767e2b18ea53b337c9]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extensions.I), ,[1dd4ba65078391a58e1b808227dfb54b]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extens), ,[b140f12e672361d5b1f87f83f90df808]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extension), ,[a051c659b1d935015950c042bd494bb5]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extens), ,[b1408a958ffb42f4a20762a03dc9ae52]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ions.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", ), ,[f9f87ba498f2a78f4c5d966ccb3bf907]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (");
    user_pref("extensions.irmysearch.instlRef", "14), ,[37ba30ef91f91e18d1d8e1216a9c0ff1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("exten), ,[ee0376a9a6e49b9b3673b2507f87db25]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGy), ,[4ea36db21a701b1b8f1a22e0a165fc04]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtG), ,[cf22a8770288d75f1e8b36cc2adce21e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");), ,[856cfc2337532c0a8b1f917149bd728e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");
    user_pref), ,[955c0916c3c758de07a311f1ef1706fa]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
    user_pref("extensions.mysearchdial.hmpg", true);
    user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...tBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1), ,[5c9587986e1c0630b6f461a1050117e9]

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  6. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\weave_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\wild_oliva_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\woven.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\groups.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\list.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\activetabs.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\favorites.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\layout.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-add.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-edit.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-group.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\readitlater.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\recentlyclosed.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\theme.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\webapps.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\bookmarks.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\download.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloads.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloas.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\extensions.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\history.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\trash.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\empty.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\error.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\shadow.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\contactus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\facebook.ico, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\rateus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\twitter.ico, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\activetabs.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\favorites.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\layout.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-add.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-edit.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-group.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_content.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\recentlyclosed.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\theme.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps_contextmenu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_1.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_3.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_4.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_5.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\rating-star.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\review.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\bg.html, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\contentscript.js, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\manifest.json, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\128.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\16.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\256.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\32.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\48.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\64.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\AutocompletePro.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\AutocompletePro64.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.mysearchdial.AL", 2);), ,[e70a53ccd3b7df577c2c986aa264c43c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ser Preferences

    /* Do not edit this file.
    *
    * If yo), ,[7f729f80098134029b0d699960a6f20e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to this file while the appl), ,[7d7449d67c0e72c4c3e5f60c63a38b75]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_), ,[46ab62bd5832e94dc0e8709247bf34cc]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (adfind.flashBar", 0);
    user_pref("aol_toolbar.def), ,[cd249e81f09a93a32781cb37818520e0]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

    /* Do not edit this file.
    *
    * If you ), ,[ab46a7789bef1b1b337531d109fd8779]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

    /* Do not edit this file.
    *
    * If you ), ,[945de837305aad892d7b8a78c44255ab]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

    /* Do not edit this file.
    *
    * If yo), ,[aa4730ef1476b284565244bed432d62a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you), ,[1cd574ab32584beb4c5c976b5ea8ff01]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
    user_pref("app.update.lastUpdateTime.background-update-timer", 1424292174);
    user_pref("app.update.lastUpdateTim), ,[ca27df401b6f78be4a5eb84a4abcb34d]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( 1424292174);
    user_pref("app.update.lastUpdateTime.), ,[18d921fec0ca1323ebbd13ef3bcb45bb]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you make changes to this file whi), ,[d21fd34c147645f19414768c9c6a4cb4]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (s file.
    *
    * If you make changes to this file), ,[b140e13ecdbdf145f6b22cd6af57bd43]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check"), ,[3eb3b16ecebc0e28aefa13efa0661de3]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ();
    user_pref("aol_toolbar.default.search.check", false);
    u), ,[d91898876327b0865454857d3dc97b85]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    /* Do not edit this file.
    *
    * If you make changes), ,[cc25889737537cba06a227dba75f01ff]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you make chang), ,[00f120ff1b6f2d092f79c042bf47af51]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visi), ,[a74ac05fe4a6df57396ff80a5bab11ef]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (*
    * To make a manual change to preferences, you can visit the URL), ,[a15029f67218cc6ae2c6fe049d6909f7]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    user_pref(), ,[f5fc5dc2513985b12682828014f21ee2]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    user_pref("aol_toolbar.default.search.check", false);
    user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
    user_pref("app.update.lastUpdateTime.backgrou), ,[c829f926d7b3989e66420ef40cfaba46]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e overwritten when the application exits.
    *
    * To make a), ,[1cd58b943753da5c931553af887ed62a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to t), ,[c928c45b5a303501b9ef90720df99c64]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    /* Do not edit this file.
    *
    * If you make c), ,[e80931ee0288f0464464fa0863a3a55b]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

    /* Do not edit this file.
    *
    * If you make cha), ,[ba370619f8923ff78b1d778b9c6a8e72]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (* Do not edit this file.
    *
    * If you make changes), ,[d41da47b6228d462396fed159c6af60a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    ), ,[0ae78c933951bb7beabec24020e648b8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (r_pref("aol_toolbar.default.search.check", false);
    us), ,[569b0c137e0c6fc7654328da6f97e818]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

    /* Do not edit this file.
    *
    * If you make c), ,[7978c05f3159a09663459a6819edbc44]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you ma), ,[a0518897206a93a31e8acf33ee18847c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

    /* Do not edit this file.
    *
    * If you ), ,[19d89d8273172115fdab7d850501d030]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ences

    /* Do not edit this file.
    *
    * If you make ), ,[b0411708137700363d6b7f83887ee41c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you make changes to t), ,[14dd958a523811259f09887ac54127d9]
    PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prtkDS", 0);), ,[9b569d82434724123b7548bade287d83]
    PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (Preferences

    /* Do not edit this file.
    *
    * If), ,[d918ff2018728ea85858ba485aac2dd3]
    PUP.Optional.ASK.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTR...C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx");), ,[658ce53a90fa9e98b90a689a5da9bc44]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff");), ,[70810c13fd8dd2644f51a55ddf2706fa]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extensions.ir), ,[3cb56db21674a88e2f7146bcb155e818]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extension), ,[5f927ca36b1f79bd8b15d230a75f3cc4]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0Et), ,[03ee809fbcce46f03e62ea1843c3c937]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpg", true);), ,[07eaa27d177372c404a53cc621e58e72]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (sions.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2St), ,[c928b36c365472c46940e022e6203fc1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (B0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0Dy), ,[678aef30f991c96d2386f30f986e44bc]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irm), ,[e011b867a3e751e5acfd52b09274ea16]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (h.aflt", "dvd_14_16_ff");
    user_pref("extensions.I), ,[ec05fa25206aeb4b89203bc7e4222fd1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ons.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("ex), ,[ac45928d87031d19d4d560a2f41228d8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtD), ,[579a110ec6c4b086cfda897914f258a8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
    user_pref("extensions.mysearchdial.hmpg", true);
    user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0E), ,[8f62dd420a803df905a422e0fa0c58a8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0F), ,[05ec87980d7d96a06148699958aeff01]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (arch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irm), ,[32bf3ae53753c373abfeb44e43c3b44c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensio), ,[cd24a9766f1b78be8d1c45bd09fd27d9]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensio), ,[45ac38e775155cda4465639fce38ba46]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysear), ,[2ac7ca55662472c4b1f8986a3fc7ea16]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.ins), ,[0de4110e5931f14521886a98689e5ea2]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysear), ,[f8f90b145a309b9b397053af22e428d8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (earch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmys), ,[cb2642ddb5d5c0767e2b18ea53b337c9]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extensions.I), ,[1dd4ba65078391a58e1b808227dfb54b]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extens), ,[b140f12e672361d5b1f87f83f90df808]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extension), ,[a051c659b1d935015950c042bd494bb5]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extens), ,[b1408a958ffb42f4a20762a03dc9ae52]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ions.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", ), ,[f9f87ba498f2a78f4c5d966ccb3bf907]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (");
    user_pref("extensions.irmysearch.instlRef", "14), ,[37ba30ef91f91e18d1d8e1216a9c0ff1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("exten), ,[ee0376a9a6e49b9b3673b2507f87db25]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGy), ,[4ea36db21a701b1b8f1a22e0a165fc04]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtG), ,[cf22a8770288d75f1e8b36cc2adce21e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");), ,[856cfc2337532c0a8b1f917149bd728e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");
    user_pref), ,[955c0916c3c758de07a311f1ef1706fa]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
    user_pref("extensions.mysearchdial.hmpg", true);
    user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...tBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1), ,[5c9587986e1c0630b6f461a1050117e9]

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  7. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\weave_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\wild_oliva_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\woven.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\groups.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\list.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\activetabs.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\favorites.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\layout.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-add.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-edit.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-group.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\readitlater.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\recentlyclosed.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\theme.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\webapps.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\bookmarks.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\download.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloads.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloas.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\extensions.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\history.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\trash.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\empty.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\error.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\shadow.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\contactus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\facebook.ico, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\rateus.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\twitter.ico, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\activetabs.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\favorites.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\layout.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-add.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-edit.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-group.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_content.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\recentlyclosed.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\theme.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps_contextmenu.html, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_1.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_3.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_4.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_5.gif, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\rating-star.png, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\review.css, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\bg.html, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\contentscript.js, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\manifest.json, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\128.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\16.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\256.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\32.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\48.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\64.png, , [13de8996038712241927cda32dd65aa6],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\AutocompletePro.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\AutocompletePro64.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.mysearchdial.AL", 2);), ,[e70a53ccd3b7df577c2c986aa264c43c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ser Preferences

    /* Do not edit this file.
    *
    * If yo), ,[7f729f80098134029b0d699960a6f20e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to this file while the appl), ,[7d7449d67c0e72c4c3e5f60c63a38b75]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_), ,[46ab62bd5832e94dc0e8709247bf34cc]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (adfind.flashBar", 0);
    user_pref("aol_toolbar.def), ,[cd249e81f09a93a32781cb37818520e0]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

    /* Do not edit this file.
    *
    * If you ), ,[ab46a7789bef1b1b337531d109fd8779]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

    /* Do not edit this file.
    *
    * If you ), ,[945de837305aad892d7b8a78c44255ab]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

    /* Do not edit this file.
    *
    * If yo), ,[aa4730ef1476b284565244bed432d62a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you), ,[1cd574ab32584beb4c5c976b5ea8ff01]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
    user_pref("app.update.lastUpdateTime.background-update-timer", 1424292174);
    user_pref("app.update.lastUpdateTim), ,[ca27df401b6f78be4a5eb84a4abcb34d]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( 1424292174);
    user_pref("app.update.lastUpdateTime.), ,[18d921fec0ca1323ebbd13ef3bcb45bb]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you make changes to this file whi), ,[d21fd34c147645f19414768c9c6a4cb4]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (s file.
    *
    * If you make changes to this file), ,[b140e13ecdbdf145f6b22cd6af57bd43]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check"), ,[3eb3b16ecebc0e28aefa13efa0661de3]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ();
    user_pref("aol_toolbar.default.search.check", false);
    u), ,[d91898876327b0865454857d3dc97b85]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    /* Do not edit this file.
    *
    * If you make changes), ,[cc25889737537cba06a227dba75f01ff]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you make chang), ,[00f120ff1b6f2d092f79c042bf47af51]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visi), ,[a74ac05fe4a6df57396ff80a5bab11ef]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (*
    * To make a manual change to preferences, you can visit the URL), ,[a15029f67218cc6ae2c6fe049d6909f7]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    user_pref(), ,[f5fc5dc2513985b12682828014f21ee2]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    user_pref("aol_toolbar.default.search.check", false);
    user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
    user_pref("app.update.lastUpdateTime.backgrou), ,[c829f926d7b3989e66420ef40cfaba46]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e overwritten when the application exits.
    *
    * To make a), ,[1cd58b943753da5c931553af887ed62a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

    /* Do not edit this file.
    *
    * If you make changes to t), ,[c928c45b5a303501b9ef90720df99c64]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
    /* Do not edit this file.
    *
    * If you make c), ,[e80931ee0288f0464464fa0863a3a55b]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

    /* Do not edit this file.
    *
    * If you make cha), ,[ba370619f8923ff78b1d778b9c6a8e72]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (* Do not edit this file.
    *
    * If you make changes), ,[d41da47b6228d462396fed159c6af60a]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

