TechSpot

Virus from .exe file

By PhilM
May 21, 2015
  1. Hi, I was searching for a pdf the other night and, obviously not paying enough due care and attention, I ran the file. It turns out it was some horrible malware that is highjacking my google searches and added loads of foreign processes on my laptop. I've made the log files you need through far bar recovery tool. Here they are, thank you for your help :)

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-05-2015
    Ran by Phil is fiiiine (administrator) on M17X on 21-05-2015 15:41:24
    Running from C:\Users\Phil is fiiiine\Desktop
    Loaded Profiles: Phil is fiiiine (Available profiles: user & Phil is fiiiine)
    Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 10 (Default browser path: "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" -- "%1")
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (Sensible Vision ) C:\Program Files\Alienware\Command Center\AlienSense\FAService.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    () C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    (ClaraLabs) C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe
    () C:\Program Files\OSD\Service1.exe
    (Scarlet.Crush Productions) C:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe
    (Web Bar Media) C:\Program Files\WebBar\2.0.5527.25142\wb.exe
    () C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175666-3210-8032-38C04F373638\cnsq572E.tmp
    (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
    () C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nsp473C.tmpfs
    () C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\jnsf7812.tmp
    () C:\Users\Phil is fiiiine\AppData\Local\Temp\isdk3j2wYk7T\ISightHost.exe
    () C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp
    (Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
    () C:\Program Files (x86)\Coupoon\UpdateCheck.exe
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    () C:\Users\Phil is fiiiine\AppData\Local\mbot_gb_571\upmbot_gb_571.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
    (Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
    (Alienware Corporation) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
    (Flux Software LLC) C:\Users\Phil is fiiiine\AppData\Local\FluxSoftware\Flux\flux.exe
    () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
    (Nosibay) C:\Users\Phil is fiiiine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe
    (Sensible Vision ) C:\Program Files\Alienware\Command Center\AlienSense\FATrayMon.exe
    (Sensible Vision ) C:\Program Files\Alienware\Command Center\AlienSense\FATrayAlert.exe
    (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\apdproxy.exe
    () C:\Users\Phil is fiiiine\AppData\Roaming\SSN\ssn.exe
    (Microsoft) C:\Program Files\OSD\OSD_Main.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
    () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
    () C:\Program Files (x86)\mbot_gb_571\mbot_gb_571.exe
    (Alienware) C:\Program Files\Alienware\Command Center\AlienFXHook32Mngr.exe
    (Alienware) C:\Program Files\Alienware\Command Center\AlienFXHook64Mngr.exe
    () C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175529-3210-8032-38C04F373638\bnsp3970.exe
    (ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
    () C:\Users\Phil is fiiiine\AppData\Local\Temp\nso9253.tmp
    (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    (Infonaut) C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe
    () C:\Program Files\shopperz\Anneliese.exe
    () C:\Program Files\shopperz\Brito.exe
    () C:\Program Files\shopperz\csrcc.exe
    () C:\Program Files\shopperz\Brito64.exe
    () C:\Program Files\shopperz\Grubb.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Games Bot Inc.) C:\Program Files (x86)\Games Bot\GamesBotSvc.exe
    (Games Bot Inc.) C:\Program Files (x86)\Games Bot\GamesBotSvc.exe
    (Games Bot Inc.) C:\Program Files (x86)\Games Bot\GamesBotSvc.exe
    (Cinema PlusV21.05) C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-10.exe
    (Cinema PlusV21.05) C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-6.exe
    () C:\Program Files (x86)\gmsd_us_598\gmsd_us_598.exe
    () C:\Users\Phil is fiiiine\AppData\Local\gmsd_us_598\upgmsd_us_598.exe
    (Cinema PlusV21.05) C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.exe
    () C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe
    () C:\Program Files (x86)\Coupoon\UpdateCheck.exe
    () C:\Users\Phil is fiiiine\AppData\Local\Temp\nsf645F.tmp
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    () C:\Program Files (x86)\Coupoon\UpdateCheck.exe
    () C:\Program Files (x86)\Coupoon\UpdateCheck.exe
    (The Chromium Authors) C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\Explore.exe
    () C:\Program Files (x86)\Coupoon\UpdateCheck.exe
    () C:\Program Files (x86)\Coupoon\UpdateCheck.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
    HKLM\...\Run: [AlienFX Controller] => C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe [63304 2010-05-21] (Alienware Corporation)
    HKLM\...\Run: [] => [X]
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
    HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
    HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\Brito.exe [431976 2015-05-20] ()
    HKLM\...\Run: [shopperz64] => C:\Program Files\shopperz\Brito64.exe [462696 2015-05-20] ()
    HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files\Alienware\Command Center\AlienSense\FATrayMon.exe [95560 2010-04-04] (Sensible Vision )
    HKLM-x32\...\Run: [FAStartup] => [X]
    HKLM-x32\...\Run: [OSD] => c:\Program Files\OSD\Launch.exe [36864 2009-05-12] (HH)
    HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
    HKLM-x32\...\Run: [Adobe Photo Downloader] => C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\apdproxy.exe [67752 2006-12-22] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2691480 2014-03-21] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-10-02] (AVAST Software)
    HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
    HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [mbot_gb_571] => C:\Program Files (x86)\mbot_gb_571\mbot_gb_571.exe [3982792 2015-05-18] ()
    HKLM-x32\...\Run: [WinCheck] => C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175529-3210-8032-38C04F373638\bnsp3970.exe [273408 2015-05-21] ()
    HKLM-x32\...\Run: [gmsd_us_598] => C:\Program Files (x86)\gmsd_us_598\gmsd_us_598.exe [3982280 2015-05-18] ()
    HKLM-x32\...\RunOnce: [upmbot_gb_571.exe] => C:\Users\Phil is fiiiine\AppData\Local\mbot_gb_571\upmbot_gb_571.exe [3287496 2015-05-18] ()
    HKLM-x32\...\RunOnce: [upgmsd_us_598.exe] => C:\Users\Phil is fiiiine\AppData\Local\mbot_gb_571\upgmsd_us_598.exe -runonce
    Winlogon\Notify\FastAccess: C:\Program Files\Alienware\Command Center\AlienSense\FALogNot.dll [2010-04-04] ()
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2874048 2015-02-19] (Valve Corporation)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [F.lux] => C:\Users\Phil is fiiiine\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [AceUpdater] => C:\Users\Phil is fiiiine\AppData\Roaming\ACEStream\updater\ace_update.exe [22824 2014-10-01] ()
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [AceWebExtensionUpdater] => C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe [22824 2015-02-28] ()
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [WindApp] => "C:\Users\Phil is fiiiine\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [Selection Tools] => C:\Users\Phil is fiiiine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe [1530640 2015-04-09] (Nosibay)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [Save Serp Now] => C:\Users\Phil is fiiiine\AppData\Roaming\SSN\updssn.exe [26112 2014-11-21] ()
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [BoBrowser] => C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\bobrowser.exe [7353992 2014-11-19] (The BoBrowser Authors)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.92\OptProLauncher.exe [148008 2015-05-18] ()
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [GoogleChromeAutoLaunch_77F5470D7A47A6CE451C67909D7A3221] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [770048 2015-05-11] (Crossbrowse)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Policies\system: [LogonHoursAction] 2
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
    HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-07-05] (Microsoft Corporation)
    Lsa: [Notification Packages] scecli FAPassSync
    Startup: C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-05-21]
    ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-10-02] (AVAST Software)
    BootExecute: autocheck autochk * bootdelete
    GroupPolicyUsers\S-1-5-21-2075418120-132197448-404415077-1003\User: Group Policy Restriction detected <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    SearchScopes: HKLM-x32 -> DefaultScope value is missing
    SearchScopes: HKU\S-1-5-21-2075418120-132197448-404415077-1003 -> DefaultScope {8CC9E743-9503-42DF-B064-7B2282AA7747} URL = https://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=667671&p={searchTerms}
    SearchScopes: HKU\S-1-5-21-2075418120-132197448-404415077-1003 -> {8CC9E743-9503-42DF-B064-7B2282AA7747} URL = https://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=667671&p={searchTerms}
    SearchScopes: HKU\S-1-5-21-2075418120-132197448-404415077-1003 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={...c89811bdf&lang=en&ds=st011&pr=sa&d=2013-06-03 16:37:23&v=15.4.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
    BHO: shopperz -> {2395B860-45E4-42fd-96E6-50BA597C1C42} -> C:\Program Files\shopperz\Sorensen64.dll [2015-05-20] ()
    BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-10-02] (AVAST Software)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
    BHO: Consumer Input DCA BHO -> {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} -> C:\Program Files (x86)\Consumer Input\InternetExplorer\x64\dca-bho.dll [2015-02-25] (Compete, Inc.)
    BHO-x32: No Name -> {0347C33E-8762-4905-BF09-768834316C61} -> No File
    BHO-x32: shopperz -> {2395B860-45E4-42fd-96E6-50BA597C1C42} -> C:\Program Files\shopperz\Sorensen32.dll [2015-05-20] ()
    BHO-x32: No Name -> {326E768D-4182-46FD-9C16-1449A49795F4} -> No File
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-02] (Oracle Corporation)
    BHO-x32: No Name -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> No File
    BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File
    BHO-x32: Consumer Input DCA BHO -> {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} -> C:\Program Files (x86)\Consumer Input\InternetExplorer\dca-bho.dll [2015-02-25] (Compete, Inc.)
    BHO-x32: No Name -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> No File
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-02] (Oracle Corporation)
    BHO-x32: No Name -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> No File
    Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

    FireFox:
    ========
    FF ProfilePath: C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default
    FF DefaultSearchEngine: Wikipedia (en)
    FF SelectedSearchEngine: Wikipedia (en)
    FF Homepage: hxxp://www.google.co.uk/
    FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
    FF NetworkProxy: "type", 2
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-17] ()
    FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
    FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-05-18] (Microsoft Corporation)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-05-23] (Wacom)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
    FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-17] ()
    FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
    FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
    FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
    FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-02] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-02] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-05-18] (Microsoft Corporation)
    FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-05-21] (globalUpdate)
    FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-05-21] (globalUpdate)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2012-05-23] (Wacom)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
    FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
    FF Plugin HKU\S-1-5-21-2075418120-132197448-404415077-1003: @acestream.net/acestreamplugin,version=3.0.11 -> C:\Users\Phil is fiiiine\AppData\Roaming\ACEStream\player\npace_plugin.dll [2014-12-03] (Innovative Digital Technologies)
    FF user.js: detected! => C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\user.js [2015-05-21]
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CrazyTalk4Native.dll [2008-10-28] (C3D)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctdomemhelper.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctframeplayerobject.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctplayerobject.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\imagickrt.dll [2008-10-28] (BEXTech)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npRLCT4Player.dll [2008-10-28] ( )
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\rlcontentclass.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLMusicPacker.dll [2008-10-28] ()
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLMusicUnpacker.dll [2008-10-28] ()
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLVoicePacker.dll [2008-10-28] ()
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLVoiceUnpacker.dll [2008-10-28] ()
    FF Extension: CinemaPlus-3.2cV21.05 - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com [2015-05-21]
    FF Extension: ProxMate - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-09-25]
    FF Extension: Flash Control - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi [2015-03-19]
    FF Extension: Adblock Plus - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-07-16]
    FF Extension: Greasemonkey - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-09-22]
    FF HKLM\...\Firefox\Extensions: [{2395B860-45E4-42fd-96E6-50BA597C1C42}] - C:\Program Files\shopperz\Firefox
    FF Extension: shopperz - C:\Program Files\shopperz\Firefox [2015-05-21]
    FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-07-06]
    FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-08-11]
    FF HKLM-x32\...\Firefox\Extensions: [{2395B860-45E4-42fd-96E6-50BA597C1C42}] - C:\Program Files\shopperz\Firefox
    FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
    FF HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Firefox\Extensions: [ConsumerInput@Compete] - C:\Program Files (x86)\Consumer Input\Firefox\ciff-3.2.0-12099.xpi
    FF Extension: Consumer Input - C:\Program Files (x86)\Consumer Input\Firefox\ciff-3.2.0-12099.xpi [2015-01-21]
     