    /* Do not edit this file.
    *
    * If you make changes to this file while the application is running,
    * the changes will be overwritten when the application exits.
    *
    * To make a manual change to preferences, you can visit the URL about:config
    */

    user_pref("accessibility.typeaheadfind.flashBar", 0);
    user_pref("aol_toolbar.default.homepage.check", false);
    user_pref("aol_toolbar.default.search.check", false);
    ), ,[0ae78c933951bb7beabec24020e648b8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (r_pref("aol_toolbar.default.search.check", false);
    us), ,[569b0c137e0c6fc7654328da6f97e818]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

    /* Do not edit this file.
    *
    * If you make c), ,[7978c05f3159a09663459a6819edbc44]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you ma), ,[a0518897206a93a31e8acf33ee18847c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

    /* Do not edit this file.
    *
    * If you ), ,[19d89d8273172115fdab7d850501d030]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ences

    /* Do not edit this file.
    *
    * If you make ), ,[b0411708137700363d6b7f83887ee41c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

    /* Do not edit this file.
    *
    * If you make changes to t), ,[14dd958a523811259f09887ac54127d9]
    PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prtkDS", 0);), ,[9b569d82434724123b7548bade287d83]
    PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (Preferences

    /* Do not edit this file.
    *
    * If), ,[d918ff2018728ea85858ba485aac2dd3]
    PUP.Optional.ASK.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTR...C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx");), ,[658ce53a90fa9e98b90a689a5da9bc44]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff");), ,[70810c13fd8dd2644f51a55ddf2706fa]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extensions.ir), ,[3cb56db21674a88e2f7146bcb155e818]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extension), ,[5f927ca36b1f79bd8b15d230a75f3cc4]
    PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0Et), ,[03ee809fbcce46f03e62ea1843c3c937]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpg", true);), ,[07eaa27d177372c404a53cc621e58e72]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (sions.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2St), ,[c928b36c365472c46940e022e6203fc1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (B0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0Dy), ,[678aef30f991c96d2386f30f986e44bc]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irm), ,[e011b867a3e751e5acfd52b09274ea16]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (h.aflt", "dvd_14_16_ff");
    user_pref("extensions.I), ,[ec05fa25206aeb4b89203bc7e4222fd1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ons.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("ex), ,[ac45928d87031d19d4d560a2f41228d8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtD), ,[579a110ec6c4b086cfda897914f258a8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
    user_pref("extensions.mysearchdial.hmpg", true);
    user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0E), ,[8f62dd420a803df905a422e0fa0c58a8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0F), ,[05ec87980d7d96a06148699958aeff01]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (arch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irm), ,[32bf3ae53753c373abfeb44e43c3b44c]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensio), ,[cd24a9766f1b78be8d1c45bd09fd27d9]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensio), ,[45ac38e775155cda4465639fce38ba46]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysear), ,[2ac7ca55662472c4b1f8986a3fc7ea16]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.ins), ,[0de4110e5931f14521886a98689e5ea2]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysear), ,[f8f90b145a309b9b397053af22e428d8]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (earch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmys), ,[cb2642ddb5d5c0767e2b18ea53b337c9]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extensions.I), ,[1dd4ba65078391a58e1b808227dfb54b]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
    user_pref("extens), ,[b140f12e672361d5b1f87f83f90df808]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extension), ,[a051c659b1d935015950c042bd494bb5]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
    user_pref("extens), ,[b1408a958ffb42f4a20762a03dc9ae52]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ions.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", ), ,[f9f87ba498f2a78f4c5d966ccb3bf907]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (");
    user_pref("extensions.irmysearch.instlRef", "14), ,[37ba30ef91f91e18d1d8e1216a9c0ff1]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
    user_pref("exten), ,[ee0376a9a6e49b9b3673b2507f87db25]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
    user_pref("extensions.irmysearch.instlRef", "140305_b");
    user_pref("extensions.irmysearch.cr", "1501068693");
    user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGy), ,[4ea36db21a701b1b8f1a22e0a165fc04]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtG), ,[cf22a8770288d75f1e8b36cc2adce21e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");), ,[856cfc2337532c0a8b1f917149bd728e]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");
    user_pref), ,[955c0916c3c758de07a311f1ef1706fa]
    PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
    user_pref("extensions.mysearchdial.hmpg", true);
    user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...tBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1), ,[5c9587986e1c0630b6f461a1050117e9]

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  8. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    2. DDS LOG

    DDS (Ver_2012-11-20.01) - NTFS_AMD64
    Internet Explorer: 11.0.9600.16521
    Run by Abhishek at 3:26:31 on 2015-02-19
    Microsoft Windows 7 Home Basic 6.1.7601.1.1252.91.1033.18.3994.2387 [GMT 5.5:30]
    .
    AV: AVG Anti-Virus Free *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    SP: AVG Anti-Virus Free *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ===============
    .
    C:\Program Files (x86)\AVG\AVG9\avgchsva.exe
    C:\Program Files (x86)\AVG\AVG9\avgrsa.exe
    C:\Windows\system32\lsm.exe
    C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Program Files\IDT\WDM\STacSV64.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    C:\Windows\system32\Hpservice.exe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\atieclxx.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\System32\spoolsv.exe
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
    C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
    C:\Windows\system32\svchost.exe -k bthsvcs
    C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
    C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Intel\iCLS Client\HeciServer.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
    C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe
    C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
    C:\Program Files (x86)\AVG\AVG9\avgnsa.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
    C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe
    C:\Program Files (x86)\Reliance 3G\AssistantServices.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe
    C:\Windows\System32\alg.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\System32\WUDFHost.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\IDT\WDM\sttray64.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files (x86)\RocketDock\RocketDock.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
    C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
    C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
    C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
    C:\Program Files (x86)\AVG\AVG9\avgtray.exe
    C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
    C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
    C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
    C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
    C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    C:\Windows\system32\sppsvc.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Windows\System32\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://google.com/
    uSearch Bar = www.google.com
    uSearch Page = www.google.com
    uDefault_Page_URL = about:blank
    mStart Page = www.google.com
    uSearchAssistant = www.google.com
    mWinlogon: Userinit = userinit.exe,
    BHO: Octh Class: {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll
    BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll
    BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
    BHO: DVDVideoSoft IE Extension: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
    BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    TB: Grab Pro: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll
    TB: Grab Pro: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll
    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
    uRun: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
    uRun: [AdobeBridge] <no file>
    mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
    mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
    mRun: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
    mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
    mRun: [ZTE ADSL] <no file>
    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    mPolicies-Explorer: NoActiveDesktop = dword:1
    mPolicies-Explorer: NoActiveDesktopChanges = dword:1
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
    mPolicies-System: ConsentPromptBehaviorUser = dword:3
    mPolicies-System: EnableUIADesktopToggle = dword:0
    IE: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
    IE: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
    IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204
    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
    TCP: NameServer = 192.168.43.1
    TCP: Interfaces\{0D0298A9-D9C7-417D-BF20-4F8575998C3C} : DHCPNameServer = 192.168.1.1
    TCP: Interfaces\{186F4458-A646-491E-A56A-A392A2A90FFD} : DHCPNameServer = 192.168.42.129
    TCP: Interfaces\{202D625C-22F4-45B3-A6DD-D165812E516D} : DHCPNameServer = 192.168.42.129
    TCP: Interfaces\{54B278AD-0869-47C5-8762-5B4A5A2CC3D1} : DHCPNameServer = 192.168.42.129
    TCP: Interfaces\{C2030630-5384-4CFE-8991-2427231D740A} : DHCPNameServer = 192.168.42.129
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560} : DHCPNameServer = 192.168.43.1
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\14E64627F696461405 : DHCPNameServer = 192.168.43.1
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\261616072756 : DHCPNameServer = 192.168.137.1
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\36F6E6E656364796669702D656 : DHCPNameServer = 192.168.158.1
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\D4F647F60285 : DHCPNameServer = 192.168.1.1
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\E4F4B4941402C457D6961602532303F583632343 : DHCPNameServer = 192.168.137.1
    TCP: Interfaces\{F2BAF72A-44BF-412C-8A40-958F21FD8101} : DHCPNameServer = 192.168.42.129
    TCP: Interfaces\{FB774812-E560-4976-AF2F-38CB29511624} : DHCPNameServer = 192.168.1.1
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    SSODL: WebCheck - <orphaned>
    SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    LSA: Notification Packages = scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    mASetup: {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec /fu {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} /qn
    x64-mStart Page = www.google.com
    x64-BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll
    x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
    x64-BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll
    x64-BHO: DVDVideoSoft IE Extension: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
    x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
    x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
    x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
    x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
    x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
    x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
    x64-IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
    x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    x64-IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
    x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>
    x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll
    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
    x64-Notify: igfxcui - igfxdev.dll
    x64-SSODL: WebCheck - <orphaned>
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\
    FF - prefs.js: browser.search.defaulturl -
    FF - prefs.js: browser.startup.homepage - hxxp://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=%5EBVK%5EYYYYYY%5EYY%5EIN&gct=hp&apn_ptnrs=%5EBVK&apn_dtid=%5EYYYYYY%5EYY%5EIN&apn_dbr=ff_35.0&apn_uid=3601C8C7-9D42-402F-8104-E4BDAE5FF83C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx
    FF - prefs.js: keyword.URL - google.com
    FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
    FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
    FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
    FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
    FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
    FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: C:\Users\Abhishek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
    FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll
    FF - ExtSQL: !HIDDEN! 2013-08-05 22:58; smartwebprinting@hp.com; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    .
    ---- FIREFOX POLICIES ----
    .
    FF - user.js: extensions.irmysearch.instlRef - 140305_b
    FF - user.js: extensions.irmysearch.cr - 1501068693
    FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
    .
    FF - user.js: extensions.mysearchdial.hmpgUrl - hxxp://start.mysearchdial.com/?f=1&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
    FF - user.js: extensions.mysearchdial.dfltSrch - true
    FF - user.js: extensions.mysearchdial.srchPrvdr - Mysearchdial
    FF - user.js: extensions.mysearchdial.dnsErr - true
    FF - user.js: extensions.mysearchdial_i.newTab - false
    FF - user.js: extensions.mysearchdial.newTabUrl - hxxp://start.mysearchdial.com/?f=2&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
    FF - user.js: extensions.mysearchdial.tlbrSrchUrl - hxxp://start.mysearchdial.com/?f=3&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=&q=
    FF - user.js: extensions.mysearchdial.id - E006E61833AA566F
    FF - user.js: extensions.mysearchdial.instlDay - 16174
    FF - user.js: extensions.mysearchdial.vrsn - 1.8.29.0
    FF - user.js: extensions.mysearchdial.vrsni - 1.8.29.0
    FF - user.js: extensions.mysearchdial_i.vrsnTs - 1.8.29.023:41:0
    FF - user.js: extensions.mysearchdial.prtnrId - mysearchdial
    FF - user.js: extensions.mysearchdial.prdct - mysearchdial
    FF - user.js: extensions.mysearchdial.aflt - dvd_14_16_ff
    FF - user.js: extensions.mysearchdial_i.smplGrp - none
    FF - user.js: extensions.mysearchdial.tlbrId - base
    FF - user.js: extensions.mysearchdial.instlRef - 140305_b
    FF - user.js: extensions.mysearchdial.dfltLng -
    FF - user.js: extensions.mysearchdial.appId - {CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
    FF - user.js: extensions.mysearchdial.excTlbr - false
    FF - user.js: extensions.mysearchdial.cr - 1501068693
    FF - user.js: extensions.mysearchdial.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
    FF - user.js: extensions.mysearchdial.AL - 2
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 amdkmpfd;AMD PCI Root Bus Lower Filter;C:\Windows\System32\drivers\amdkmpfd.sys [2012-1-18 31360]
    R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2012-11-10 16152]
    R1 AvgLdx64;AVG Free AVI Loader Driver x64;C:\Windows\System32\drivers\avgldx64.sys [2013-11-7 282976]
    R1 AvgMfx64;AVG Free On-access Scanner Minifilter Driver x64;C:\Windows\System32\drivers\avgmfx64.sys [2013-11-7 35664]
    R1 AvgTdiA;AVG Free Network Redirector x64;C:\Windows\System32\drivers\avgtdia.sys [2013-11-7 317520]
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-1-18 235520]
    R2 APNMCP;Ask Update Service;C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-12-19 177560]
    R2 avg9wd;AVG Free WatchDog;C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe [2013-11-9 308136]
    R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2013-11-4 92160]
    R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
    R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2012-9-24 31040]
    R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-3-5 35200]
    R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-5-3 13592]
    R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-9 607456]
    R2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-5-3 128280]
    R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-5-3 161560]
    R2 Motorola Device Manager;Motorola Device Manager Service;C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2013-11-15 137528]
    R2 PDFSFilter;PDFSFilter;C:\Windows\System32\drivers\PDFsFilter.sys [2012-8-23 83224]
    R2 PST Service;PST Service;C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2013-1-28 65657]
    R2 UDisk Monitor;UDisk Monitor;C:\Program Files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe [2014-11-10 402944]
    R2 UI Assistant Service;UI Assistant Service;C:\Program Files (x86)\Reliance 3G\AssistantServices.exe [2013-4-21 270672]
    R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-5-3 363800]
    R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;C:\Windows\System32\drivers\bcbtums.sys [2012-5-3 134696]
    R3 btwampfl;btwampfl Bluetooth filter driver;C:\Windows\System32\drivers\btwampfl.sys [2012-5-3 620584]
    R3 BTWDPAN;Bluetooth Personal Area Network;C:\Windows\System32\drivers\btwdpan.sys [2012-5-3 89640]
    R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2012-5-3 39976]
    R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\System32\drivers\clwvd.sys [2010-7-28 31088]
    R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2011-12-6 331264]
    R3 intelkmd;intelkmd;C:\Windows\System32\drivers\igdpmd64.sys [2012-2-28 14741632]
    R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2012-11-10 355096]
    R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2012-11-10 786200]
    R3 motandroidusb;Mot ADB Interface Driver;C:\Windows\System32\drivers\motoandroid.sys [2013-3-26 32768]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-5-3 565352]
    R3 SmbDrv;SmbDrv;C:\Windows\System32\drivers\Smb_driver.sys [2013-2-2 21264]
    S2 CLKMSVC10_38F51D56;CyberLink Product - 2013/02/02 20:23:46;C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2012-2-8 244720]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
    S3 cmnsusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2053s;C:\Windows\System32\drivers\cmnsusbser.sys [2012-10-16 126080]
    S3 easytether;easytether;C:\Windows\System32\drivers\easytthr.sys [2012-10-13 20752]
    S3 epmntdrv;epmntdrv;C:\Windows\System32\epmntdrv.sys [2014-4-8 17480]
    S3 EuGdiDrv;EuGdiDrv;C:\Windows\System32\EuGdiDrv.sys [2014-4-8 9800]
    S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-12-17 265808]
    S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2013-3-20 14448]
    S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-3-25 111616]
    S3 massfilter;Mass Storage Filter Driver;C:\Windows\System32\drivers\massfilter.sys [2013-4-21 11776]
    S3 motccgp;Motorola USB Composite Device Driver;C:\Windows\System32\drivers\motccgp.sys [2013-3-19 23552]
    S3 mtkmbim;Micromax Modem Mobile Broadband NDIS 6.20 Miniport Driver;C:\Windows\System32\drivers\mtkmbim7_x64.sys [2012-10-30 208896]
    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2014-4-8 19456]
    S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;C:\Windows\System32\drivers\RtsP2Stor.sys [2012-5-3 258664]
    S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-14 292864]
    S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-14 1485312]
    S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-14 740864]
    S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-4-8 56832]
    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2014-4-8 30208]
    S3 wdf_usb;wdf_usb;C:\Windows\System32\drivers\usb2ser.sys [2015-1-30 81408]
    S3 zteusbser;ZTE USB Device for Legacy Serial Communication;C:\Windows\System32\drivers\ztemtusbser.sys [2014-11-10 118784]
    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-23 57184]
    .
    =============== File Associations ===============
    .
    FileExt: .js: jsfile="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1"
    ShellExec: dreamweaver.exe: Open="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\dreamweaver.exe", "%1"
    ShellExec: Opera.exe: open="C:\Program Files (x86)\Opera\Launcher.exe" "%1"
    .
    =============== Created Last 30 ================
    .
    2015-02-18 21:10:18 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
    2015-02-18 21:10:07 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
    2015-02-18 21:10:07 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys
    2015-02-18 21:10:07 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys
    2015-02-18 21:10:07 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-02-17 17:42:10 -------- d-----w- C:\ProgramData\ImTOO
    2015-02-16 17:56:01 -------- d-----w- C:\Users\Abhishek\AppData\Local\{59B78BC5-7AF6-4D02-A9BB-5777896082BC}
    2015-02-07 20:55:37 -------- d-----w- C:\Users\Abhishek\AppData\Local\AskPartnerNetwork
    2015-02-07 20:55:35 -------- d-----w- C:\ProgramData\AskPartnerNetwork
    2015-02-07 20:55:35 -------- d-----w- C:\Program Files (x86)\AskPartnerNetwork
    2015-02-07 20:10:02 -------- d-----w- C:\ProgramData\APN
    2015-02-06 18:19:54 -------- d-----w- C:\Users\Abhishek\AppData\Roaming\IDT
    2015-02-04 19:01:05 -------- d-----w- C:\Users\Abhishek\AppData\Local\{42225203-BE3E-4A56-929E-ED6199AE3987}
    2015-02-01 21:46:25 -------- d-----w- C:\Users\Abhishek\.jmc
    2015-02-01 21:46:17 -------- d-----w- C:\Users\Abhishek\.eclipse
    2015-02-01 21:19:15 5070512 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
    2015-01-31 20:21:08 -------- d-----w- C:\ProgramData\Playrix Entertainment
    2015-01-31 19:37:00 -------- d-----w- C:\ProgramData\BlueStacks
    2015-01-30 11:03:52 81408 ----a-w- C:\Windows\System32\drivers\usb2ser.sys
    2015-01-30 11:03:52 1919968 ----a-w- C:\Windows\System32\WdfCoinstaller01005.dll
    2015-01-30 11:03:51 -------- d-----w- C:\Program Files (x86)\MMX377G 3G USB Manager
    .
    ==================== Find3M ====================
    .
    2015-02-06 20:05:01 71344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2015-02-06 20:05:01 701616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
    2015-01-19 18:38:29 108968 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
    .
    ============= FINISH: 3:28:12.45 ===============
     
  9. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    3. Attach.txt Log

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows 7 Home Basic
    Boot Device: \Device\HarddiskVolume1
    Install Date: 12-10-2012 16:00:27
    System Uptime: 19-02-2015 03:22:04 (0 hours ago)
    .
    Motherboard: Hewlett-Packard | | 183E
    Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz | U3E1 | 2400/100mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 206 GiB total, 16.624 GiB free.
    D: is FIXED (NTFS) - 200 GiB total, 5.527 GiB free.
    E: is CDROM ()
    F: is Removable
    G: is FIXED (NTFS) - 19 GiB total, 2.198 GiB free.
    H: is CDROM ()
    I: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Description: PortableVBoxDRV
    Device ID: ROOT\LEGACY_VBOXDRV\0000
    Manufacturer:
    Name: PortableVBoxDRV
    PNP Device ID: ROOT\LEGACY_VBOXDRV\0000
    Service: VBoxDRV
    .
    Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Description: PortableVBoxUSBMon
    Device ID: ROOT\LEGACY_VBOXUSBMON\0000
    Manufacturer:
    Name: PortableVBoxUSBMon
    PNP Device ID: ROOT\LEGACY_VBOXUSBMON\0000
    Service: VBoxUSBMon
    .
    Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
    Description: EasyTether Network Adapter
    Device ID: ROOT\*EASYTETHER\0000
    Manufacturer: Mobile Stream
    Name: EasyTether Network Adapter
    PNP Device ID: ROOT\*EASYTETHER\0000
    Service: easytether
    .
    ==== System Restore Points ===================
    .
    No restore point in system.
    .
    ==== Installed Programs ======================
    .
    64 Bit HP CIO Components Installer
    7-Zip 9.20 (x64 edition)
    Adobe Dreamweaver CS6
    Adobe Flash Player 16 ActiveX
    Adobe Flash Player 16 NPAPI
    Adobe Flash Professional CS6
    Adobe Illustrator CC
    Adobe PageMaker 7.0
    Adobe Photoshop CS6
    Adobe Reader X (10.1.0) MUI
    Adobe Shockwave Player 11.6
    AMD APP SDK Runtime
    AMD Catalyst Install Manager
    Angry Birds Rio
    Any Video Converter Professional 5.0.8
    AVG Free 9.0
    Bejeweled 3
    Bitnami WordPress Module
    BitTorrent
    Blackhawk Striker 2
    BlueJ
    Broadcom 802.11 Wireless LAN Adapter
    Broadcom Bluetooth Software
    BufferChm
    Catalyst Control Center
    Catalyst Control Center - Branding
    Catalyst Control Center Graphics Previews Common
    Catalyst Control Center InstallProxy
    Catalyst Control Center Localization All
    Catalyst Control Center Profiles Mobile
    ccc-utility64
    CCC Help Chinese Standard
    CCC Help Chinese Traditional
    CCC Help Czech
    CCC Help Danish
    CCC Help Dutch
    CCC Help English
    CCC Help Finnish
    CCC Help French
    CCC Help German
    CCC Help Greek
    CCC Help Hungarian
    CCC Help Italian
    CCC Help Japanese
    CCC Help Korean
    CCC Help Norwegian
    CCC Help Polish
    CCC Help Portuguese
    CCC Help Russian
    CCC Help Spanish
    CCC Help Swedish
    CCC Help Thai
    CCC Help Turkish
    Chuzzle Deluxe
    Composer - Php Dependency Manager
    Corel Graphics - Windows Shell Extension
    CorelDRAW Graphics Suite X5
    CorelDRAW Graphics Suite X5 - Capture
    CorelDRAW Graphics Suite X5 - Common
    CorelDRAW Graphics Suite X5 - Connect
    CorelDRAW Graphics Suite X5 - Custom Data
    CorelDRAW Graphics Suite X5 - Draw
    CorelDRAW Graphics Suite X5 - EN
    CorelDRAW Graphics Suite X5 - Filters
    CorelDRAW Graphics Suite X5 - FontNav
    CorelDRAW Graphics Suite X5 - IPM
    CorelDRAW Graphics Suite X5 - PHOTO-PAINT
    CorelDRAW Graphics Suite X5 - Photozoom Plugin
    CorelDRAW Graphics Suite X5 - Redist
    CorelDRAW Graphics Suite X5 - Setup Files
    CorelDRAW Graphics Suite X5 - VBA
    CorelDRAW Graphics Suite X5 - VideoBrowser
    CorelDRAW Graphics Suite X5 - VSTA
    CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit
    CorelDRAW Graphics Suite X5 - WT
    CorelDRAW(R) Graphics Suite X5
    Cradle of Rome 2
    CyberLink PowerDVD
    CyberLink YouCam
    D1600
    D3DX10
    Dev-C++ 5 beta 9 release (4.9.9.2)
    DeviceDiscovery
    DJ_SF_06_D1600_SW_Min
    Dora's World Adventure
    EaseUS Partition Master 9.3.0
    EasyBCD 2.2
    EasyTether
    EPUB File Reader
    ESU for Microsoft Windows 7 SP1
    Evernote v. 4.5.2
    Facebook Video Calling 3.1.0.521
    Farm Frenzy
    Farmscapes
    FATE
    FIFA 12 (c) EA version 1
    Final Drive Fury
    Flashtool
    Free YouTube Download version 3.2.49.1111
    FreeTVDownloader
    GlassFish Server Open Source Edition 4.0
    Google Chrome
    Google Update Helper
    GPBaseService2
    Hewlett-Packard ACLM.NET v1.2.2.3
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
    Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
    Hoyle Card Games
    HP 3D DriveGuard
    HP Auto
    HP Client Services
    HP CoolSense
    HP Customer Experience Enhancements
    HP Customer Participation Program 13.0
    HP Deskjet D1600 Printer Driver Software 13.0 Rel .6
    HP Documentation
    HP Games
    HP Imaging Device Functions 13.0
    HP Launch Box
    HP On Screen Display
    HP Power Manager
    HP Quick Launch
    HP Recovery Manager
    HP Security Assistant
    HP Setup
    HP Setup Manager
    HP Smart Web Printing 4.5
    HP Software Framework
    HP Solution Center 13.0
    HP Support Assistant
    HPPhotoGadget
    HPProductAssistant
    HPSSupply
    hpWLPGInstaller
    IDT Audio
    ImTOO Video Converter Ultimate 6
    Intel(R) Control Center
    Intel(R) Display Audio Driver
    Intel(R) Management Engine Components
    Intel(R) Rapid Storage Technology
    Intel(R) USB 3.0 eXtensible Host Controller Driver
    Intel® Trusted Connect Service Client
    Java 7 Update 45 (64-bit)
    Java Auto Updater
    Java SE Development Kit 7 Update 45 (64-bit)
    Jewel Match 3
    Jewel Quest Mysteries: The Seventh Gate Collector's Edition
    John Deere Drive Green
    Junk Mail filter update
    Letters from Nowhere 2
    LinuxLive USB Creator
    Luxor HD
    Mah Jong Medley
    Malwarebytes Anti-Malware version 2.0.4.1028
    MarketResearch
    Mesh Runtime
    Microsoft .NET Framework 4.5.1
    Microsoft Application Error Reporting
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office File Validation Add-In
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office Office 64-bit Components 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared 64-bit MUI (English) 2007
    Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2005 Redistributable (x64)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
    Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
    Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
    Microsoft Visual Studio Tools for Applications 2.0 - ENU
    Microsoft Visual Studio Tools for Applications 2.0 Runtime
    Microsoft_VC80_CRT_x86
    Microsoft_VC90_CRT_x86
    MMX377G 3G USB Manager v06.100413.377G
    Motorola Device Manager
    Motorola Device Software Update
    Motorola Mobile Drivers Installation 6.3.0
    Mozilla Firefox 35.0 (x86 en-US)
    Mozilla Maintenance Service
    MSVC90_x64
    MSVC90_x86
    MSVCRT
    MSVCRT_amd64
    MSXML 4.0 SP3 Parser
    MSXML 4.0 SP3 Parser (KB2758694)
    NetBeans IDE 8.0
    Nokia Connectivity Cable Driver
    Nokia PC Suite
    Notepad++
    opensource
    Opera Stable 27.0.1689.69
    Orbit Downloader
    PC Connectivity Solution
    PDF Settings CC
    PDF Settings CS6
    Penguins!
    PerfectDisk Professional Business
    Photomatix Pro version 4.2.4
    Plants vs. Zombies - Game of the Year
    PlayReady PC Runtime x86
    Poker Superstars III
    Polar Bowler
    Polar Golfer
    PowerISO
    PX Profile Update
    Python 2.7.3 (64-bit)
    RapidTyping
    Realtek Ethernet Controller Driver
    Realtek PCIE Card Reader
    Reliance 3G
    Reliance Netconnect
    RocketDock 1.3.5
    RollerCoaster Tycoon 3: Platinum
    RSDLite
     