  2. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Chrome:
    =======
    CHR HomePage: Default -> hxxp://www.google.co.uk/
    CHR DefaultSearchKeyword: Default -> yahoo.com search
    CHR DefaultSearchURL: Default -> https://uk.search.yahoo.com/search?fr=chr-yo_gc&ei=utf-8&ilc=12&type=667671&p={searchTerms}
    CHR DefaultSuggestURL: Default -> https://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}
    CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\PepperFlash\pepflashplayer.dll ()
    CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
    CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\ppGoogleNaClPluginChrome.dll No File
    CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\pdf.dll No File
    CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
    CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll No File
    CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll No File
    CHR Profile: C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Docs) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-05]
    CHR Extension: (Google Drive) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-05]
    CHR Extension: (YouTube) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-05]
    CHR Extension: (Adblock Plus) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-07-05]
    CHR Extension: (Google Search) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-05]
    CHR Extension: (Session Buddy) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2013-07-06]
    CHR Extension: (Bookmark Manager) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-29]
    CHR Extension: (Avast Online Security) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-16]
    CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-21]
    CHR Extension: (FlashControl) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe [2015-01-23]
    CHR Extension: (Google Wallet) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
    CHR Extension: (Gmail) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-05]
    CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-02]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 1DEA2C4A-8529-46b5-ACC0-C3873ED068E6; C:\Program Files\shopperz\Anneliese.exe [283496 2015-05-20] ()
    S2 54cc00c0; c:\Program Files (x86)\Optimizer Pro 3.92\OptProMon.dll [1827368 2015-05-21] () <==== ATTENTION
    R2 AdobeActiveFileMonitor5.0; C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe [108712 2006-12-22] ()
    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-02] (AVAST Software)
    R2 ClaraUpdater; C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe [887376 2015-05-21] (ClaraLabs)
    S2 consumerinput_update; C:\Program Files (x86)\Consumer Input\Update\ConsumerInputUpdate.exe [105944 2015-05-21] (ConsumerInput)
    S3 consumerinput_updatem; C:\Program Files (x86)\Consumer Input\Update\ConsumerInputUpdate.exe [105944 2015-05-21] (ConsumerInput)
    R2 csrcc; C:\Program Files\shopperz\csrcc.exe [1447272 2015-05-20] ()
    R2 CustomSvc; C:\Program Files\OSD\Service1.exe [13312 2009-02-20] () [File not signed]
    R2 cycyvysu; C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nslFF40.tmp [188416 2015-05-21] () [File not signed]
    R2 Ds3Service; C:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe [388352 2013-05-05] (Scarlet.Crush Productions)
    R2 FAService; C:\Program Files\Alienware\Command Center\AlienSense\FAService.exe [2409800 2010-04-04] (Sensible Vision )
    R2 GamesBotService; C:\Program Files (x86)\Games Bot\GamesBotSvc.exe [53352 2015-04-22] (Games Bot Inc.)
    R2 gerugefu; C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175666-3210-8032-38C04F373638\cnsq572E.tmp [291840 2015-05-21] () [File not signed]
    S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-05-21] (globalUpdate) [File not signed] <==== ATTENTION
    S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-05-21] (globalUpdate) [File not signed] <==== ATTENTION
    R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
    R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
    R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [File not signed]
    R2 insvc_1.10.0.14; C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe [278600 2015-04-10] (Infonaut)
    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
    R2 mufivoce; C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\jnsf7812.tmp [130560 2015-05-21] () [File not signed]
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
    R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
    R2 rycimizu; C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp [193024 2015-05-21] () [File not signed]
    R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
    R2 shopperz Updater; C:\Program Files\shopperz\Grubb.exe [172392 2015-05-20] ()
    S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
    R2 UpdateCheck; C:\Program Files (x86)\Coupoon\UpdateCheck.exe [53040 2015-05-21] ()
    S2 wbsvc; C:\Program Files\WebBar\wbsvc.exe [37144 2015-02-18] (Web Bar Media)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
    R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-10-02] ()
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-10-02] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-10-02] (AVAST Software)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-10-02] ()
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-11-22] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-10-02] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-10-02] (AVAST Software)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-10-02] ()
    R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-06-25] (AVG Technologies)
    R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [61336 2015-05-20] (Cherimoya Ltd)
    R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-07-06] (Disc Soft Ltd)
    S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-07-12] ()
    R1 innfd_1_10_0_14; C:\Windows\System32\drivers\innfd_1_10_0_14.sys [58224 2015-04-10] (Infonaut)
    R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-05-21] (Malwarebytes Corporation)
    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
    R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
    R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
    S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
    R3 WinRing0_1_2_0; C:\Program Files\OSD\WinRing0x64.sys [14544 2008-07-25] (OpenLibSys.org)
    S3 ALSysIO; \??\C:\Users\user\AppData\Local\Temp\ALSysIO64.sys [X]
    S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
    S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]
    S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-05-21 15:41 - 2015-05-21 15:54 - 00037328 _____ () C:\Users\Phil is fiiiine\Desktop\FRST.txt
    2015-05-21 15:35 - 2015-05-21 15:44 - 00000000 ____D () C:\FRST
    2015-05-21 15:34 - 2015-05-21 15:35 - 02107904 _____ (Farbar) C:\Users\Phil is fiiiine\Desktop\FRST64.exe
    2015-05-21 14:40 - 2015-05-21 14:40 - 00004088 _____ () C:\Windows\System32\Tasks\WxrsUKVLrxa85McoQ4p
    2015-05-21 14:40 - 2015-05-21 14:40 - 00004068 _____ () C:\Windows\System32\Tasks\TZZF0LkcL
    2015-05-21 14:40 - 2015-05-21 14:40 - 00001050 _____ () C:\Windows\Tasks\WxrsUKVLrxa85McoQ4p.job
    2015-05-21 14:39 - 2015-05-21 14:40 - 00001030 _____ () C:\Windows\Tasks\TZZF0LkcL.job
    2015-05-21 14:38 - 2015-05-21 15:38 - 00003158 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.job
    2015-05-21 14:38 - 2015-05-21 14:38 - 00006524 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-7
    2015-05-21 14:38 - 2015-05-21 14:38 - 00006186 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-6
    2015-05-21 14:38 - 2015-05-21 14:38 - 00005496 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5
    2015-05-21 14:38 - 2015-05-21 14:38 - 00003494 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-7.job
    2015-05-21 14:38 - 2015-05-21 14:38 - 00002466 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5_user.job
    2015-05-21 14:38 - 2015-05-21 14:38 - 00002466 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5.job
    2015-05-21 14:37 - 2015-05-21 14:38 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\gmsd_us_598
    2015-05-21 14:37 - 2015-05-21 14:37 - 00007544 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-4
    2015-05-21 14:37 - 2015-05-21 14:37 - 00004514 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-4.job
    2015-05-21 14:36 - 2015-05-21 16:03 - 00000380 _____ () C:\Windows\Tasks\CIMT_S-1-5-21-2075418120-132197448-404415077-1003.job
    2015-05-21 14:36 - 2015-05-21 14:38 - 00000000 ____D () C:\Program Files (x86)\gmsd_us_598
    2015-05-21 14:36 - 2015-05-21 14:36 - 00003416 _____ () C:\Windows\System32\Tasks\CIMT_daily_S-1-5-21-2075418120-132197448-404415077-1003
    2015-05-21 14:36 - 2015-05-21 14:36 - 00003314 _____ () C:\Windows\System32\Tasks\CIMT_S-1-5-21-2075418120-132197448-404415077-1003
    2015-05-21 14:36 - 2015-05-21 14:36 - 00000414 _____ () C:\Windows\Tasks\CIMT_daily_S-1-5-21-2075418120-132197448-404415077-1003.job
    2015-05-21 14:35 - 2015-05-21 15:36 - 00005538 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-6.job
    2015-05-21 14:35 - 2015-05-21 15:34 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
    2015-05-21 14:35 - 2015-05-21 14:41 - 00000994 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
    2015-05-21 14:35 - 2015-05-21 14:40 - 00000990 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
    2015-05-21 14:35 - 2015-05-21 14:36 - 00008566 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-6
    2015-05-21 14:35 - 2015-05-21 14:36 - 00000000 ____D () C:\Program Files (x86)\b03f3eb2-ecf3-4ee9-848a-6804140d73f7
    2015-05-21 14:35 - 2015-05-21 14:35 - 00008568 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-7
    2015-05-21 14:35 - 2015-05-21 14:35 - 00008234 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-11
    2015-05-21 14:35 - 2015-05-21 14:35 - 00007544 _____ () C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-3
    2015-05-21 14:35 - 2015-05-21 14:35 - 00005538 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-7.job
    2015-05-21 14:35 - 2015-05-21 14:35 - 00005204 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-11.job
    2015-05-21 14:35 - 2015-05-21 14:35 - 00004514 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-3.job
    2015-05-21 14:35 - 2015-05-21 14:35 - 00003992 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
    2015-05-21 14:35 - 2015-05-21 14:35 - 00003738 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
    2015-05-21 14:35 - 2015-05-21 14:35 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\globalUpdate
    2015-05-21 14:35 - 2015-05-21 14:35 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
    2015-05-21 14:34 - 2015-05-21 15:34 - 00002132 _____ () C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-10_user.job
    2015-05-21 14:34 - 2015-05-21 14:36 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Games Bot
    2015-05-21 14:34 - 2015-05-21 14:34 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games Bot
    2015-05-21 14:34 - 2015-05-21 14:34 - 00000000 ____D () C:\Program Files (x86)\Games Bot
    2015-05-21 14:32 - 2015-05-21 15:37 - 00000988 _____ () C:\Windows\Tasks\ConsumerInputUpdateTaskMachineUA.job
    2015-05-21 14:32 - 2015-05-21 14:39 - 00000000 ____D () C:\Program Files (x86)\CinemaPlus-3.2cV21.05
    2015-05-21 14:32 - 2015-05-21 14:37 - 00000984 _____ () C:\Windows\Tasks\ConsumerInputUpdateTaskMachineCore.job
    2015-05-21 14:32 - 2015-05-21 14:32 - 00003984 _____ () C:\Windows\System32\Tasks\ConsumerInputUpdateTaskMachineUA
    2015-05-21 14:32 - 2015-05-21 14:32 - 00003732 _____ () C:\Windows\System32\Tasks\ConsumerInputUpdateTaskMachineCore
    2015-05-21 14:32 - 2015-05-21 14:32 - 00003638 _____ () C:\Windows\System32\Tasks\Norwood
    2015-05-21 14:32 - 2015-05-20 10:42 - 00061336 _____ (Cherimoya Ltd) C:\Windows\system32\Drivers\cherimoya.sys
    2015-05-21 14:31 - 2015-05-21 14:32 - 00000000 ____D () C:\Program Files\shopperz
    2015-05-21 14:31 - 2015-05-21 14:31 - 00004114 _____ () C:\Windows\System32\Tasks\Crossbrowse
    2015-05-21 14:31 - 2015-05-21 14:31 - 00002394 _____ () C:\Users\Public\Desktop\Crossbrowse.lnk
    2015-05-21 14:31 - 2015-05-21 14:31 - 00001076 _____ () C:\Windows\Tasks\Crossbrowse.job
    2015-05-21 14:31 - 2015-05-21 14:31 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse
    2015-05-21 14:31 - 2015-05-21 14:31 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Consumer Input
    2015-05-21 14:31 - 2015-05-21 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
    2015-05-21 14:30 - 2015-05-21 14:35 - 00000000 ____D () C:\Program Files (x86)\Consumer Input
    2015-05-21 14:29 - 2015-05-21 14:29 - 00000000 ____D () C:\Program Files (x86)\Crossbrowse
    2015-05-21 14:26 - 2015-05-21 14:26 - 00000000 ____D () C:\ProgramData\FlashBeat
    2015-05-21 14:20 - 2015-05-21 14:22 - 00000000 ____D () C:\Program Files (x86)\Infonaut_1.10.0.14
    2015-05-21 14:20 - 2015-05-21 14:20 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\resxyptz
    2015-05-21 13:51 - 2015-05-21 13:53 - 00688992 ____R (Swearware) C:\Users\Phil is fiiiine\Downloads\dds.scr
    2015-05-21 13:47 - 2015-05-21 15:51 - 00000112 _____ () C:\ProgramData\kS2l7aocg.dat
    2015-05-21 03:10 - 2015-05-21 03:10 - 00000340 _____ () C:\Windows\PFRO.log
    2015-05-21 02:34 - 2015-05-21 02:35 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175686-3210-8032-38C04F373638
    2015-05-21 02:34 - 2015-05-21 02:34 - 00003238 _____ () C:\Users\Phil is fiiiine\Desktop\MiniGet Smart Downloader.lnk
    2015-05-21 02:34 - 2015-05-21 02:34 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175666-3210-8032-38C04F373638
    2015-05-21 02:32 - 2015-05-21 02:32 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175529-3210-8032-38C04F373638
    2015-05-21 02:31 - 2015-05-21 15:44 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638
    2015-05-21 02:31 - 2015-05-21 14:31 - 00000360 _____ () C:\Windows\Tasks\Periodic Synchronize Task.job
    2015-05-21 02:31 - 2015-05-21 14:31 - 00000000 ____D () C:\ProgramData\{c3d16043-85af-478b-c3d1-1604385a810e}
    2015-05-21 02:31 - 2015-05-21 02:31 - 00003292 _____ () C:\Windows\System32\Tasks\Periodic Synchronize Task
    2015-05-21 02:31 - 2015-05-21 02:31 - 00001099 _____ () C:\Users\Phil is fiiiine\Desktop\Optimizer Pro.lnk
    2015-05-21 02:31 - 2015-05-21 02:31 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
    2015-05-21 02:31 - 2015-05-21 02:31 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\ASPackage
    2015-05-21 02:31 - 2015-05-21 02:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
    2015-05-21 02:31 - 2015-05-21 02:31 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 3.92
    2015-05-21 02:31 - 2009-06-10 22:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hp.bak
    2015-05-21 02:30 - 2015-05-21 14:35 - 00000008 _____ () C:\END
    2015-05-21 02:30 - 2015-05-21 02:35 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\WebBar
    2015-05-21 02:30 - 2015-05-21 02:30 - 00003784 _____ () C:\Windows\System32\Tasks\WebBarUpdateTask
    2015-05-21 02:30 - 2015-05-21 02:30 - 00003260 _____ () C:\Windows\System32\Tasks\WebBarLaunchTask
    2015-05-21 02:30 - 2015-05-21 02:30 - 00000000 ____D () C:\ProgramData\InstallSightSDK
    2015-05-21 02:30 - 2015-05-21 02:30 - 00000000 ____D () C:\Program Files\WebBar
    2015-05-21 02:30 - 2015-05-21 02:30 - 00000000 ____D () C:\Program Files (x86)\MaxComputerCleaner_v27.474
    2015-05-21 02:30 - 2015-05-21 02:30 - 00000000 ____D () C:\Program Files (x86)\MaxComputerCleaner
    2015-05-21 02:29 - 2015-05-21 16:02 - 00000000 ____D () C:\ProgramData\abc
    2015-05-21 02:29 - 2015-05-21 02:30 - 00000909 _____ () C:\Windows\SysWOW64\${LOGFILE}
    2015-05-21 02:29 - 2015-05-21 02:29 - 00003184 _____ () C:\Windows\System32\Tasks\Run_Bobby_Browser
    2015-05-21 02:29 - 2015-05-21 02:29 - 00002312 _____ () C:\Users\Phil is fiiiine\Desktop\Wikipedia.lnk
    2015-05-21 02:29 - 2015-05-21 02:29 - 00002312 _____ () C:\Users\Phil is fiiiine\Desktop\Facebook.lnk
    2015-05-21 02:29 - 2015-05-21 02:29 - 00002306 _____ () C:\Users\Phil is fiiiine\Desktop\Youtube.lnk
    2015-05-21 02:29 - 2015-05-21 02:29 - 00002306 _____ () C:\Users\Phil is fiiiine\Desktop\Hotmail.lnk
    2015-05-21 02:29 - 2015-05-21 02:29 - 00002302 _____ () C:\Users\Phil is fiiiine\Desktop\Search.lnk
    2015-05-21 02:29 - 2015-05-21 02:29 - 00002300 _____ () C:\Users\Phil is fiiiine\Desktop\Amazon.lnk
    2015-05-21 02:29 - 2015-05-21 02:29 - 00002262 _____ () C:\Users\Phil is fiiiine\Desktop\BoBrowser.lnk
    2015-05-21 02:29 - 2015-05-21 02:29 - 00000000 ____D () C:\Program Files (x86)\MyPCBU
    2015-05-21 02:28 - 2015-05-21 13:45 - 00000000 ____D () C:\Program Files (x86)\Coupoon
    2015-05-21 02:28 - 2015-05-21 02:29 - 00006762 _____ () C:\claraInstaller.txt
    2015-05-21 02:28 - 2015-05-21 02:29 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\BoBrowser
    2015-05-21 02:28 - 2015-05-21 02:28 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Geckofx
    2015-05-21 02:27 - 2015-05-21 14:38 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\mbot_gb_571
    2015-05-21 02:27 - 2015-05-21 02:28 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\SSN
    2015-05-21 02:27 - 2015-05-21 02:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY
    2015-05-21 02:27 - 2015-05-21 02:27 - 00000000 ____D () C:\Program Files (x86)\mbot_gb_571
    2015-05-21 02:26 - 2015-05-21 02:30 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\Nosibay
    2015-05-21 02:26 - 2015-05-21 02:26 - 00005773 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\Bubble Dock.installation.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 00003796 _____ () C:\Windows\System32\Tasks\Selection Tools Update
    2015-05-21 02:26 - 2015-05-21 02:26 - 00003762 _____ () C:\Windows\System32\Tasks\WindApp Update
    2015-05-21 02:26 - 2015-05-21 02:26 - 00001282 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\Bubble Dock.boostrap.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 00000097 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\WindApp.boostrap.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 00000078 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\WindApp.installation.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 00000078 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\Selection Tools.installation.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\WTools
    2015-05-21 02:26 - 2015-05-21 02:26 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\sursenel
    2015-05-21 02:26 - 2015-05-21 02:26 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\Store
    2015-05-21 02:15 - 2015-05-21 02:15 - 00000000 ____D () C:\Users\Phil is fiiiine\Downloads\Warhammer 40K - 7th Edition - Codex Space Wolves
    2015-05-21 02:14 - 2015-05-21 02:14 - 01563152 _____ (Dummy, Ltd.) C:\Users\Phil is fiiiine\Downloads\warhammer 40k dark eldar codex 7th edition pdf_10924_i10327314_il345.exe
    2015-05-20 20:40 - 2015-05-21 13:41 - 00000168 _____ () C:\Windows\setupact.log
    2015-05-20 20:40 - 2015-05-20 20:40 - 00000000 _____ () C:\Windows\setuperr.log
    2015-05-19 11:51 - 2015-05-19 11:55 - 00000000 ____D () C:\Users\Phil is fiiiine\Downloads\Warhammer 40k - 7th Edition Codex - Grey Knights (New Version)
    2015-05-19 11:43 - 2015-05-19 11:44 - 00000000 ____D () C:\Users\Phil is fiiiine\.ebookreader
    2015-05-19 11:42 - 2015-05-19 11:42 - 17631232 _____ (Icecream Apps ) C:\Users\Phil is fiiiine\Downloads\ebook_reader_setup.exe
    2015-05-19 11:42 - 2015-05-19 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Ebook Reader
    2015-05-19 11:42 - 2015-05-19 11:42 - 00000000 ____D () C:\Program Files (x86)\Icecream Ebook Reader
    2015-05-19 11:15 - 2015-05-19 11:46 - 00000000 ____D () C:\Users\Phil is fiiiine\Downloads\Warhammer 40k - 7th Edition Codex - Necrons
    2015-05-17 02:34 - 2015-05-17 02:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2015-05-16 11:57 - 2015-05-21 14:29 - 00131532 _____ () C:\Windows\WindowsUpdate.log
    2015-05-13 10:32 - 2015-05-13 10:32 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2015-05-05 15:31 - 2015-05-08 21:13 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Razer_Inc
    2015-05-02 17:56 - 2015-05-02 17:56 - 00561248 _____ (Oracle Corporation) C:\Users\Phil is fiiiine\Downloads\jxpiinstall.exe
    2015-05-02 11:38 - 2015-05-02 11:38 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\hott notes 4
    2015-04-27 00:23 - 2015-04-27 00:23 - 00002150 _____ () C:\Users\Phil is fiiiine\Desktop\Shadow Of Mordor.lnk