    Last edited: Feb 19, 2015
  10. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    Search App by Ask
    Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2817641) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2878236) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
    Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Publisher 2007 (KB2817565) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2878237) 32-Bit Edition
    Shop for HP Supplies
    Skype™ 6.11
    SmartWebPrinting
    SolutionCenter
    Sony Mobile Update Service
    Status
    swMSM
    Synaptics Pointing Device Driver
    The Treasures of Mystery Island: The Ghost Ship
    Toolbox
    Torchlight
    TrayApp
    TypingMaster Pro
    Uninstall BSNL Wireless Connection Manager
    UnLock Root 3.1
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
    Update for Microsoft Office Access 2007 Help (KB963663)
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office Infopath 2007 Help (KB963662)
    Update for Microsoft Office OneNote 2007 Help (KB963670)
    Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
    Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition
    Update for Microsoft Office Outlook 2007 Help (KB963677)
    Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Publisher 2007 Help (KB963667)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 Help (KB963665)
    Update Installer for WildTangent Games App
    Virtual DJ Pro Full - Atomix Productions
    Virtual Villagers 4 - The Tree of Life
    Visual Basic for Applications (R) Core
    Visual Basic for Applications (R) Core - English
    Visual C++ 8.0 Runtime Setup Package (x64)
    VLC media player
    WebReg
    WildTangent Games App (HP Games)
    Win32DiskImager version 0.9.5
    Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (12/06/2010 4.0.0000.00000)
    Windows Driver Package - MediaTek Inc. (usbser) Ports (01/05/2012 2.0000.0.1)
    Windows Driver Package - MediaTek Inc. (usbser) Ports (09/01/2011 2.0.1136.0)
    Windows Driver Package - MediaTek Inc. (usbser) Ports (12/24/2011 2.0000.0.0)
    Windows Driver Package - MediaTek Inc. Net (07/14/2011 1.1129.00)
    Windows Driver Package - Microsoft (WUDFRd) WPD (02/22/2006 5.2.5326.4762)
    Windows Driver Package - Nokia Modem (02/25/2011 4.7)
    Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9)
    Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live ID Sign-in Assistant
    Windows Live Installer
    Windows Live Language Selector
    Windows Live Mail
    Windows Live Mesh
    Windows Live Mesh ActiveX Control for Remote Connections
    Windows Live Messenger
    Windows Live MIME IFilter
    Windows Live Movie Maker
    Windows Live Photo Common
    Windows Live Photo Gallery
    Windows Live PIMT Platform
    Windows Live Remote Client
    Windows Live Remote Client Resources
    Windows Live Remote Service
    Windows Live Remote Service Resources
    Windows Live SOXE
    Windows Live SOXE Definitions
    Windows Live UX Platform
    Windows Live UX Platform Language Pack
    Windows Live Writer
    Windows Live Writer Resources
    WinRAR 5.00 (64-bit)
    WinRAR archiver
    Wondershare Photo Recovery (build 3.0.0)
    XAMPP
    ZTE EV-DO
    ZTE Wireless Terminal
    Zuma's Revenge
    .
    ==== Event Viewer Messages From Past Week ========
    .
    19-02-2015 03:23:15, Error: Microsoft-Windows-SharedAccess_NAT [34001] - The ICS_IPV6 failed to configure IPv6 stack.
    19-02-2015 03:23:15, Error: Microsoft-Windows-SharedAccess_NAT [30013] - The DHCP allocator has disabled itself on IP address 192.168.43.59, since the IP address is outside the 192.168.137.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
    19-02-2015 03:23:06, Error: Service Control Manager [7000] - The PortableVBoxUSBMon service failed to start due to the following error: The system cannot find the path specified.
    19-02-2015 03:23:06, Error: Service Control Manager [7000] - The PortableVBoxDRV service failed to start due to the following error: The system cannot find the path specified.
    19-02-2015 03:21:36, Error: Service Control Manager [7031] - The Motorola Device Manager Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.
    19-02-2015 02:32:12, Error: Service Control Manager [7001] - The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:56, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:51, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
    19-02-2015 02:30:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
    19-02-2015 02:30:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
    19-02-2015 02:30:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
    19-02-2015 02:30:31, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    19-02-2015 02:30:24, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
    19-02-2015 02:30:12, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AvgLdx64 AvgMfx64 AvgTdiA DfsC discache NetBIOS NetBT nsiproxy Psched rdbss SCDEmu spldr tdx vwififlt Wanarpv6 WfpLwf
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The PST Service service depends on the Workstation service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Network Connections service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    19-02-2015 02:30:12, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
    18-02-2015 22:31:13, Error: Microsoft-Windows-SharedAccess_NAT [31004] - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
    18-02-2015 22:26:41, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the btwdins service.
    18-02-2015 02:38:12, Error: Service Control Manager [7000] - The Motorola Device Manager Service service failed to start due to the following error: The pipe has been ended.
    18-02-2015 01:49:25, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\bcmihvsrv64.dll Error Code: 21
    18-02-2015 01:49:08, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AvgLdx64 AvgMfx64 discache SCDEmu spldr Wanarpv6
    .
    ==== End Of File ===========================
     
  11. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    Comment no. 6 and 7 got repeated. Please ignore those.
     
  12. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    [​IMG] Download RogueKiller from one of the following links and save it to your Desktop:

    Link 1
    Link 2

    • Close all the running programs
    • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

    [​IMG] Create new restore point before proceeding with the next step....
    How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

    Download [​IMG] Malwarebytes Anti-Rootkit (MBAR) to your desktop.
    • Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
    • Double click on downloaded file. OK self extracting prompt.
    • MBAR will start. Click "Next" to continue.
    • Click in the following screen "Update" to obtain the latest malware definitions.
    • Once the update is complete select "Next" and click "Scan".
    • When the scan is finished and no malware has been found select "Exit".
    • If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
    • Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
      • "mbar-log-{date} (xx-xx-xx).txt"
      • "system-log.txt"
    NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit.
     
  13. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    RogueKiller Log:

    RogueKiller V10.4.1.0 [Feb 19 2015] by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : http://www.adlice.com/softwares/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Abhishek [Administrator]
    Mode : Delete -- Date : 02/21/2015 19:24:30

    ¤¤¤ Processes : 1 ¤¤¤
    [PUP] (SVC) APNMCP -- "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"[7] -> Stopped

    ¤¤¤ Registry : 16 ¤¤¤
    [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (C:\Program Files (x86)\AVG\AVG9\avgssiea.dll) -> Not selected
    [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} -> Not selected
    [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (C:\Program Files (x86)\AVG\AVG9\avgssiea.dll) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll) -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214} -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (C:\Program Files (x86)\AVG\AVG9\avgssiea.dll) -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll) -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | ApnTBMon : "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\APNMCP ("C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe") -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\APNMCP ("C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe") -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\APNMCP ("C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe") -> Not selected
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected

    ¤¤¤ Tasks : 7 ¤¤¤
    [Suspicious.Path] FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000Core.job -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/c /nocrashserver) -> Deleted
    [Suspicious.Path] FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000UA.job -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/ua /installsource scheduler) -> Deleted
    [Suspicious.Path] FoxTab.job -- C:\Users\Abhishek\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE (/Check) -> Deleted
    [Rogue.Korean?Suspicious.Path] schedule!3036567561.job -- C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe (/schedule /profile "c:\programdata\bettersoft\optimizerpro\3036567561.ini") -> Deleted
    [Suspicious.Path] \\FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000Core -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/c /nocrashserver) -> Deleted
    [Suspicious.Path] \\FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000UA -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/ua /installsource scheduler) -> Deleted
    [Suspicious.Path] \\FoxTab -- C:\Users\Abhishek\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE (/Check) -> Deleted

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

    ¤¤¤ Web browsers : 1 ¤¤¤
    [PUM.HomePage][FIREFX:Config] 49aoobau.default : user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=^BVK^YYYYYY^YY^IN&gct=hp&apn_ptnrs=^BVK&apn_dtid=^YYYYYY^YY^IN&apn_dbr=ff_35.0&apn_uid=3601C8C7-9D42-402F-8104-E4BDAE5FF83C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx"); -> Not selected

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: TOSHIBA MK5076GSX +++++
    --- User ---
    [MBR] 3fe06065b9e3d6077aad13e7e4d8c2ce
    [BSP] 6ae08d026f75abb109f65dbe9d310187 : Linux MBR Code
    Partition table:
    User = LL1 ... OK
    User = LL2 ... OK

    +++++ PhysicalDrive1: Motorola MB526 USB Device +++++
    Error reading User MBR! ([2] The system cannot find the file specified. )
    Error reading LL1 MBR! ([48f] The device is not connected. )
    Error reading LL2 MBR! ([32] The request is not supported. )


    ============================================
    RKreport_SCN_02212015_192311.log
     
  14. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    MBAR Log

    Malwarebytes Anti-Rootkit BETA 1.09.1.1004
    www.malwarebytes.org

    Database version:
    main: v2015.02.22.02
    rootkit: v2015.02.20.01

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 11.0.9600.16659
    Abhishek :: ABHISHEK-HP [administrator]

    22-02-2015 07:59:15
    mbar-log-2015-02-22 (07-59-15).txt

    Scan type: Quick scan
    Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
    Scan options disabled:
    Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged.
    Objects scanned: 374403
    Time elapsed: 36 minute(s), 43 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 0
    (No malicious items detected)

    Physical Sectors Detected: 0
    (No malicious items detected)

    (end)
     
  15. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    System-Log:

    ---------------------------------------
    Malwarebytes Anti-Rootkit BETA 1.09.1.1004

    (c) Malwarebytes Corporation 2011-2012

    OS version: 6.1.7601 Windows 7 Service Pack 1 x64

    Account is Administrative

    Internet Explorer version: 11.0.9600.16659

    File system is: NTFS
    Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, G:\ DRIVE_FIXED
    CPU speed: 2.394000 GHz
    Memory total: 4188389376, free: 1037459456

    Downloaded database version: v2015.02.21.04
    Downloaded database version: v2015.02.20.01
    Downloaded database version: v2014.12.06.01
    Downloaded database version: v2015.02.21.05
    Downloaded database version: v2015.02.21.06
    Downloaded database version: v2015.02.21.07
    Downloaded database version: v2015.02.21.08
    Downloaded database version: v2015.02.21.09
    Downloaded database version: v2015.02.21.10
    Downloaded database version: v2015.02.22.01
    Downloaded database version: v2015.02.22.02
    =======================================
    Initializing...
    ------------ Kernel report ------------
    02/22/2015 07:58:59
    ------------ Loaded modules -----------
    \SystemRoot\system32\ntoskrnl.exe
    \SystemRoot\system32\hal.dll
    \SystemRoot\system32\kdcom.dll
    \SystemRoot\system32\mcupdate_GenuineIntel.dll
    \SystemRoot\system32\PSHED.dll
    \SystemRoot\system32\CLFS.SYS
    \SystemRoot\system32\CI.dll
    \SystemRoot\system32\drivers\Wdf01000.sys
    \SystemRoot\system32\drivers\WDFLDR.SYS
    \SystemRoot\System32\Drivers\spix.sys
    \SystemRoot\System32\Drivers\WMILIB.SYS
    \SystemRoot\System32\Drivers\SCSIPORT.SYS
    \SystemRoot\system32\drivers\ACPI.sys
    \SystemRoot\system32\drivers\msisadrv.sys
    \SystemRoot\system32\drivers\vdrvroot.sys
    \SystemRoot\system32\drivers\pci.sys
    \SystemRoot\System32\drivers\partmgr.sys
    \SystemRoot\system32\drivers\compbatt.sys
    \SystemRoot\system32\drivers\BATTC.SYS
    \SystemRoot\system32\drivers\volmgr.sys
    \SystemRoot\System32\drivers\volmgrx.sys
    \SystemRoot\System32\drivers\mountmgr.sys
    \SystemRoot\system32\drivers\iaStor.sys
    \SystemRoot\system32\drivers\atapi.sys
    \SystemRoot\system32\drivers\ataport.SYS
    \SystemRoot\system32\drivers\amdxata.sys
    \SystemRoot\system32\drivers\fltmgr.sys
    \SystemRoot\system32\drivers\fileinfo.sys
    \SystemRoot\System32\Drivers\Ntfs.sys
    \SystemRoot\System32\Drivers\msrpc.sys
    \SystemRoot\System32\Drivers\ksecdd.sys
    \SystemRoot\System32\Drivers\cng.sys
    \SystemRoot\System32\drivers\pcw.sys
    \SystemRoot\System32\Drivers\Fs_Rec.sys
    \SystemRoot\system32\drivers\ndis.sys
    \SystemRoot\system32\drivers\NETIO.SYS
    \SystemRoot\System32\Drivers\ksecpkg.sys
    \SystemRoot\System32\drivers\tcpip.sys
    \SystemRoot\System32\drivers\fwpkclnt.sys
    \SystemRoot\system32\drivers\wd.sys
    \SystemRoot\system32\drivers\volsnap.sys
    \SystemRoot\System32\Drivers\spldr.sys
    \SystemRoot\System32\drivers\rdyboost.sys
    \SystemRoot\System32\Drivers\mup.sys
    \SystemRoot\system32\drivers\iusb3hcs.sys
    \SystemRoot\System32\drivers\hwpolicy.sys
    \SystemRoot\system32\drivers\hpdskflt.sys
    \SystemRoot\System32\DRIVERS\fvevol.sys
    \SystemRoot\system32\drivers\disk.sys
    \SystemRoot\system32\drivers\CLASSPNP.SYS
    \SystemRoot\system32\DRIVERS\amdkmpfd.sys
    \SystemRoot\system32\DRIVERS\cdrom.sys
    \SystemRoot\System32\Drivers\Null.SYS
    \SystemRoot\System32\Drivers\Beep.SYS
    \SystemRoot\System32\drivers\vga.sys
    \SystemRoot\System32\drivers\VIDEOPRT.SYS
    \SystemRoot\System32\drivers\watchdog.sys
    \SystemRoot\System32\DRIVERS\RDPCDD.sys
    \SystemRoot\system32\drivers\rdpencdd.sys
    \SystemRoot\system32\drivers\rdprefmp.sys
    \SystemRoot\System32\Drivers\Msfs.SYS
    \SystemRoot\System32\Drivers\Npfs.SYS
    \SystemRoot\system32\DRIVERS\tdx.sys
    \SystemRoot\system32\DRIVERS\TDI.SYS
    \SystemRoot\System32\Drivers\avgtdia.sys
    \SystemRoot\System32\DRIVERS\netbt.sys
    \SystemRoot\system32\drivers\afd.sys
    \SystemRoot\system32\DRIVERS\wfplwf.sys
    \SystemRoot\system32\DRIVERS\pacer.sys
    \SystemRoot\system32\DRIVERS\vwififlt.sys
    \SystemRoot\system32\DRIVERS\netbios.sys
    \SystemRoot\system32\DRIVERS\wanarp.sys
    \SystemRoot\system32\drivers\termdd.sys
    \SystemRoot\System32\Drivers\SCDEmu.SYS
    \SystemRoot\system32\DRIVERS\rdbss.sys
    \SystemRoot\system32\drivers\nsiproxy.sys
    \SystemRoot\system32\drivers\mssmbios.sys
    \SystemRoot\System32\drivers\discache.sys
    \SystemRoot\System32\Drivers\dfsc.sys
    \SystemRoot\system32\drivers\blbdrive.sys
    \SystemRoot\System32\Drivers\avgmfx64.sys
    \SystemRoot\System32\Drivers\avgldx64.sys
    \SystemRoot\system32\DRIVERS\tunnel.sys
    \SystemRoot\system32\drivers\CmBatt.sys
    \SystemRoot\system32\DRIVERS\atikmpag.sys
    \SystemRoot\system32\DRIVERS\atikmdag.sys
    \SystemRoot\system32\DRIVERS\igdpmd64.sys
    \SystemRoot\System32\drivers\dxgkrnl.sys
    \SystemRoot\System32\drivers\dxgmms1.sys
    \SystemRoot\system32\DRIVERS\iusb3xhc.sys
    \SystemRoot\system32\DRIVERS\USBD.SYS
    \SystemRoot\system32\DRIVERS\HECIx64.sys
    \SystemRoot\system32\drivers\usbehci.sys
    \SystemRoot\system32\drivers\USBPORT.SYS
    \SystemRoot\system32\drivers\HDAudBus.sys
    \SystemRoot\system32\DRIVERS\bcmwl664.sys
    \SystemRoot\system32\DRIVERS\vwifibus.sys
    \SystemRoot\system32\DRIVERS\Rt64win7.sys
    \SystemRoot\system32\DRIVERS\i8042prt.sys
    \SystemRoot\system32\DRIVERS\kbdclass.sys
    \SystemRoot\system32\DRIVERS\SynTP.sys
    \SystemRoot\system32\DRIVERS\mouclass.sys
    \SystemRoot\system32\DRIVERS\Smb_driver.sys
    \SystemRoot\System32\Drivers\au96ev3j.SYS
    \SystemRoot\system32\DRIVERS\Accelerometer.sys
    \SystemRoot\system32\drivers\wmiacpi.sys
    \SystemRoot\system32\drivers\intelppm.sys
    \SystemRoot\system32\drivers\CompositeBus.sys
    \SystemRoot\system32\DRIVERS\clwvd.sys
    \SystemRoot\system32\DRIVERS\ks.sys
    \SystemRoot\system32\drivers\ksthunk.sys
    \SystemRoot\system32\DRIVERS\AgileVpn.sys
    \SystemRoot\system32\DRIVERS\rasl2tp.sys
    \SystemRoot\system32\DRIVERS\ndistapi.sys
    \SystemRoot\system32\DRIVERS\ndiswan.sys
    \SystemRoot\system32\DRIVERS\raspppoe.sys
    \SystemRoot\system32\DRIVERS\raspptp.sys
    \SystemRoot\system32\DRIVERS\rassstp.sys
    \SystemRoot\system32\drivers\swenum.sys
    \SystemRoot\system32\DRIVERS\umbus.sys
    \SystemRoot\system32\DRIVERS\usbhub.sys
    \SystemRoot\System32\Drivers\NDProxy.SYS
    \SystemRoot\system32\DRIVERS\iusb3hub.sys
    \SystemRoot\system32\DRIVERS\stwrt64.sys
    \SystemRoot\system32\DRIVERS\portcls.sys
    \SystemRoot\system32\DRIVERS\drmk.sys
    \SystemRoot\system32\DRIVERS\IntcDAud.sys
    \SystemRoot\system32\DRIVERS\usbccgp.sys
    \SystemRoot\system32\DRIVERS\USBSTOR.SYS
    \SystemRoot\System32\Drivers\motoandroid.sys
    \SystemRoot\system32\drivers\bcbtums.sys
    \??\C:\Windows\system32\drivers\btwampfl.sys
    \??\C:\Windows\system32\drivers\HIDPARSE.SYS
    \SystemRoot\System32\Drivers\BTHUSB.sys
    \SystemRoot\System32\Drivers\bthport.sys
    \SystemRoot\System32\win32k.sys
    \SystemRoot\System32\drivers\Dxapi.sys
    \SystemRoot\System32\Drivers\crashdmp.sys
    \SystemRoot\System32\Drivers\dump_iaStor.sys
    \SystemRoot\System32\Drivers\dump_dumpfve.sys
    \SystemRoot\System32\Drivers\usbvideo.sys
    \SystemRoot\system32\DRIVERS\rfcomm.sys
    \SystemRoot\system32\DRIVERS\BthEnum.sys
    \SystemRoot\system32\DRIVERS\bthmodem.sys
    \SystemRoot\system32\drivers\modem.sys
    \SystemRoot\system32\DRIVERS\btwavdt.sys
    \SystemRoot\system32\drivers\btwaudio.sys
    \SystemRoot\system32\DRIVERS\btwl2cap.sys
    \SystemRoot\system32\DRIVERS\btwdpan.sys
    \SystemRoot\system32\drivers\btwrchid.sys
    \SystemRoot\system32\drivers\HIDCLASS.SYS
    \SystemRoot\system32\DRIVERS\monitor.sys
    \SystemRoot\System32\TSDDD.dll
    \SystemRoot\System32\cdd.dll
    \SystemRoot\System32\ATMFD.DLL
    \SystemRoot\system32\drivers\luafv.sys
    \SystemRoot\system32\DRIVERS\PDFsFilter.sys
    \SystemRoot\System32\Drivers\DefragFS.SYS
    \SystemRoot\system32\DRIVERS\lltdio.sys
    \SystemRoot\system32\DRIVERS\nwifi.sys
    \SystemRoot\system32\DRIVERS\ndisuio.sys
    \SystemRoot\system32\DRIVERS\rspndr.sys
    \SystemRoot\system32\drivers\HTTP.sys
    \SystemRoot\system32\DRIVERS\bowser.sys
    \SystemRoot\System32\drivers\mpsdrv.sys
    \SystemRoot\system32\DRIVERS\mrxsmb.sys
    \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    \??\C:\Windows\system32\Drivers\rikvm_38F51D56.sys
    \SystemRoot\system32\drivers\peauth.sys
    \SystemRoot\System32\Drivers\secdrv.SYS
    \SystemRoot\System32\DRIVERS\srvnet.sys
    \SystemRoot\System32\drivers\tcpipreg.sys
    \SystemRoot\System32\DRIVERS\srv2.sys
    \SystemRoot\System32\DRIVERS\srv.sys
    \SystemRoot\System32\drivers\ipnat.sys
    \SystemRoot\system32\drivers\WudfPf.sys
    \SystemRoot\system32\DRIVERS\WUDFRd.sys
    \??\C:\Windows\system32\drivers\mbamchameleon.sys
    \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
    \Windows\System32\ntdll.dll
    \Windows\System32\smss.exe
    \Windows\System32\apisetschema.dll
    ----------- End -----------
     
  16. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    Please download ComboFix from Here, Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      If the connection is not there use restore point you created prior to running Combofix.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try the following...

    Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
    iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

    Restart computer in safe mode

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    When the scan is done Notepad will open with rKill.txt log.
    NOTE. rKill.txt log will also be present on your desktop.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
     
  17. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    Done!
    IRP handler 0 of \Driver\USBSTOR points to an unknown module
    Unhooking enabled.

    Scan started
    Database versions:
    main: v2015.02.22.02
    rootkit: v2015.02.20.01

    <<<1>>>
    Upper Device Name: \Device\Harddisk1\DR1
    Upper Device Object: 0xfffffa8009e2f060
    Upper Device Driver Name: \Driver\Disk\
    Lower Device Name: \Device\00000087\
    Lower Device Object: 0xfffffa8009c6b9e0
    Lower Device Driver Name: \Driver\USBSTOR\
    Driver name found: USBSTOR
    Initialization returned 0x0
    Load Function returned 0x0
    <<<1>>>
    Upper Device Name: \Device\Harddisk0\DR0
    Upper Device Object: 0xfffffa8006583790
    Upper Device Driver Name: \Driver\Disk\
    Lower Device Name: \Device\Ide\IAAStorageDevice-1\
    Lower Device Object: 0xfffffa8006582050
    Lower Device Driver Name: \Driver\iaStor\
    Driver name found: iaStor
    Initialization returned 0x0
    Load Function returned 0x0
    <<<2>>>
    Physical Sector Size: 512
    Drive: 0, DevicePointer: 0xfffffa8006583790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    --------- Disk Stack ------
    DevicePointer: 0xfffffa800645fb90, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xfffffa8006583790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    DevicePointer: 0xfffffa800645eb10, DeviceName: Unknown, DriverName: \Driver\hpdskflt\
    DevicePointer: 0xfffffa8006582050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\
    ------------ End ----------
    Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
    Upper DeviceData: 0xfffff8a015f21570, 0xfffffa8006583790, 0xfffffa8006027790
    Lower DeviceData: 0xfffff8a01857c180, 0xfffffa8006582050, 0xfffffa80058e1660
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    <<<2>>>
    <<<3>>>
    Volume: C:
    File system type: NTFS
    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
    Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
    File user open failed: C:\WINDOWS\SYSTEM32\drivers\sptd.sys (0x00000020)
    Done!
    Drive 0
    This is a System drive
    Scanning MBR on drive 0...
    Inspecting partition table:
    MBR Signature: 55AA
    Disk Signature: 794AE9E5

    Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048 Numsec = 407552
    Partition file system is NTFS
    Partition is bootable

    Partition 1 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 409600 Numsec = 431224820

    Partition 2 type is Extended with LBA (0xf)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 431634430 Numsec = 504334338

    Partition 3 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 935968768 Numsec = 40800256

    Disk Size: 500107862016 bytes
    Sector size: 512 bytes

    Done!
    Physical Sector Size: 0
    Drive: 1, DevicePointer: 0xfffffa8009e2f060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    --------- Disk Stack ------
    DevicePointer: 0xfffffa8009c67b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
    DevicePointer: 0xfffffa8009e2f060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
    DevicePointer: 0xfffffa8009c6b9e0, DeviceName: \Device\00000087\, DriverName: \Driver\USBSTOR\
    ------------ End ----------
    Scan finished
    =======================================


    Removal queue found; removal started
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-I.mbam...
    Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
    Removal finished
     
  18. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    We posted at the same time.
    Please read my previous reply.
     
  19. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    I have AVG, so do I need to uninstall it or just uncheck the Resident Shield option to disable the real time protection
     
  20. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    ComboFix Log

    ComboFix 15-02-16.01 - Abhishek 22-02-2015 9:29.1.4 - x64
    Microsoft Windows 7 Home Basic 6.1.7601.1.1252.91.1033.18.3994.1920 [GMT 5.5:30]
    Running from: c:\users\Abhishek\Desktop\ComboFix.exe
    AV: AVG Anti-Virus Free *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
    SP: AVG Anti-Virus Free *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
    SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\windows\msdownld.tmp
    c:\windows\SysWow64\DEBUG.log
    .
    .
    ((((((((((((((((((((((((( Files Created from 2015-01-22 to 2015-02-22 )))))))))))))))))))))))))))))))
    .
    .
    2015-02-22 04:08 . 2015-02-22 04:08 -------- d-----w- c:\users\Default\AppData\Local\temp
    2015-02-22 02:28 . 2015-02-22 03:06 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
    2015-02-21 13:46 . 2015-02-21 13:46 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
    2015-02-21 13:46 . 2015-02-21 13:46 -------- d-----w- c:\programdata\RogueKiller
    2015-02-18 21:10 . 2015-02-22 02:28 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
    2015-02-18 21:10 . 2015-02-21 14:00 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
    2015-02-18 21:10 . 2015-02-18 21:10 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
    2015-02-18 21:10 . 2014-11-21 00:44 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
    2015-02-18 21:10 . 2014-11-21 00:44 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
    2015-02-17 17:42 . 2015-02-17 17:42 -------- d-----w- c:\programdata\ImTOO
    2015-02-07 20:55 . 2015-02-07 20:55 -------- d-----w- c:\users\Abhishek\AppData\Local\AskPartnerNetwork
    2015-02-07 20:55 . 2015-02-07 20:55 -------- d-----w- c:\programdata\AskPartnerNetwork
    2015-02-07 20:55 . 2015-02-07 20:55 -------- d-----w- c:\program files (x86)\AskPartnerNetwork
    2015-02-07 20:10 . 2015-02-07 20:10 -------- d-----w- c:\programdata\APN
    2015-02-06 18:19 . 2015-02-06 18:19 -------- d-----w- c:\users\Abhishek\AppData\Roaming\IDT
    2015-02-01 21:46 . 2015-02-01 21:46 -------- d-----w- c:\users\Abhishek\.jmc
    2015-02-01 21:46 . 2015-02-01 21:46 -------- d-----w- c:\users\Abhishek\.eclipse
    2015-02-01 21:19 . 2015-02-06 20:04 5070512 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
    2015-01-31 20:21 . 2015-01-31 20:21 -------- d-----w- c:\programdata\Playrix Entertainment
    2015-01-31 19:37 . 2015-01-31 19:37 -------- d-----w- c:\programdata\BlueStacks
    2015-01-30 11:03 . 2013-02-21 09:47 81408 ----a-w- c:\windows\system32\drivers\usb2ser.sys
    2015-01-30 11:03 . 2013-02-21 09:47 1919968 ----a-w- c:\windows\system32\WdfCoinstaller01005.dll
    2015-01-30 11:03 . 2015-01-30 11:03 -------- d-----w- c:\program files (x86)\MMX377G 3G USB Manager
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2015-02-06 20:05 . 2012-02-04 23:12 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2015-02-06 20:05 . 2012-02-04 23:12 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
    2015-01-19 18:38 . 2015-01-19 18:38 312744 ----a-w- c:\windows\system32\javaws.exe
    2015-01-19 18:38 . 2015-01-19 18:38 189352 ----a-w- c:\windows\system32\javaw.exe
    2015-01-19 18:38 . 2015-01-19 18:38 189352 ----a-w- c:\windows\system32\java.exe
    2015-01-19 18:38 . 2015-01-19 18:38 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
    2014-11-11 08:37 323752 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
    "PC Suite Tray"="c:\program files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" [2012-06-26 1516632]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-01-18 343168]
    "USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-11-10 291608]
    "HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960]
    "HP CoolSense"="c:\program files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" [2012-11-05 1343904]
    "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
    "AVG9_TRAY"="c:\progra~2\AVG\AVG9\avgtray.exe" [2014-12-10 2079792]
    "PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2013-12-16 337432]
    "EaseUS EPM tray"="c:\program files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe" [2013-03-29 2081792]
    "ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2014-12-19 1949080]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2011-12-6 1338656]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
    "LoadAppInit_Dlls"=1 (0x1)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
    .
    R2 APNMCP;Ask Update Service;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
    R2 CLKMSVC10_38F51D56;CyberLink Product - 2013/02/02 20:23;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [x]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
    R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
    R2 VBoxDRV;PortableVBoxDRV;k:\virtualbox\Portable-VirtualBox\app64\drivers\VBoxDrv\VBoxDrv.sys;k:\virtualbox\Portable-VirtualBox\app64\drivers\VBoxDrv\VBoxDrv.sys [x]
    R2 VBoxUSBMon;PortableVBoxUSBMon;k:\virtualbox\Portable-VirtualBox\app64\drivers\USB\filter\VBoxUSBMon.sys;k:\virtualbox\Portable-VirtualBox\app64\drivers\USB\filter\VBoxUSBMon.sys [x]
    R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys;c:\windows\SYSNATIVE\DRIVERS\motfilt.sys [x]
    R3 cmnsusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2053s;c:\windows\system32\DRIVERS\cmnsusbser.sys;c:\windows\SYSNATIVE\DRIVERS\cmnsusbser.sys [x]
    R3 easytether;easytether;c:\windows\system32\DRIVERS\easytthr.sys;c:\windows\SYSNATIVE\DRIVERS\easytthr.sys [x]
    R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys;c:\windows\SYSNATIVE\epmntdrv.sys [x]
    R3 esgiguard;esgiguard;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [x]
    R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys;c:\windows\SYSNATIVE\EuGdiDrv.sys [x]
    R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
    R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
    R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
    R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x]
    R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys;c:\windows\SYSNATIVE\DRIVERS\motccgp.sys [x]
    R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys;c:\windows\SYSNATIVE\DRIVERS\motccgpfl.sys [x]
    R3 MotDev;Motorola Inc. USB Device;c:\windows\system32\DRIVERS\motodrv.sys;c:\windows\SYSNATIVE\DRIVERS\motodrv.sys [x]
    R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys;c:\windows\SYSNATIVE\DRIVERS\Motousbnet.sys [x]
    R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys;c:\windows\SYSNATIVE\DRIVERS\motusbdevice.sys [x]
    R3 mtkmbim;Micromax Modem Mobile Broadband NDIS 6.20 Miniport Driver;c:\windows\system32\DRIVERS\mtkmbim7_x64.sys;c:\windows\SYSNATIVE\DRIVERS\mtkmbim7_x64.sys [x]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
    R3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
    R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
    R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
    R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
    R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
    R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
    R3 u302bus;HSPADataCard WMC Bus Driver (WDM);c:\windows\system32\DRIVERS\u302bus.sys;c:\windows\SYSNATIVE\DRIVERS\u302bus.sys [x]
    R3 u302mdfl;HSPADataCard Modem Filter;c:\windows\system32\DRIVERS\u302mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\u302mdfl.sys [x]
    R3 u302mdm;HSPADataCard Modem Driver;c:\windows\system32\DRIVERS\u302mdm.sys;c:\windows\SYSNATIVE\DRIVERS\u302mdm.sys [x]
    R3 u302mgmt;HSPADataCard USB Device Management Drivers (WDM);c:\windows\system32\DRIVERS\u302mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\u302mgmt.sys [x]
    R3 wdf_usb;wdf_usb;c:\windows\system32\DRIVERS\usb2ser.sys;c:\windows\SYSNATIVE\DRIVERS\usb2ser.sys [x]
    R3 zteusbser;ZTE USB Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\ztemtusbser.sys;c:\windows\SYSNATIVE\DRIVERS\ztemtusbser.sys [x]
    R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
    S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmpfd.sys;c:\windows\SYSNATIVE\DRIVERS\amdkmpfd.sys [x]
    S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\drivers\iusb3hcs.sys;c:\windows\SYSNATIVE\drivers\iusb3hcs.sys [x]
    S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
    S1 AvgLdx64;AVG Free AVI Loader Driver x64;c:\windows\System32\Drivers\avgldx64.sys;c:\windows\SYSNATIVE\Drivers\avgldx64.sys [x]
    S1 AvgMfx64;AVG Free On-access Scanner Minifilter Driver x64;c:\windows\System32\Drivers\avgmfx64.sys;c:\windows\SYSNATIVE\Drivers\avgmfx64.sys [x]
    S1 AvgTdiA;AVG Free Network Redirector x64;c:\windows\System32\Drivers\avgtdia.sys;c:\windows\SYSNATIVE\Drivers\avgtdia.sys [x]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
    S2 avg9wd;AVG Free WatchDog;c:\program files (x86)\AVG\AVG9\avgwdsvc.exe;c:\program files (x86)\AVG\AVG9\avgwdsvc.exe [x]
    S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
    S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
    S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
    S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
    S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
    S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
    S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
    S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
    S2 Motorola Device Manager;Motorola Device Manager Service;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [x]
    S2 PDFSFilter;PDFSFilter;c:\windows\system32\DRIVERS\PDFsFilter.sys;c:\windows\SYSNATIVE\DRIVERS\PDFsFilter.sys [x]
    S2 PST Service;PST Service;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [x]
    S2 UDisk Monitor;UDisk Monitor;c:\program files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe;c:\program files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe [x]
    S2 UI Assistant Service;UI Assistant Service;c:\program files (x86)\Reliance 3G\AssistantServices.exe;c:\program files (x86)\Reliance 3G\AssistantServices.exe [x]
    S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
    S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
    S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
    S3 BTWDPAN;Bluetooth Personal Area Network;c:\windows\system32\DRIVERS\btwdpan.sys;c:\windows\SYSNATIVE\DRIVERS\btwdpan.sys [x]
    S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
    S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
    S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
    S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
    S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
    S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
    S3 motandroidusb;Mot ADB Interface Driver;c:\windows\system32\Drivers\motoandroid.sys;c:\windows\SYSNATIVE\Drivers\motoandroid.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
    S3 SmbDrv;SmbDrv;c:\windows\system32\DRIVERS\Smb_driver.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver.sys [x]
     