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2015-05-21 16:02 - 2015-03-20 00:37 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-05-21 15:39 - 2013-07-05 10:26 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-05-21 14:36 - 2013-07-05 11:51 - 00000000 ____D () C:\Program Files (x86)\Adobe
    2015-05-21 14:18 - 2014-07-12 21:19 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2015-05-21 14:01 - 2009-07-14 05:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-05-21 14:01 - 2009-07-14 05:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-05-21 13:46 - 2013-07-05 23:54 - 00000000 ____D () C:\Program Files (x86)\Steam
    2015-05-21 13:45 - 2013-07-06 07:23 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
    2015-05-21 13:42 - 2013-07-05 10:26 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-05-21 13:41 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-05-19 11:43 - 2013-07-05 23:18 - 00000000 ____D () C:\Users\Phil is fiiiine
    2015-05-19 11:39 - 2015-04-10 22:04 - 00027005 _____ () C:\Users\Phil is fiiiine\Downloads\cr3.log
    2015-05-19 11:39 - 2015-04-10 22:04 - 00000000 ____D () C:\Users\Phil is fiiiine\.cr3
    2015-05-17 12:28 - 2015-03-20 00:37 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-05-17 12:28 - 2013-10-11 23:52 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Adobe
    2015-05-17 12:28 - 2013-07-16 05:00 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-05-17 12:28 - 2013-07-16 05:00 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-05-17 12:27 - 2013-07-05 10:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2015-05-16 18:24 - 2015-03-20 04:44 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\.ACEStream
    2015-05-16 17:34 - 2013-07-05 10:26 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-05-16 17:34 - 2013-07-05 10:26 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-05-16 17:24 - 2015-03-22 15:01 - 00000000 ___HD () C:\_acestream_cache_
    2015-05-13 20:33 - 2013-07-05 10:27 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2015-05-13 10:33 - 2013-07-05 11:52 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
    2015-05-13 10:31 - 2013-07-16 05:00 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\Adobe
    2015-05-09 23:23 - 2015-03-19 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
    2015-05-09 23:23 - 2014-04-14 13:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
    2015-05-09 23:23 - 2014-04-14 13:28 - 00000000 ____D () C:\Program Files (x86)\Razer
    2015-05-09 23:23 - 2013-11-17 12:56 - 00000000 ____D () C:\Users\TEMP
    2015-05-09 23:23 - 2013-08-24 05:01 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\DivX
    2015-05-09 23:23 - 2013-08-24 04:55 - 00000000 ____D () C:\Program Files (x86)\DivX
    2015-05-09 23:23 - 2013-08-14 04:36 - 00000000 ____D () C:\Program Files\DivX
    2015-05-09 23:23 - 2013-08-14 04:33 - 00000000 ____D () C:\ProgramData\DivX
    2015-05-09 23:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
    2015-05-09 23:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
    2015-05-09 23:22 - 2015-04-02 05:49 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Popcorn-Time
    2015-05-09 23:22 - 2014-04-14 13:28 - 00000000 ____D () C:\ProgramData\Razer
    2015-05-05 15:33 - 2013-07-18 05:01 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Razer
    2015-05-05 15:31 - 2013-07-18 05:01 - 00000000 ____D () C:\Users\Phil is fiiiine\Documents\Razer
    2015-05-02 17:58 - 2014-11-11 10:46 - 00000000 ____D () C:\Program Files (x86)\Java
    2015-05-02 17:58 - 2014-05-02 22:46 - 00000000 ____D () C:\ProgramData\Oracle
    2015-05-02 17:57 - 2014-11-11 10:46 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
    2015-05-01 23:46 - 2015-03-28 03:48 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
    2015-05-01 20:13 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

    ==================== Files in the root of some directories =======

    2013-07-07 13:11 - 2014-06-25 18:44 - 0003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
    2015-05-21 02:26 - 2015-05-21 02:26 - 0001282 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\Bubble Dock.boostrap.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 0005773 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\Bubble Dock.installation.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 0000078 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\Selection Tools.installation.log
    2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL
    2015-04-20 15:05 - 2015-04-20 15:05 - 1579520 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL.exe
    2015-05-21 02:26 - 2015-05-21 02:26 - 0000097 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\WindApp.boostrap.log
    2015-05-21 02:26 - 2015-05-21 02:26 - 0000078 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\WindApp.installation.log
    2015-04-14 17:28 - 2015-04-14 17:28 - 0004387 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p
    2015-04-20 15:05 - 2015-04-20 15:05 - 1246720 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p.exe
    2013-08-11 17:41 - 2013-08-11 17:55 - 0001261 _____ () C:\ProgramData\hpzinstall.log
    2015-05-21 13:47 - 2015-05-21 15:51 - 0000112 _____ () C:\ProgramData\kS2l7aocg.dat
    2014-01-18 07:00 - 2014-01-18 07:00 - 0000040 _____ () C:\ProgramData\ra3.ini

    Files to move or delete:
    ====================
    C:\ProgramData\kS2l7aocg.dat


    Some content of TEMP:
    ====================
    C:\Users\Phil is fiiiine\AppData\Local\Temp\1737.exe
    C:\Users\Phil is fiiiine\AppData\Local\Temp\4851.exe
    C:\Users\Phil is fiiiine\AppData\Local\Temp\optprosetup.exe
    C:\Users\Phil is fiiiine\AppData\Local\Temp\setup.exe
    C:\Users\Phil is fiiiine\AppData\Local\Temp\warhammer 40k dark eldar codex 7th edition pdf__10924_i1520102218_il794181.exe
    C:\Users\user\AppData\Local\Temp\drm_dialogs.dll
    C:\Users\user\AppData\Local\Temp\drm_dyndata_7380011.dll
    C:\Users\user\AppData\Local\Temp\eauninstall.exe
    C:\Users\user\AppData\Local\Temp\The Sims 2 Double Deluxe_uninst.exe


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-05-14 14:33

    ==================== End Of Log ============================
     
  3. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-05-2015
    Ran by Phil is fiiiine at 2015-05-21 16:04:29
    Running from C:\Users\Phil is fiiiine\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-2075418120-132197448-404415077-500 - Administrator - Disabled)
    Guest (S-1-5-21-2075418120-132197448-404415077-501 - Limited - Disabled)
    Phil is fiiiine (S-1-5-21-2075418120-132197448-404415077-1003 - Administrator - Enabled) => C:\Users\Phil is fiiiine
    user (S-1-5-21-2075418120-132197448-404415077-1001 - Administrator - Enabled) => C:\Users\user

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Microsoft Security Essentials (Enabled - Up to date) {3F839487-C7A2-C958-E30C-E2825BA31FB5}
    AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    AS: Microsoft Security Essentials (Enabled - Up to date) {84E27563-E198-C6D6-D9BC-D9F020245508}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
    AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
    Ace Stream Media 3.0.11 (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\AceStream) (Version: 3.0.11 - Ace Stream Media) <==== ATTENTION!
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
    Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
    Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
    Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
    Adobe Photoshop Elements 5.0 (HKLM-x32\...\Adobe Photoshop Elements 5) (Version: 5.0 - Adobe Systems Inc.)
    Adobe Reader XI (11.0.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
    Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
    Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
    AIO_CDA_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    AIO_CDA_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    AIO_Scan (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
    AnySend (HKLM-x32\...\ASPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATTENTION!
    ArtRage 2.2 (HKLM-x32\...\ArtRage_is1) (Version: - Ambient Design Ltd)
    ArtRage 4 (HKLM-x32\...\ArtRage 4 4.0.2.1) (Version: 4.0.2.1 - Ambient Design)
    ArtRage 4 (x32 Version: 4.0.2.1 - Ambient Design) Hidden
    ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.11 Beta2 - Michael Tippach)
    avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)
    Bamboo Link (HKLM-x32\...\InstallShield_{947C41AC-5926-41D6-9139-D41ABE9173AE}) (Version: 1.0.2008.0530 - Invu)
    Bamboo Link (x32 Version: 1.0.2008.0530 - Invu) Hidden
    BoBrowser (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\BoBrowser) (Version: 36.0.1985.136 - BoBrowser) <==== ATTENTION
    BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
    C3100 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    c3100_Help (x32 Version: 82.0.256.000 - Hewlett-Packard) Hidden
    CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
    CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version: - dvd8n)
    CinemaPlus-3.2cV21.05 (HKLM-x32\...\CinemaPlus-3.2cV21.05) (Version: 1.36.01.22 - Cinema PlusV21.05) <==== ATTENTION
    Command Center (HKLM-x32\...\InstallShield_{AE1E0DFB-A3D9-451C-AA7F-46FD390400D4}) (Version: 2.5.54.0 - Alienware Corp.)
    Command Center (Version: 2.5.54.0 - Alienware Corp.) Hidden
    Commercial Extension Cable (HKLM-x32\...\wincheck) (Version: 1.0.0.0 - Commercial Extension Cable)
    Consumer Input (remove only) (HKLM-x32\...\Consumer Input Installer) (Version: - Compete Inc.) <==== ATTENTION
    Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
    Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
    Coupoon version 1.0 (HKLM-x32\...\{49F8B4F8-0CD4-4BE4-A9E8-B13A071F7C90}_is1) (Version: 1.0 - Coupoon) <==== ATTENTION
    CPUID HWMonitor 1.23 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
    Crossbrowse (HKLM-x32\...\Crossbrowse) (Version: 39.6.2171.95 - The Crossbrowse Authors) <==== ATTENTION!
    DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0335 - Disc Soft Ltd)
    Dark Fall - Lights Out - Directors Cut Version 6.0 (HKLM-x32\...\Dark Fall - Lights Out - Directors Cut_is1) (Version: 6.0 - Darkling Room)
    Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
    Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 1.40.05 - Creative Technology Ltd)
    Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
    DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
    DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
    DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
    Dolphin x86 (HKLM-x32\...\Dolphin x86) (Version: 4.0.2 - Dolphin Development Team)
    Double-sided Launch (HKLM-x32\...\ConvertAd) (Version: 1.0.0.0 - Double-sided Launch) <==== ATTENTION
    f.lux (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Flux) (Version: - )
    Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
    FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
    FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
    Games Bot (HKLM-x32\...\Games Bot) (Version: 161.0.0.578 - CLICK YES BELOW LP)
    GamesDesktop 025.598 (HKLM-x32\...\gmsd_us_598_is1) (Version: - GAMESDESKTOP) <==== ATTENTION
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
    GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.220 - SurfRight B.V.)
    hott notes 4 (HKLM-x32\...\hott notes 4) (Version: 4.1 - Joel Riley)
    HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
    HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
    HP Photosmart All-In-One Driver Software 13.0 Rel. A (HKLM\...\{17016DA1-F040-4032-BD36-34DD317BC9D5}) (Version: 13.0 - HP)
    HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
    HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
    HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
    HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
    HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
    HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
    HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
    HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Icecream Ebook Reader version 1.60 (HKLM-x32\...\{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1) (Version: 1.60 - Icecream Apps)
    IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line)
    Infonaut 1.10.0.14 (HKLM-x32\...\Infonaut_1.10.0.14) (Version: 1.10.0.14 - Infonaut)
    Intel(R) Network Connections 14.8.43.0 (HKLM\...\PROSetDX) (Version: 14.8.43.0 - Intel)
    Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
    JBidwatcher 2.5.5 (HKLM-x32\...\JBidwatcher_0) (Version: 2.5.5 - CyberFOX Software, Inc)
    League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
    League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
    Live! Cam Avatar Creator (HKLM-x32\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.3009.1 - Creative Technology Ltd)
    MaintenanceService 1.0.0 (HKLM-x32\...\zz.474.mcc) (Version: 1.0.0 - CSDI)
    Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
    MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
    Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE (HKLM-x32\...\{F112F66E-25CA-42DD-983C-6118EB38F606}) (Version: 3.0.89.0 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
    Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.2.223.1 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
    Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
    Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
    Middle Earth SOM GPR Repack version 1.0.0.0 (HKLM-x32\...\Middle Earth SOM GPR Repack_is1) (Version: 1.0.0.0 - Warner Bros. Interactive)
    Mozilla Firefox 38.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 en-US)) (Version: 38.0.1 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
    MyBestOffersToday 013.571 (HKLM-x32\...\mbot_gb_571_is1) (Version: - MYBESTOFFERSTODAY) <==== ATTENTION
    MyPCBU version 2.25 (HKLM-x32\...\{7D7D6742-5B49-4454-9E9B-748E731E741A}_is1) (Version: 2.25 - )
    Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
    OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
    OpenAL (HKLM-x32\...\OpenAL) (Version: - )
    OpenOffice 4.0.1 (HKLM-x32\...\{24B89186-2A56-4D28-B930-6F4FCF224E2F}) (Version: 4.01.9714 - Apache Software Foundation)
    Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.3.1.7 - PCUtilities Software Limited) <==== ATTENTION
    PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
    Popcorn Time (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Popcorn Time) (Version: - Popcorn Official)
    qBittorrent 3.1.12 (HKLM-x32\...\qBittorrent) (Version: 3.1.12 - The qBittorrent project)
    Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
    RollerCoaster Tycoon 3 Platinum (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - Atari)
    Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
    Selection Tools (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Selection Tools) (Version: - WTools) <==== ATTENTION
    Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
    shopperz 2.0.0.461 (HKLM\...\{2395B860-45E4-42fd-96E6-50BA597C1C42}_is1) (Version: 2.0.0.461 - shopperz)
    SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
    SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
    Space Bar System (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Space Bar System)
    SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
    SSN (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Save Serp Now) (Version: 1.05 - SSN Corp)
    Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
    Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
    sursenel (HKLM-x32\...\{7d0ff442-6ee9-4afb-74ec-015a61fc9fd0}) (Version: 1.0.0 - sidecom) <==== ATTENTION!
    swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
    System Requirements Lab (HKLM-x32\...\{A92D0DBB-834A-4CAD-A434-F2232C692516}) (Version: 6.1.4.0 - Husdawg, LLC)
    Tablet (HKLM-x32\...\Tablet Driver) (Version: - Wacom Technology Corp.)
    The Sims 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.797.20 - Electronic Arts)
    The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.63.5 - Electronic Arts)
    The Sims™ 3 Ambitions (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
    The Sims™ 3 Into the Future (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)
    The Sims™ 3 Island Paradise (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
    The Sims™ 3 Pets (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
    The Sims™ 3 World Adventures (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
    Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
    TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
    TreeSize Professional 5.3.1 (HKLM-x32\...\TreeSize Professional_is1) (Version: 5.3.1 - JAM Software)
    UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
    VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
    Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.2-1 - Wacom Technology Corp.)
    Warhammer® 40,000™: Dawn of War® II - Chaos Rising™ (HKLM-x32\...\Steam App 20570) (Version: - Relic Entertainment)
    Web Bar 2.0.5527.25142 (HKLM\...\{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1) (Version: 2.0.5527.25142 - Web Bar Media) <==== ATTENTION!
    WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
    WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.2 - Wacom Technology Corp.)
    WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.2 - Wacom Technology Corp.)
    WindApp (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\WindApp) (Version: - Store) <==== ATTENTION
    Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
    WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
    yWriter5 (HKLM-x32\...\yWriter5_is1) (Version: - Spacejock Software)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-2075418120-132197448-404415077-1003_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InprocServer32 -> C:\Users\Phil is fiiiine\AppData\Roaming\sursenel\ticyver.dll () <==== ATTENTION