  21. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *Deregistered* - CLKMDRV10_38F51D56
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
    2015-02-20 18:42 1084744 ----a-w- c:\program files (x86)\Google\Chrome\Application\40.0.2214.115\Installer\chrmstp.exe
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2015-02-22 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-02-04 20:05]
    .
    2015-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-16 21:05]
    .
    2015-02-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-16 21:05]
    .
    2015-02-22 c:\windows\Tasks\HPCeeScheduleForAbhishek.job
    - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 12:43]
    .
    .
    --------- X64 Entries -----------
    .
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
    2014-11-07 12:38 357376 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-03-20 472992]
    "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-02-02 1425408]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-28 170264]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-28 398616]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-28 439576]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=c:\windows\System32\avgrssta.dll
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://google.com/
    uLocal Page = c:\windows\system32\blank.htm
    mStart Page = www.google.com
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uSearchAssistant = www.google.com
    IE: &Download by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
    IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
    IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
    TCP: DhcpNameServer = 192.168.43.1
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}: DhcpNameServer = 192.168.43.1
    TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\261616072756: DhcpNameServer = 192.168.137.1
    FF - ProfilePath - c:\users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\
    FF - prefs.js: browser.search.defaulturl -
    FF - prefs.js: browser.startup.homepage - hxxp://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=%5EBVK%5EYYYYYY%5EYY%5EIN&gct=hp&apn_ptnrs=%5EBVK&apn_dtid=%5EYYYYYY%5EYY%5EIN&apn_dbr=ff_35.0&apn_uid=3601C8C7-9D42-402F-8104-E4BDAE5FF83C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx
    FF - prefs.js: keyword.URL - google.com
    FF - ExtSQL: !HIDDEN! 2013-08-05 22:58; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF - user.js: extensions.irmysearch.instlRef - 140305_b
    FF - user.js: extensions.irmysearch.cr - 1501068693
    FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
    FF - user.js: extensions.mysearchdial.hmpgUrl - hxxp://start.mysearchdial.com/?f=1&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
    FF - user.js: extensions.mysearchdial.dfltSrch - true
    FF - user.js: extensions.mysearchdial.srchPrvdr - Mysearchdial
    FF - user.js: extensions.mysearchdial.dnsErr - true
    FF - user.js: extensions.mysearchdial_i.newTab - false
    FF - user.js: extensions.mysearchdial.newTabUrl - hxxp://start.mysearchdial.com/?f=2&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
    FF - user.js: extensions.mysearchdial.tlbrSrchUrl - hxxp://start.mysearchdial.com/?f=3&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=&q=
    FF - user.js: extensions.mysearchdial.id - E006E61833AA566F
    FF - user.js: extensions.mysearchdial.instlDay - 16174
    FF - user.js: extensions.mysearchdial.vrsn - 1.8.29.0
    FF - user.js: extensions.mysearchdial.vrsni - 1.8.29.0
    FF - user.js: extensions.mysearchdial_i.vrsnTs - 1.8.29.023:41:0
    FF - user.js: extensions.mysearchdial.prtnrId - mysearchdial
    FF - user.js: extensions.mysearchdial.prdct - mysearchdial
    FF - user.js: extensions.mysearchdial.aflt - dvd_14_16_ff
    FF - user.js: extensions.mysearchdial_i.smplGrp - none
    FF - user.js: extensions.mysearchdial.tlbrId - base
    FF - user.js: extensions.mysearchdial.instlRef - 140305_b
    FF - user.js: extensions.mysearchdial.dfltLng -
    FF - user.js: extensions.mysearchdial.appId - {CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
    FF - user.js: extensions.mysearchdial.excTlbr - false
    FF - user.js: extensions.mysearchdial.cr - 1501068693
    FF - user.js: extensions.mysearchdial.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
    FF - user.js: extensions.mysearchdial.AL - 2
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Wow6432Node-HKCU-Run-AdobeBridge - (no file)
    Wow6432Node-HKLM-Run-ZTE ADSL - (no file)
    HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
    HKLM_Wow6432Node-ActiveSetup-{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec
    HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
    AddRemove-1ClickDownload - c:\program files (x86)\1clickmoviedownloader.com\uninst.exe
    AddRemove-WTA-060835f8-ba92-4f29-9820-bd28e24b395e - c:\program files (x86)\HP Games\Poker Superstars III\uninstall\uninstaller.exe
    AddRemove-WTA-1085ed20-1abd-4e54-a0f4-7570989ba599 - c:\program files (x86)\HP Games\Final Drive Fury\uninstall\uninstaller.exe
    AddRemove-WTA-1e4e0e9c-a1b7-486d-b4eb-d49b3fc18d6f - c:\program files (x86)\HP Games\RollerCoaster Tycoon 3 Platinum\uninstall\uninstaller.exe
    AddRemove-WTA-27234381-983b-441e-aa9a-13f99db15696 - c:\program files (x86)\HP Games\Hoyle Card Games\uninstall\uninstaller.exe
    AddRemove-WTA-34c2fe5e-40d1-4ff7-bc22-79b1f4c5e83a - c:\program files (x86)\HP Games\Jewel Match 3\uninstall\uninstaller.exe
    AddRemove-WTA-3b9f1261-6b9f-422c-82f8-4482de1ae6a2 - c:\program files (x86)\HP Games\John Deere Drive Green\uninstall\uninstaller.exe
    AddRemove-WTA-40c4a6de-9217-4500-91be-19d6725e32e9 - c:\program files (x86)\HP Games\Torchlight\uninstall\uninstaller.exe
    AddRemove-WTA-4a2b4983-ca70-4830-839d-ff22f8aa9d8a - c:\program files (x86)\HP Games\Farm Frenzy\uninstall\uninstaller.exe
    AddRemove-WTA-52e83f26-e526-46d8-96f2-53fc102bcfff - c:\program files (x86)\HP Games\Zumas Revenge\uninstall\uninstaller.exe
    AddRemove-WTA-67acca33-0fe7-44ce-aeef-70cf346b8ad3 - c:\program files (x86)\HP Games\Farmscapes\uninstall\uninstaller.exe
    AddRemove-WTA-7061d022-6abf-4eeb-95b9-11b3d12ef3b6 - c:\program files (x86)\HP Games\Luxor HD\uninstall\uninstaller.exe
    AddRemove-WTA-7783c07f-e883-420d-99d1-49585d840017 - c:\program files (x86)\HP Games\Chuzzle Deluxe\uninstall\uninstaller.exe
    AddRemove-WTA-acc9783c-4d84-4ad5-aab7-6f94d51cc53c - c:\program files (x86)\HP Games\Bejeweled 3\uninstall\uninstaller.exe
    AddRemove-WTA-adae3110-355b-4a45-b9a2-0870be9f7d68 - c:\program files (x86)\HP Games\Letters from Nowhere 2\uninstall\uninstaller.exe
    AddRemove-WTA-aed7e19b-d302-45cb-8f0b-a4bef4ea16a7 - c:\program files (x86)\HP Games\Jewel Quest Mysteries The Seventh Gate Collectors Edition\uninstall\uninstaller.exe
    AddRemove-WTA-af29f08a-46ff-4d2d-a302-1d2acacbdf44 - c:\program files (x86)\HP Games\Penguins!\uninstall\uninstaller.exe
    AddRemove-WTA-b46d3243-a1be-4c71-ac1e-d389fcb1cca3 - c:\program files (x86)\HP Games\Virtual Villagers 4 - The Tree of Life\uninstall\uninstaller.exe
    AddRemove-WTA-c667e7ab-917d-4676-8e96-51bfc889843b - c:\program files (x86)\HP Games\Polar Bowler\uninstall\uninstaller.exe
    AddRemove-WTA-cfd140b8-e211-4146-8add-39df43b30d93 - c:\program files (x86)\HP Games\FATE\uninstall\uninstaller.exe
    AddRemove-WTA-d562800f-b69f-435c-9d5b-f36b49eaccf5 - c:\program files (x86)\HP Games\Blackhawk Striker 2\uninstall\uninstaller.exe
    AddRemove-WTA-d670400e-0995-46a8-96fe-7435a3c05791 - c:\program files (x86)\HP Games\Cradle of Rome 2\uninstall\uninstaller.exe
    AddRemove-WTA-dfd07a4a-2b42-426a-ac02-79d6d4d5d8e2 - c:\program files (x86)\HP Games\Plants vs Zombies - Game of the Year\uninstall\uninstaller.exe
    AddRemove-WTA-e586ec1c-31fa-4abc-934c-4ef01131056a - c:\program files (x86)\HP Games\The Treasures of Mystery Island The Ghost Ship\uninstall\uninstaller.exe
    AddRemove-WTA-f3cc5135-34be-4ae0-8e90-ea090e326e62 - c:\program files (x86)\HP Games\Doras World Adventure\uninstall\uninstaller.exe
    AddRemove-WTA-f55d017e-e492-494a-8d5d-12bd0349d7b7 - c:\program files (x86)\HP Games\Polar Golfer\uninstall\uninstaller.exe
    AddRemove-WTA-fccb90b4-1dc1-467f-b32e-57f3da3abe2a - c:\program files (x86)\HP Games\Mah Jong Medley\uninstall\uninstaller.exe
    AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*c*èT]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*c*èT\OpenWithList]
    @Class="Shell"
    "a"="vlc.exe"
    "MRUList"="a"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*D*J*M*a*z*þ[|\OpenWithList]
    @Class="Shell"
    "a"="vlc.exe"
    "MRUList"="a"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*yÞ`j\OpenWithList]
    @Class="Shell"
    "a"="vlc.exe"
    "MRUList"="a"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#ß*÷*]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#ß*÷*\OpenWithList]
    @Class="Shell"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#±÷*]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#±÷*\OpenWithList]
    @Class="Shell"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%¥*+*]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%¥*+*\OpenWithList]
    @Class="Shell"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%R%^%]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%R%^%\OpenWithList]
    @Class="Shell"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%X%^%]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%X%^%\OpenWithList]
    @Class="Shell"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*R%a"S%]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*R%a"S%\OpenWithList]
    @Class="Shell"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*5?fõ*€#]
    @Class="Shell"
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*5?fõ*€#\OpenWithList]
    @Class="Shell"
    "a"="vlc.exe"
    "MRUList"="a"
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*c*èT]
    "0"=hex:44,3a,5c,56,69,64,65,6f,5c,44,61,69,6c,79,6d,6f,74,69,6f,6e,20,2d,20,
    54,68,69,72,74,65,65,6e,20,53,65,6e,73,65,73,20,2d,20,49,6e,74,6f,20,54,68,\
    "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
    .
    [HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*5?fõ*€#]
    "0"=hex:47,3a,5c,68,69,6e,64,69,5c,64,6f,6f,62,61,5f,64,6f,6f,62,61,5f,72,65,
    68,74,61,5f,68,6f,6f,6e,5f,73,69,6c,6b,5f,72,6f,75,74,65,5f,62,65,73,74,5f,\
    "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
     
  22. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.16"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0017\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2015-02-22 09:42:50
    ComboFix-quarantined-files.txt 2015-02-22 04:12
    .
    Pre-Run: 19,121,692,672 bytes free
    Post-Run: 21,109,313,536 bytes free
    .
    - - End Of File - - 82B341FD6E35685994EE25A42E45C9FA
     
  23. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    [​IMG] Please download AdwCleaner by Xplode onto your desktop.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Scan button.
    • When the scan has finished click on Clean button.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the contents of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.