    ==================== Restore Points =========================

    14-05-2015 12:32:16 Windows Update
    19-05-2015 10:54:59 Windows Update

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {01B86E5A-59AD-44CA-B928-B54DE6A6D54B} - System32\Tasks\WxrsUKVLrxa85McoQ4p => C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p.exe [2015-04-20] () <==== ATTENTION
    Task: {03789C6D-844D-43A6-A685-569119BF696E} - System32\Tasks\{291652F2-BA7A-468F-8DDE-D33B529A8CCC} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {0816E0C7-B458-4615-AEA1-FDAAFD5BE80D} - System32\Tasks\WebBarUpdateTask => C:\Program Files\WebBar\wbsvc.exe [2015-02-18] (Web Bar Media)
    Task: {0B1FAE48-631D-46BA-8AA6-7443A9866B54} - System32\Tasks\AdobeAAMUpdater-1.0-M17X-user => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
    Task: {0E05AD3E-2A21-40B8-A785-67AAF38C2620} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-3 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-3.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {12FDB8A6-13E5-4844-8873-162BF068DC65} - System32\Tasks\{4638D490-2275-465C-A472-4787BB453518} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {17C9A8CE-B0DA-4C96-8874-0105454D8FB9} - \Optimizer Pro Schedule No Task File <==== ATTENTION
    Task: {1E0F70A6-1544-4CF3-80F7-02D11D77491D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-10-02] (AVAST Software)
    Task: {21EC4254-A11F-4C29-86DB-09D2EF63E715} - System32\Tasks\CIMT_S-1-5-21-2075418120-132197448-404415077-1003 => C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe [2015-04-16] () <==== ATTENTION
    Task: {24B890F9-5A94-49E3-BFBB-49A526DD0189} - System32\Tasks\{94327FFB-F200-4595-9224-200DB61D98BB} => pcalua.exe -a "C:\Users\user\Documents\EA Games\The Sims 2 extras\MTS\Hacks\MaKeSound.exe" -d "C:\Users\user\Documents\EA Games\The Sims 2 extras\MTS\Hacks"
    Task: {24EC68FF-CBA7-4493-A364-E9B0D04FA261} - System32\Tasks\Norwood => C:\Program Files\shopperz\Cote.bat [2015-05-20] ()
    Task: {359B2F49-9E24-4B3B-88E3-844E33FB9464} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-05] (Google Inc.)
    Task: {3C10899E-71D8-4ABC-BB30-78D6179BA9CE} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe
    Task: {3C595593-7E33-44D4-A3D4-3CA4631B74E3} - System32\Tasks\{CBDE6CD8-3A0B-42D8-9EEA-BC40BCB75B33} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {3C71FD55-DAE5-4562-B315-51F597FC3EF0} - System32\Tasks\{B3D7F787-3543-48FD-BCB5-8350645CF254} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {40774CE8-3B3D-40DB-9DFE-D5D3E9B3DAB8} - System32\Tasks\{A5995E6D-35AF-4428-9145-3B0A22443D6B} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {42216EC1-63B4-49F1-BD87-5C83A289174E} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-6 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {5D26B8D0-A37A-4F6B-8F0E-13D4180064E1} - System32\Tasks\TZZF0LkcL => C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL.exe [2015-04-20] () <==== ATTENTION
    Task: {61BB2C02-EC37-4924-BE54-9E99A33FE9A1} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-7 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-7.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {74FDAF05-0359-47DA-9AF4-518134288882} - System32\Tasks\Run_Bobby_Browser => C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\bobrowser.exe [2014-11-19] (The BoBrowser Authors) <==== ATTENTION
    Task: {86911927-00C5-4895-9559-A962002BB851} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-6 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-6.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {86D1167F-ABFC-4F22-9FBE-0FC2F96B4436} - System32\Tasks\WebBarLaunchTask => C:\Program Files\WebBar\wbsvc.exe [2015-02-18] (Web Bar Media)
    Task: {8899AB79-A63B-4B05-B82C-656AE2F66C36} - System32\Tasks\ConsumerInputUpdateTaskMachineUA => C:\Program Files (x86)\Consumer Input\Update\ConsumerInputUpdate.exe [2015-05-21] (ConsumerInput) <==== ATTENTION
    Task: {88AD9682-D7FE-47BF-8CA5-7B532CE01783} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
    Task: {8D9A78B7-8DE4-4C14-BA76-824A49154015} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-05-21] (globalUpdate) <==== ATTENTION
    Task: {8EE915EB-8869-414F-A935-D3E24C3ED69D} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-7 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-7.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {9099AD5F-BD87-4C73-AC73-EF012669C265} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-17] (Adobe Systems Incorporated)
    Task: {9682C460-7112-480E-834E-F85A902CF83A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
    Task: {972EAC2D-C2E8-40F4-B295-C480D1145BAB} - System32\Tasks\WindApp Update => C:\Users\Phil is fiiiine\AppData\Roaming\Store\WindApp\WindApp Update.exe [2015-03-20] (Nosibay) <==== ATTENTION
    Task: {9EB4BF07-41B2-4829-8BEB-D4F8EC1191C1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-05] (Google Inc.)
    Task: {A5317ECA-F64D-48CA-A61D-62EB45C81959} - System32\Tasks\{1FD0BD35-C80D-44E4-9BAF-C159A6BFE4BA} => pcalua.exe -a E:\dell\drivers\R240771\R240771\OSD_Setup.exe -d E:\dell\drivers\R240771\R240771
    Task: {A9BA75A4-5F92-4647-990C-09EA92A31940} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe [2015-05-21] () <==== ATTENTION
    Task: {AE726E2C-0C8E-46E7-9AEE-45639913F976} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-4 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-4.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {B7887CB7-B018-43D7-B39E-6361FD33038E} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-11 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-11.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {B831D23F-1668-410D-A374-8A43DCC7CF97} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-10_user => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-10.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {BA86FF2C-6C17-4A97-9209-19CF1A8A4573} - System32\Tasks\{481D234E-47C0-4466-8EC4-3223545972E9} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {BC786170-CCB8-427D-96C5-E77B40715428} - System32\Tasks\ConsumerInputUpdateTaskMachineCore => C:\Program Files (x86)\Consumer Input\Update\ConsumerInputUpdate.exe [2015-05-21] (ConsumerInput) <==== ATTENTION
    Task: {C376D369-1CA3-41C8-B9D7-C1E4F20F4DB4} - System32\Tasks\{352167B4-6C4C-4BF9-B81D-DAE2F9701CE5} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {D6B4066D-3B4A-4C23-BC63-B0C88CDE1414} - System32\Tasks\{6D3222E2-1F7C-4DBD-97DE-2BC4CEA455E4} => C:\Riot Games\League of Legends\lol.launcher.exe [2014-01-21] ()
    Task: {D74AAA9F-6B13-4823-8090-C6F5F4BF0BAD} - System32\Tasks\{22F8D798-1B84-40C0-A73E-3C5D62F56FBD} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {D9B3F192-9877-49F0-AD27-F208259471D5} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5 => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-5.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {E379BD98-4DD9-4E9F-A772-77CFE42F072B} - System32\Tasks\{48D631BD-BCEE-4405-85C9-1109FA49B048} => pcalua.exe -a "C:\Program Files (x86)\Electronic Arts\The Sims 4\__Installer\vp6\vp6install.exe" -d "C:\Program Files (x86)\Electronic Arts\The Sims 4\__Installer\vp6"
    Task: {E5983729-CA0A-4266-B387-4C79C4F170D2} - System32\Tasks\Selection Tools Update => C:\Users\Phil is fiiiine\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe [2015-04-09] (Nosibay)
    Task: {E90713C0-D362-4A07-873B-66D26556BFBC} - System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5_user => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-5.exe [2015-05-21] (Cinema PlusV21.05) <==== ATTENTION
    Task: {EA74B9CD-DFF3-45C5-A7F2-5804C58DB95E} - System32\Tasks\Periodic Synchronize Task => c:\programdata\{c3d16043-85af-478b-c3d1-1604385a810e}\hqghumeaylnlf.exe [2014-05-21] (PC Utilities Software Limited)
    Task: {F326A216-3604-4D82-94D3-206F9A112F2E} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-05-21] (globalUpdate) <==== ATTENTION
    Task: {F6E38531-946C-45F8-94C4-DD66FC0C2313} - System32\Tasks\CIMT_daily_S-1-5-21-2075418120-132197448-404415077-1003 => C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe [2015-04-16] () <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-10.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-11.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-11.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-3.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-3.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-4.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-4.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-5.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-6.exe <==== ATTENTION
    Task: C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-7.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\CIMT_daily_S-1-5-21-2075418120-132197448-404415077-1003.job => C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe <==== ATTENTION
    Task: C:\Windows\Tasks\CIMT_S-1-5-21-2075418120-132197448-404415077-1003.job => C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe <==== ATTENTION
    Task: C:\Windows\Tasks\ConsumerInputUpdateTaskMachineCore.job => C:\Program Files (x86)\Consumer Input\Update\ConsumerInputUpdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\ConsumerInputUpdateTaskMachineUA.job => C:\Program Files (x86)\Consumer Input\Update\ConsumerInputUpdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\Periodic Synchronize Task.job => c:\programdata\{c3d16043-85af-478b-c3d1-1604385a810e}\hqghumeaylnlf.exe
    Task: C:\Windows\Tasks\TZZF0LkcL.job => C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL.exe <==== ATTENTION
    Task: C:\Windows\Tasks\WxrsUKVLrxa85McoQ4p.job => C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p.exe <==== ATTENTION
     
  4. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    ==================== Loaded Modules (Whitelisted) ==============

    2015-05-21 14:32 - 2015-05-20 17:21 - 00295784 _____ () C:\Program Files\shopperz\Sturgeon64.dll
    2015-05-11 16:09 - 2015-05-11 16:09 - 00168960 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\sursenel\ticyver.dll
    2006-12-22 07:31 - 2006-12-22 07:31 - 00108712 _____ () C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    2013-05-18 11:35 - 2009-02-20 13:13 - 00013312 _____ () C:\Program Files\OSD\Service1.exe
    2015-05-21 02:30 - 2015-02-13 15:37 - 00808960 _____ () C:\Program Files\WebBar\2.0.5527.25142\ISightSDK_x64.dll
    2015-05-21 02:34 - 2015-05-21 02:34 - 00291840 _____ () C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175666-3210-8032-38C04F373638\cnsq572E.tmp
    2015-05-21 02:31 - 2015-05-21 02:31 - 00130560 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\jnsf7812.tmp
    2015-05-21 13:43 - 2015-05-21 13:43 - 00003072 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\isdk3j2wYk7T\ISightHost.exe
    2015-05-21 13:43 - 2015-02-13 15:37 - 00808960 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\isdk3j2wYk7T\ISightSDK.DLL
    2015-05-21 02:31 - 2015-05-21 02:31 - 00193024 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp
    2015-05-21 02:28 - 2015-05-21 13:44 - 00053040 _____ () C:\Program Files (x86)\Coupoon\UpdateCheck.exe
    2015-05-21 02:27 - 2015-05-18 14:55 - 03287496 _____ () C:\Users\Phil is fiiiine\AppData\Local\mbot_gb_571\upmbot_gb_571.exe
    2013-09-21 21:34 - 2012-12-11 13:07 - 01184640 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
    2015-02-28 02:23 - 2015-02-28 02:23 - 00022824 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
    2014-11-21 13:53 - 2014-11-21 13:53 - 00033792 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\ssn\ssn.exe
    2014-01-10 06:26 - 2014-01-10 06:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    2015-05-21 02:27 - 2015-05-18 14:55 - 03982792 _____ () C:\Program Files (x86)\mbot_gb_571\mbot_gb_571.exe
    2015-05-21 00:50 - 2015-05-21 00:50 - 00273408 _____ () C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175529-3210-8032-38C04F373638\bnsp3970.exe
    2015-05-21 12:53 - 2015-05-21 12:53 - 00274654 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\nso9253.tmp
    2015-05-21 14:31 - 2015-05-20 17:21 - 00283496 _____ () C:\Program Files\shopperz\Anneliese.exe
    2015-05-21 14:31 - 2015-05-20 17:21 - 00431976 _____ () C:\Program Files\shopperz\Brito.exe
    2015-05-21 14:32 - 2015-05-20 17:21 - 01447272 _____ () C:\Program Files\shopperz\csrcc.exe
    2015-05-21 14:31 - 2015-05-20 17:21 - 00462696 _____ () C:\Program Files\shopperz\Brito64.exe
    2015-05-21 14:32 - 2015-05-20 17:21 - 00629608 _____ () C:\Program Files\shopperz\Winfrey64.dll
    2015-05-21 14:32 - 2015-05-20 17:21 - 00274280 _____ () C:\Program Files\shopperz\Ivonne64.dll
    2015-05-21 14:31 - 2015-05-20 17:21 - 00335208 _____ () C:\Program Files\shopperz\Earlene64.dll
    2015-05-21 14:32 - 2015-05-20 17:21 - 00172392 _____ () C:\Program Files\shopperz\Grubb.exe
    2015-05-21 14:36 - 2015-05-18 15:11 - 03982280 _____ () C:\Program Files (x86)\gmsd_us_598\gmsd_us_598.exe
    2015-05-21 14:37 - 2015-05-18 15:11 - 03297736 _____ () C:\Users\Phil is fiiiine\AppData\Local\gmsd_us_598\upgmsd_us_598.exe
    2015-04-16 15:09 - 2015-04-16 15:09 - 01179168 _____ () C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe
    2015-05-21 14:48 - 2015-05-21 14:49 - 00233596 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\nsf645F.tmp
    2010-04-04 19:45 - 2010-04-04 19:45 - 00094536 _____ () C:\Windows\system32\FAIEExtension.DLL
    2014-10-02 16:51 - 2014-10-02 16:51 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
    2015-05-21 00:42 - 2015-05-21 00:42 - 02929664 _____ () C:\Program Files\AVAST Software\Avast\defs\15052001\algo.dll
    2015-05-21 13:42 - 2015-05-21 13:42 - 02929664 _____ () C:\Program Files\AVAST Software\Avast\defs\15052100\algo.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00037712 _____ () C:\Windows\assembly\GAC_MSIL\Alienlabs.CommandCenter.Tools\1.0.92.0__bebb3c8816410241\Alienlabs.CommandCenter.Tools.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00075056 _____ () C:\Windows\assembly\GAC_MSIL\AlienLabsTools\1.0.92.0__bebb3c8816410241\AlienLabsTools.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00025408 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.DeviceDiscovery\1.0.92.0__bebb3c8816410241\AlienFX.DeviceDiscovery.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00011584 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication\1.0.92.0__bebb3c8816410241\AlienFX.Communication.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00024904 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.XPS\1.0.92.0__bebb3c8816410241\AlienFX.Communication.XPS.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00028496 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x516\1.0.92.0__bebb3c8816410241\AlienFX.Communication.PID0x516.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00027984 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x515\1.0.92.0__bebb3c8816410241\AlienFX.Communication.PID0x515.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00036688 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x514\1.0.92.0__bebb3c8816410241\AlienFX.Communication.PID0x514.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00019792 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x513\1.0.92.0__bebb3c8816410241\AlienFX.Communication.PID0x513.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00036688 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x512\1.0.92.0__bebb3c8816410241\AlienFX.Communication.PID0x512.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00037200 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.PID0x511\1.0.92.0__bebb3c8816410241\AlienFX.Communication.PID0x511.dll
    2013-05-18 11:29 - 2013-05-18 11:29 - 00017224 _____ () C:\Windows\assembly\GAC_MSIL\AlienFX.Communication.Core\1.0.92.0__bebb3c8816410241\AlienFX.Communication.Core.dll
    2011-06-12 14:09 - 2011-06-12 14:09 - 00038400 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\_socket.pyd
    2011-06-12 14:09 - 2011-06-12 14:09 - 00720896 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\_ssl.pyd
    2014-01-23 12:37 - 2014-01-23 12:37 - 00036352 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\_psutil_mswindows.pyd
    2012-02-07 17:37 - 2012-02-07 17:37 - 00098816 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\win32api.pyd
    2012-02-07 17:35 - 2012-02-07 17:35 - 00110080 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\pywintypes27.dll
    2012-02-07 17:38 - 2012-02-07 17:38 - 00358912 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\pythoncom27.dll
    2012-02-07 17:42 - 2012-02-07 17:42 - 00266240 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\win32com.shell.shell.pyd
    2011-06-12 14:06 - 2011-06-12 14:06 - 00287232 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\_hashlib.pyd
    2011-06-12 14:06 - 2011-06-12 14:06 - 00106496 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\_ctypes.pyd
    2010-10-10 23:23 - 2010-10-10 23:23 - 00723968 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\apsw.pyd
    2011-01-18 22:56 - 2011-01-18 22:56 - 00334336 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\M2Crypto.__m2crypto.pyd
    2011-06-12 14:06 - 2011-06-12 14:06 - 00011776 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\select.pyd
    2011-06-12 14:06 - 2011-06-12 14:06 - 00152576 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\lib\pyexpat.pyd
    2014-04-21 21:00 - 2014-04-21 21:00 - 03378688 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\ssn\mozjs.dll
    2015-05-11 16:08 - 2015-05-11 16:08 - 00140800 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\sursenel\encecal.dll
    2013-05-18 11:35 - 2009-08-13 18:56 - 00049152 _____ () C:\Program Files\OSD\dllTest.dll
    2014-10-02 16:51 - 2014-10-02 16:51 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
    2014-01-10 06:28 - 2014-01-10 06:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
    2015-05-21 14:32 - 2015-05-20 17:21 - 00289640 _____ () C:\Program Files\shopperz\Sturgeon.dll
    2015-05-21 14:32 - 2015-05-20 17:21 - 00618344 _____ () C:\Program Files\shopperz\Winfrey.dll
    2015-05-21 14:32 - 2015-05-20 17:21 - 00239976 _____ () C:\Program Files\shopperz\Ivonne.dll
    2015-05-21 14:31 - 2015-05-20 17:21 - 00310120 _____ () C:\Program Files\shopperz\Earlene32.dll
    2015-05-21 14:36 - 2015-05-21 14:36 - 00194640 _____ () C:\Program Files (x86)\CinemaPlus-3.2cV21.05\3c42222d-7b75-44d7-b677-e4c89c7c3e5e.dll
    2015-05-13 20:33 - 2015-05-05 05:06 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libglesv2.dll
    2015-05-13 20:33 - 2015-05-05 05:06 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\libegl.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00109160 _____ () C:\Program Files (x86)\Games Bot\Modules\Base.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00041576 _____ () C:\Program Files (x86)\Games Bot\Modules\inws.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00058984 _____ () C:\Program Files (x86)\Games Bot\Modules\ups.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00039528 _____ () C:\Program Files (x86)\Games Bot\Modules\alzm.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00117352 _____ () C:\Program Files (x86)\Games Bot\Modules\brs.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00090728 _____ () C:\Program Files (x86)\Games Bot\Modules\cmd.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00096872 _____ () C:\Program Files (x86)\Games Bot\Modules\sipc.dll
    2015-04-22 13:02 - 2015-04-22 13:02 - 00056424 _____ () C:\Program Files (x86)\Games Bot\Modules\wdm.dll
    2015-05-21 14:50 - 2015-05-21 14:50 - 00011264 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\nsqFD92.tmp\System.dll
    2015-05-21 14:50 - 2015-05-21 14:50 - 00009728 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\nsqFD92.tmp\nsDialogs.dll
    2015-05-21 14:50 - 2015-05-21 14:50 - 00025088 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\nsqFD92.tmp\registry.dll
    2015-05-21 14:50 - 2015-05-21 14:50 - 00067584 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\nsqFD92.tmp\Math.dll
    2015-05-21 14:52 - 2015-05-21 14:52 - 00069120 _____ () C:\Users\Phil is fiiiine\AppData\Local\Temp\nsqFD92.tmp\nsPage_LoadOffer.dll
    2015-05-21 15:44 - 2015-05-21 15:44 - 00188416 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nslFF40.tmp
    2015-05-21 14:36 - 2015-03-26 15:13 - 01091584 _____ () C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\libglesv2.dll
    2015-05-21 14:36 - 2015-03-26 15:13 - 00167936 _____ () C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\libEGL.dll
    2015-05-21 14:36 - 2015-03-26 15:39 - 08569856 _____ () C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\pdf.dll
    2015-05-21 14:36 - 2015-03-26 15:18 - 00324608 _____ () C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\ppGoogleNaClPluginChrome.dll
    2015-05-21 14:36 - 2015-03-26 15:14 - 00880128 _____ () C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\ffmpegsumo.dll
    2015-05-21 14:36 - 2015-03-11 12:39 - 00303616 _____ () C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\libexif.dll
    2015-05-21 14:36 - 2014-09-23 05:07 - 14891848 _____ () C:\Users\Phil is fiiiine\AppData\Local\Games Bot\Explore\PepperFlash\pepflashplayer.dll
    2015-05-21 15:56 - 2010-11-20 13:17 - 00314368 _____ () C:\Windows\SysWOW64\config\systemprofile\sndvol.exe