    [​IMG] Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.

    [​IMG] Please download Farbar Recovery Scan Tool and save it to your Desktop.

    Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
    • Double-click to run it. When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
    • The first time the tool is run, it makes also another log (Addition.txt). Please copy and paste it to your reply.
     
  24. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    After running AdwCleaner while rebooting a blue screen appeared with some error.
    AdwCleaner Log

    # AdwCleaner v4.111 - Logfile created 22/02/2015 at 10:31:13
    # Updated 18/02/2015 by Xplode
    # Database : 2015-02-18.3 [Server]
    # Operating system : Windows 7 Home Basic Service Pack 1 (x64)
    # Username : Abhishek - ABHISHEK-HP
    # Running from : C:\Users\Abhishek\Desktop\adwcleaner_4.111.exe
    # Option : Cleaning

    ***** [ Services ] *****

    [#] Service Deleted : APNMCP

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData\apn
    Folder Deleted : C:\ProgramData\AskPartnerNetwork
    Folder Deleted : C:\ProgramData\Babylon
    Folder Deleted : C:\ProgramData\BetterSoft
    Folder Deleted : C:\ProgramData\eSafe
    Folder Deleted : C:\ProgramData\RightClick
    Folder Deleted : C:\ProgramData\Tarma Installer
    Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
    Folder Deleted : C:\Program Files (x86)\DAEMON Tools Toolbar
    Folder Deleted : C:\Program Files (x86)\orbitdownloader
    Folder Deleted : C:\Windows\SysWOW64\SearchProtect
    Folder Deleted : C:\Users\Abhishek\AppData\Local\AskPartnerNetwork
    Folder Deleted : C:\Users\Abhishek\AppData\Local\Bundled software uninstaller
    Folder Deleted : C:\Users\Abhishek\AppData\Local\Zoom_Downloader
    Folder Deleted : C:\Users\Abhishek\AppData\Local\CrashRpt
    Folder Deleted : C:\Users\Abhishek\AppData\LocalLow\HPAppData
    Folder Deleted : C:\Users\Abhishek\AppData\Roaming\Babylon
    Folder Deleted : C:\Users\Abhishek\AppData\Roaming\dvdvideosoftiehelpers
    Folder Deleted : C:\Users\Abhishek\AppData\Roaming\FoxTab
    Folder Deleted : C:\Users\Abhishek\AppData\Roaming\GrabPro
    Folder Deleted : C:\Users\Abhishek\AppData\Roaming\SendSpace
    Folder Deleted : C:\Users\Abhishek\AppData\Roaming\RHEng
    Folder Deleted : C:\Users\Abhishek\AppData\Roaming\ProgSense
    File Deleted : C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\searchplugins\ask-search.xml
    File Deleted : C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js
    File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ifohbjbgfchkkfhphahclmkpgejiplfo_0.localstorage
    File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage-journal
    File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
    File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
    File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage
    File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.ak.facebook.com_0.localstorage
    File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.ak.facebook.com_0.localstorage-journal

    ***** [ Scheduled tasks ] *****


    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Download by Orbit
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Grab video by Orbit
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Do&wnload selected by Orbit
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Down&load all by Orbit
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\AutocompletePro.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
    Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
    Key Deleted : HKCU\Software\594dedeb13aea17
    Key Deleted : HKLM\SOFTWARE\594dedeb13aea17
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{000123B4-9B42-4900-B3F7-F4B073EFC214}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3F1D494B-0CEF-4468-96C9-386E2E4DEC90}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7854F00C-DC77-477E-A10E-603F48442D3B}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0880527-DC28-4EBB-BA27-D22102F22A9F}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BCDDE143-FAE3-4C57-B22B-C4E8678CFDC0}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0055C089-8582-441B-A0BF-17B458C2A3A8}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0055C089-8582-441B-A0BF-17B458C2A3A8}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
    Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{57EEFDF4-1C92-E3C8-FD0C-37B528AB41BC}
    Key Deleted : HKCU\Software\APN PIP
    Key Deleted : HKCU\Software\AskPartnerNetwork
    Key Deleted : HKCU\Software\BI
    Key Deleted : HKCU\Software\Complitly
    Key Deleted : HKCU\Software\Optimizer Pro
    Key Deleted : HKCU\Software\Orbit
    Key Deleted : HKCU\Software\ProgSense
    Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
    Key Deleted : HKLM\SOFTWARE\Babylon
    Key Deleted : HKLM\SOFTWARE\dt soft\daemon tools toolbar
    Key Deleted : HKLM\SOFTWARE\Orbit
    Key Deleted : HKLM\SOFTWARE\PIP
    Key Deleted : HKLM\SOFTWARE\SP Global
    Key Deleted : HKLM\SOFTWARE\SProtector
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit_is1
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

    ***** [ Web browsers ] *****

    -\\ Internet Explorer v11.0.9600.16521


    -\\ Mozilla Firefox v36.0 (x86 en-US)

    [49aoobau.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.default.homepage.check", false);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.default.search.check", false);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("browser.search.order.1", "Mysearchdial");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=%5EBVK%5EYYYYYY%5EYY%5EIN&gct=hp&apn_ptnrs=%5EBVK&apn_dtid=%5EYYYYYY%5EYY%5EIN&apn_dbr=ff_35.[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzz[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.cr", "1501068693");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.instlRef", "140305_b");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.AL", 2);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.aflt", "dvd_14_16_ff");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtC[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.cntry", "IN");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.cr", "1501068693");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dfltLng", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.hdrMd5", "43052913943B13646AF3E4A9372C9E30");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.hmpg", true);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEt[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.id", "E006E61833AA566F");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.instlDay", "16174");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.instlRef", "140305_b");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0CyCyCtAtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.29.023:41:0");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCy[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"95\",\"lastVrsn\":\"95\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.sg", "none");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1Czut[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.vrsn", "1.8.29.0");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.vrsni", "1.8.29.0");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false);
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.023:41:0");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.xpiState", "{\"app-profile\":{\"toolbar_BTRSP-C@apn.ask.com\":{\"d\":\"C:\\\\Users\\\\Abhishek\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\49aoobau.default\\\\exte[...]
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
    [49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");

    -\\ Google Chrome v40.0.2214.115

    [C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=IN&userid=a2be68fb-d24a-77b5-cc5c-8978f5199cc8&searchtype=ds&q={searchTerms}&installDate=26/10/2013
    [C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3321459&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPB4CB1863-D05C-4A32-BB88-6E475F0C44D5&q={searchTerms}&SSPV=
    [C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=

    -\\ Opera v27.0.1689.69

    [C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=IN&userid=a2be68fb-d24a-77b5-cc5c-8978f5199cc8&searchtype=ds&q={searchTerms}&installDate=26/10/2013
    [C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3321459&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPB4CB1863-D05C-4A32-BB88-6E475F0C44D5&q={searchTerms}&SSPV=
    [C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=

    *************************

    AdwCleaner[R0].txt - [18230 bytes] - [22/02/2015 10:29:10]
    AdwCleaner[S0].txt - [19550 bytes] - [22/02/2015 10:31:13]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19610 bytes] ##########
     
  25. AbbbY Sen

    AbbbY Sen TS Rookie Topic Starter Posts: 31

    JRT Log

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.4.2 (02.02.2015:1)
    OS: Windows 7 Home Basic x64
    Ran by Abhishek on 22-02-2015 at 10:49:49.90
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services



    ~~~ Registry Values



    ~~~ Registry Keys



    ~~~ Files



    ~~~ Folders

    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{00367BEF-E39E-412E-A70D-38D54F7A2461}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{02B6C5F1-2B6B-484A-9134-C80A89FBCBAD}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{0AA24769-D8DF-4D0B-A6AB-A249AC0953D8}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{102182B8-5267-4AE1-9EFD-B3ED1F3431DC}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{11F19B2C-A3FC-43C0-9F98-8D026501B679}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{124E4430-8CE6-45F6-9702-E78EAF6DDACC}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{16F0F94C-0029-49CD-9B19-1AE2E2A37262}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{1F6152FB-5688-4522-97D3-93E5F3AF5B99}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{20C1F64C-2F94-4AAD-B223-69E3EDFEE494}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{2399B451-856D-4565-8452-C0EFAFB6906B}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{26BBC5F9-922D-4441-8ACB-9DEFAE0F8664}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3079C850-C37C-4C8E-BEC5-FABA07CB5EAA}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3174FA39-4763-4004-A6FD-FE605B5C152B}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3235A5BE-392F-4D29-B260-F7D64FFF0E7A}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3E5E3204-1BC0-4CEE-87B4-C9B84E3CE228}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3F21DDEC-583F-4769-AEE9-226B887FA48D}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3F6C6874-7233-429F-80C1-0C624391EF7F}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{42225203-BE3E-4A56-929E-ED6199AE3987}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{4320979A-CC4C-427C-9A71-76C14F9DD081}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{44514F5B-069D-4B05-A7D4-E1C8E69986D9}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{45CE1E7D-F9F5-49A5-AADA-42D0472E9DC6}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{4C272B57-1958-4A2E-84EB-459B9FC3C944}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{540AA9B5-030A-46C1-BA89-5C91042B75A4}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{59B78BC5-7AF6-4D02-A9BB-5777896082BC}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{5C4AF01B-9802-4685-A531-49CC8469544F}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{630975E0-2CA1-4827-A56C-45D3320C42A9}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{67FA97A6-DDC7-42A1-8FC6-32FAC72EE22C}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{70346582-5ED2-4819-AB3E-DD1F357C57BF}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{7A684CED-5BA3-478C-8A38-79A114E3D8F2}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{84648073-663C-42E9-B326-5022B626FD04}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{994290CA-C589-4238-AC79-5E3B296B908E}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{9C41FCA2-E6FE-4E7A-B491-16C009E73FF0}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{A0D7DBA2-3CBC-44DC-A908-7064041EC882}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{A4F6AF34-B8F5-49FA-A790-BA65CA5DD1DB}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{A867BAA3-892A-40B8-84C2-8F5A6E1E3400}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{B68D8257-63B8-4C3F-A918-8A4027AC3FF0}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{B7514D9D-C05E-4629-B547-4A535491C37E}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{BA6F89BD-AB94-46D5-AE0A-2BA7FF0682B4}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{C477ADAE-BCC8-48F6-88E4-81545694EA16}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{C8C18E10-6E86-4D42-8DD5-8016E3631387}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{CB6002B1-24D9-4E2E-B7E8-57E73E314CAB}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{CE92592A-064B-4BED-8540-6F3A01251FF2}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{D0EDE3AA-DE27-4F67-8FE6-0A431F077B65}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{D2F6C27C-21FF-4671-80E9-A679F06A1615}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DAF1FE13-EE47-4C8B-A496-F55719D525E2}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DC00040A-4D1A-4748-9EAC-92EF6AF45B43}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DF05EB6E-3DCA-4719-8192-6D8D0AFAA764}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DF331FEA-8A66-43FD-8C26-BF0232A541FF}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E004F249-42DD-4B4A-834A-98581394BFB2}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E270CBF7-1BB9-4365-BEB1-0EBB63CAA43F}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E576AD9A-0492-4F59-9933-ACAC61041062}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E89B5060-305D-44C7-84C4-FCAB420B2011}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{ECB9594E-582F-4E13-93C8-5237BE6564B1}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{F89055C3-BD15-4314-83D9-E94E3B22D4D4}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{F9466029-FEBD-45CA-BD31-12E581EF8674}
    Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{FA680A11-89F5-45D9-A716-AEB8B8C4938C}



    ~~~ FireFox

    Successfully deleted the following from C:\Users\Abhishek\AppData\Roaming\mozilla\firefox\profiles\49aoobau.default\prefs.js

    user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-
    user_pref("extensions.xpiState", "{\"app-profile\":{\"toolbar_BTRSP-C@apn.ask.com\":{\"d\":\"C:\\\\Users\\\\Abhishek\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\
    Emptied folder: C:\Users\Abhishek\AppData\Roaming\mozilla\firefox\profiles\49aoobau.default\minidumps [81 files]



    ~~~ Event Viewer Logs were cleared





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 22-02-2015 at 10:53:12.45
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...