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51

    ==================== Safe Mode (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, the associated entry will be removed from the registry.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-2075418120-132197448-404415077-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
    DNS Servers: 192.168.1.254

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)

    MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
    MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
    MSCONFIG\startupreg: DellSystemDetect => C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
    MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
    MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    FirewallRules: [{B257B29E-E9A3-4189-BBCB-DB42838247EE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{C0C60CB2-EEB3-450B-AFC8-9BA725B34B9B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{4359DC49-FA7C-4ADA-8396-9397C753D3D0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War 2\DOW2.exe
    FirewallRules: [{E543EFEC-A878-4631-8A5A-A091BCFFDB18}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War 2\DOW2.exe
    FirewallRules: [TCP Query User{A2762392-37BC-4F5C-9676-2A3841390015}C:\users\phil is fiiiine\desktop\utorrent.exe] => (Allow) C:\users\phil is fiiiine\desktop\utorrent.exe
    FirewallRules: [UDP Query User{DB4F295F-5D45-48B4-A5AF-B45F878D1BDD}C:\users\phil is fiiiine\desktop\utorrent.exe] => (Allow) C:\users\phil is fiiiine\desktop\utorrent.exe
    FirewallRules: [{2B43A306-2DF9-41C1-ACEB-E03A547E8AB0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
    FirewallRules: [{949EFE00-9F55-431A-862E-F4381E6FD0AE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
    FirewallRules: [{3C72C6AC-240E-4133-82EF-ACFFB9CE706B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
    FirewallRules: [{5A9E5F51-EA5E-45AD-8D76-F7067BF34252}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
    FirewallRules: [{B1297B7A-AD5C-4466-9F22-A423046B6F56}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
    FirewallRules: [{04941184-54DE-4731-9E91-E1CFF6097B4A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
    FirewallRules: [{35CC0CE5-BFCF-4FC5-B861-C8727586F0F0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
    FirewallRules: [{6374FC4A-3468-47D7-A3FF-EBA96D3D6C08}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
    FirewallRules: [{D146FD03-168D-4509-B0A0-CE430343E004}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
    FirewallRules: [{860EF8A8-7C51-411C-AF54-54C785023D4F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
    FirewallRules: [{4F9439DA-AE39-4623-BFE0-31C175B1CC30}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
    FirewallRules: [{35860BE0-4B34-4F48-B1D0-0C93EDA6DDE9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
    FirewallRules: [{695CA903-EBEF-4C5B-AC21-6553CBFF300F}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
    FirewallRules: [{8E072FD2-AE33-4FA2-804E-D2C83E5223F2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
    FirewallRules: [{B98D8455-13BE-4A48-9F86-BD3921BD4CC6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
    FirewallRules: [{530D1F3E-3BB2-4689-AD1D-D5A56ACF869B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
    FirewallRules: [{D32D64D3-B5A6-4C6B-B86E-2D69C94B1F24}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
    FirewallRules: [{AE24A9D1-8DB0-4EEB-AF12-345646D1AB80}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
    FirewallRules: [{6B09A686-43D4-4C6C-ACCF-5D824542F47A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
    FirewallRules: [{979052B6-A870-4503-AF07-A42F43596C48}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
    FirewallRules: [{DB6E953A-C098-42D4-8D26-81DC4F5321CA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
    FirewallRules: [{106904F8-55C8-47EF-AEA2-DD3EC4607A33}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
    FirewallRules: [{42B13E17-BE4B-441B-9E1F-0DC291815590}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
    FirewallRules: [{4FE12339-CE48-45EE-9264-C1FADBEF45F5}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
    FirewallRules: [{374B220B-A1F7-4074-BCD7-9CF9FE9C973E}] => (Allow) C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [{6D006888-0DA6-4BF6-A9AA-724C972B3526}] => (Allow) C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [TCP Query User{1C67466C-6C5A-4429-8645-FB8C6D0AEB10}C:\users\user\downloads\utorrent.exe] => (Block) C:\users\user\downloads\utorrent.exe
    FirewallRules: [UDP Query User{7F86125E-1138-4F1F-BE1A-D7B00BD18624}C:\users\user\downloads\utorrent.exe] => (Block) C:\users\user\downloads\utorrent.exe
    FirewallRules: [TCP Query User{9868CEBD-36C2-4BD1-B7E2-8EE6CD91557C}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
    FirewallRules: [UDP Query User{5D03D997-C70C-497B-ACFE-E86613A52188}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
    FirewallRules: [{C3065CC7-BCB5-4333-991C-4471F5A35810}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 11\FL.exe
    FirewallRules: [TCP Query User{81A584C2-C60C-4A22-8BF9-6F6A8653DBD1}C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Block) C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe
    FirewallRules: [UDP Query User{2ED6BE86-3410-49EB-AF8D-E0E49750AB99}C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Block) C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe
    FirewallRules: [{55D7B587-AFDE-4984-BD80-46A55D0F9395}] => (Allow) C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{64651EB9-2D54-4EA4-83F0-4FBD4E412DBD}] => (Allow) C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{FDAD6701-D228-4FF9-AF1E-D181EFC5F66C}] => (Allow) %SystemDrive%\Riot Games\League of Legends\lol.launcher.exe
    FirewallRules: [{4BA01515-08F0-4C48-A579-ACAFC5AA4FCA}] => (Allow) %SystemDrive%\Riot Games\League of Legends\lol.launcher.admin.exe
    FirewallRules: [{A4E6D925-A57E-4F7D-BAE8-8A2A6CDFF74F}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\ACEStream\engine\ace_engine.exe
    FirewallRules: [{FC85F7A8-3AD9-4811-A4B9-C398627B51DF}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\ACEStream\engine\ace_engine.exe
    FirewallRules: [{BC6E0CB7-C238-45D2-A537-F3C736820AEA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{39B3A410-DBB1-4648-9F6F-77E155187FE0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [TCP Query User{C032B241-9A26-4074-BF49-4A19EC0A9881}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
    FirewallRules: [UDP Query User{48311837-D0CF-4F48-9B21-70F469A1065C}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
    FirewallRules: [TCP Query User{40E11571-C03E-4135-B6F2-104E6255E216}C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe
    FirewallRules: [UDP Query User{FE8B23C6-128B-4E43-9E9A-8027711BE30F}C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe
    FirewallRules: [{51591956-E7B3-40E3-B3E1-3657690B2FDC}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
    FirewallRules: [{6D79657B-FA8B-4D47-A242-0F87A73030F3}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
    FirewallRules: [{1D42777D-6C37-43A0-AA7A-06A054C6B1F5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
    FirewallRules: [{75A51A08-9AA2-4640-8866-C34A20AC39BA}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
    FirewallRules: [{C19A6DFC-5CAA-424B-BBC8-713B68086E2D}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
    FirewallRules: [{249CA198-C068-4024-9EB4-07D255EFEEC9}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
    FirewallRules: [TCP Query User{F88708E6-881E-4D08-B4F7-B5FC211860B7}C:\program files (x86)\qbittorrent\qbittorrent.exe] => (Allow) C:\program files (x86)\qbittorrent\qbittorrent.exe
    FirewallRules: [UDP Query User{1ED81086-5EEE-4FBF-85D4-9EE3A66A7B53}C:\program files (x86)\qbittorrent\qbittorrent.exe] => (Allow) C:\program files (x86)\qbittorrent\qbittorrent.exe
    FirewallRules: [{E154C178-19BA-4523-8D53-898FF3A24E01}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{239A9306-B654-4BB8-B94B-E30B73AD4850}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\SSN\ssn.exe
    FirewallRules: [{F60D17F9-15BE-457D-B752-73B192075D21}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\SSN\updssn.exe
    FirewallRules: [{EE637B7A-32C1-444D-B752-54F27A075B36}] => (Allow) C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\bobrowser.exe
    FirewallRules: [{78A8F5B5-B3CE-4351-B18D-EB9D8E325F87}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe

    ==================== Faulty Device Manager Devices =============

    Name: facap, FastAccess Video Capture
    Description: facap, FastAccess Video Capture
    Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
    Manufacturer: Sensible Vision
    Service: FACAP
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

    Name: Lexmark X422
    Description: Lexmark X422
    Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
    Manufacturer: Lexmark
    Service: usbscan
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (05/21/2015 02:35:38 PM) (Source: MsiInstaller) (EventID: 11316) (User: M17X)
    Description: Product: globalupdate Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi

    Error: (05/21/2015 02:32:32 PM) (Source: MsiInstaller) (EventID: 11316) (User: M17X)
    Description: Product: Consumer Input Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Consumer Input\Update\1.3.25.309\GoogleUpdateHelper.msi

    Error: (05/21/2015 02:30:22 AM) (Source: MsiInstaller) (EventID: 11308) (User: M17X)
    Description: Product: Max Computer Cleaner -- Error 1308. Source file not found: C:\Users\Phil is fiiiine\AppData\Roaming\Max Computer Cleaner\Max Computer Cleaner 2.6.9\install\DEE6785\MaxComputerCleaner.exe. Verify that the file exists and that you can access it.

    Error: (05/20/2015 04:36:36 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
    The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.

    Error: (05/19/2015 03:20:12 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
    The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.

    Error: (05/19/2015 02:41:57 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: plugin-container.exe, version: 38.0.1.5611, time stamp: 0x55541a90
    Faulting module name: mozalloc.dll, version: 38.0.1.5611, time stamp: 0x55540a1e
    Exception code: 0x80000003
    Fault offset: 0x00001aa1
    Faulting process id: 0x10a4
    Faulting application start time: 0xplugin-container.exe0
    Faulting application path: plugin-container.exe1
    Faulting module path: plugin-container.exe2
    Report Id: plugin-container.exe3

    Error: (05/18/2015 03:59:25 AM) (Source: SideBySide) (EventID: 63) (User: )
    Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
    The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.

    Error: (05/15/2015 11:40:40 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program DTLite.exe version 4.47.1.335 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

    Process ID: 448

    Start Time: 01d08efb486469c6

    Termination Time: 3

    Application Path: C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

    Report Id:

    Error: (05/15/2015 04:15:33 AM) (Source: SideBySide) (EventID: 63) (User: )
    Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
    The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.

    Error: (05/14/2015 02:34:59 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
    The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.


    System errors:
    =============
    Error: (05/21/2015 01:46:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Steam Client Service service failed to start due to the following error:
    %%1053

    Error: (05/21/2015 01:46:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.

    Error: (05/21/2015 01:42:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Alienware Fusion Service service failed to start due to the following error:
    %%1053

    Error: (05/21/2015 01:42:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the Alienware Fusion Service service to connect.

    Error: (05/21/2015 01:42:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the OptimizerPro Monitoring service to connect.

    Error: (05/21/2015 03:11:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Diagnostic Policy Service service failed to start due to the following error:
    %%1069

    Error: (05/21/2015 03:11:57 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
    Description: The DPS service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error:
    %%50

    To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

    Error: (05/21/2015 03:11:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Vista Session Launcher Service service failed to start due to the following error:
    %%109

    Error: (05/21/2015 03:11:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Cryptographic Services service failed to start due to the following error:
    %%1069

    Error: (05/21/2015 03:11:56 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
    Description: The CryptSvc service was unable to log on as NT Authority\NetworkService with the currently configured password due to the following error:
    %%50

    To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).


    Microsoft Office Sessions:
    =========================
    Error: (05/21/2015 02:35:38 PM) (Source: MsiInstaller) (EventID: 11316) (User: M17X)
    Description: Product: globalupdate Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

    Error: (05/21/2015 02:32:32 PM) (Source: MsiInstaller) (EventID: 11316) (User: M17X)
    Description: Product: Consumer Input Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Consumer Input\Update\1.3.25.309\GoogleUpdateHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

    Error: (05/21/2015 02:30:22 AM) (Source: MsiInstaller) (EventID: 11308) (User: M17X)
    Description: Product: Max Computer Cleaner -- Error 1308. Source file not found: C:\Users\Phil is fiiiine\AppData\Roaming\Max Computer Cleaner\Max Computer Cleaner 2.6.9\install\DEE6785\MaxComputerCleaner.exe. Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

    Error: (05/20/2015 04:36:36 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

    Error: (05/19/2015 03:20:12 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

    Error: (05/19/2015 02:41:57 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: plugin-container.exe38.0.1.561155541a90mozalloc.dll38.0.1.561155540a1e8000000300001aa110a401d0915b8b41583bC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll3b8981cb-fdc8-11e4-9643-0026b9ff2d03

    Error: (05/18/2015 03:59:25 AM) (Source: SideBySide) (EventID: 63) (User: )
    Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

    Error: (05/15/2015 11:40:40 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: DTLite.exe4.47.1.33544801d08efb486469c63C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

    Error: (05/15/2015 04:15:33 AM) (Source: SideBySide) (EventID: 63) (User: )
    Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

    Error: (05/14/2015 02:34:59 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i7 CPU Q 840 @ 1.87GHz
    Percentage of memory in use: 59%
    Total physical RAM: 8180.46 MB
    Available physical RAM: 3283.41 MB
    Total Pagefile: 16359.1 MB
    Available Pagefile: 10459.95 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.85 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:596.08 GB) (Free:53.24 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 65DEA0FB)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=596.1 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================
     
  5. Broni

    Broni Malware Annihilator Posts: 52,897   +344

    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ============================

    [​IMG] Uninstall following unwanted programs:

    Ace Stream Media
    AnySend
    BoBrowser
    CinemaPlus
    Consumer Input
    Coupoon version 1.0
    Crossbrowse
    Double-sided Launch
    GamesDesktop
    MyBestOffersToday
    Optimizer Pro
    Selection Tools
    sursenel
    Web Bar
    WindApp


    [​IMG] Download RogueKiller from one of the following links and save it to your Desktop:

    Link 1
    Link 2

    • Close all the running programs
    • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

    [​IMG] Please download Malwarebytes Anti-Malware (MBAM) to your desktop.
    NOTE. If you already have MBAM 2.0 installed scroll down.

    • Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to the following:
      • Launch Malwarebytes Anti-Malware
      • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
    • Click Finish.
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.


    If you already have MBAM 2.0 installed:

    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.

    How to get logs:
    (Export log to save as txt)


    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Export'.
    • Click 'Text file (*.txt)'
    • In the Save File dialog box which appears, click on Desktop.
    • In the File name: box type a name for your scan log.
    • A message box named 'File Saved' should appear stating "Your file has been successfully exported".
    • Click Ok
    • Attach that saved log to your next reply.


    (Copy to clipboard for pasting into forum replies or tickets)

    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Copy to Clipboard'
    • Paste the contents of the clipboard into your reply.

    [​IMG] Please download AdwCleaner by Xplode onto your desktop.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Scan button.
    • When the scan has finished click on Clean button.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the contents of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.

    [​IMG] Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.
     
  6. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Hi, thanks for the help =) I've managed to uninstall all but one of the programs you named, specifically it's cinemaplus that I can't remove. Here's a screenshot of what happens when I try, the green bar says to uninstall and get reimage (whatever that program is) and a small message under that saying to just uninstall. I've tried that several times now and nothing happens, the program is still in my directories. I thought it best to let you know before I do any of the other steps. Once again, thank you for your time and patience, it's greatly appreciated =)

    upload_2015-5-22_15-1-16.png
     

    Attached Files:

  7. Broni

    Broni Malware Annihilator Posts: 52,897   +344

    Fair enough. We'll remove it manually.
    Go ahead with other steps from my previous reply.
     
  8. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Thank you for the help and clear instruction =) I've done all you asked and here are the logs you requested, thanks again mate =)


    RogueKiller V10.6.5.0 [May 20 2015] by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : http://www.adlice.com/softwares/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Phil is fiiiine [Administrator]
    Started from : C:\Users\Phil is fiiiine\Downloads\RogueKiller.exe
    Mode : Delete -- Date : 05/23/2015 14:21:22

    ¤¤¤ Processes : 20 ¤¤¤
    [Suspicious.Path] cnsq572E.tmp(3400) -- C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175666-3210-8032-38C04F373638\cnsq572E.tmp[x] -> Killed [TermProc]
    [Suspicious.Path] nsfDC74.tmp(2476) -- C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nsfDC74.tmp[-] -> Killed [TermProc]
    [Suspicious.Path] hnsk912F.tmp(2772) -- C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp[-] -> Killed [TermProc]
    [Suspicious.Path] ace_web_extension.exe(3592) -- C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe[7] -> Killed [TermProc]
    [Suspicious.Path] SmartWebHelper.exe(6088) -- C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\SmartWebHelper.exe[7] -> Killed [TermProc]
    [Suspicious.Path] SmartWebApp.exe(4888) -- C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\SmartWebApp.exe[7] -> Killed [TermProc]
    [Suspicious.Path] bnsp3970.exe(6804) -- C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175529-3210-8032-38C04F373638\bnsp3970.exe[-] -> Killed [TermProc]
    [Suspicious.Path] ssn.exe(7916) -- C:\Users\Phil is fiiiine\AppData\Roaming\ssn\ssn.exe[-] -> Killed [TermProc]
    [Suspicious.Path] Explore.exe(8208) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermProc]
    [Suspicious.Path] Explore.exe(7276) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(8432) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(9088) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(6940) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(8584) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(6020) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(5836) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(2004) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(9148) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(9208) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]
    [Suspicious.Path] Explore.exe(6584) -- C:\Users\PHILIS~1\AppData\Local\GAMESB~1\Explore\Explore.exe[7] -> Killed [TermThr]

    ¤¤¤ Registry : 42 ¤¤¤
    [PUM.Orphan] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad | WebCheck : {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad | WebCheck : {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EFA7A511-B491-4312-BB35-4586B99E45ED} -> Not selected
    [PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> Not selected
    [PUM.Orphan] (X64) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar | {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} : -> Not selected
    [Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | WinCheck : C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175529-3210-8032-38C04F373638\bnsp3970.exe [-] -> Not selected
    [Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | SmartWeb : C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\SmartWebHelper.exe [7] -> Not selected
    [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | AceWebExtensionUpdater : C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe [7] -> Not selected
    [PUP] (X64) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | WindApp : "C:\Users\Phil is fiiiine\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup [x][x] -> Not selected
    [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | Selection Tools : "C:\Users\Phil is fiiiine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup [x][x] -> Not selected
    [Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | Save Serp Now : C:\Users\Phil is fiiiine\AppData\Roaming\SSN\updssn.exe [-] -> Not selected
    [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | AceWebExtensionUpdater : C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe [7] -> Not selected
    [PUP] (X86) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | WindApp : "C:\Users\Phil is fiiiine\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup [x][x] -> Not selected
    [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | Selection Tools : "C:\Users\Phil is fiiiine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup [x][x] -> Not selected
    [Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Windows\CurrentVersion\Run | Save Serp Now : C:\Users\Phil is fiiiine\AppData\Roaming\SSN\updssn.exe [-] -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ALSysIO (\??\C:\Users\user\AppData\Local\Temp\ALSysIO64.sys) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\globalUpdate (C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /svc) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\globalUpdatem (C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /medsvc) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kymupiju (C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nsfDC74.tmp) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rycimizu (C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ALSysIO (\??\C:\Users\user\AppData\Local\Temp\ALSysIO64.sys) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\globalUpdate (C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /svc) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\globalUpdatem (C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /medsvc) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\kymupiju (C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nsfDC74.tmp) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\rycimizu (C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\ALSysIO (\??\C:\Users\user\AppData\Local\Temp\ALSysIO64.sys) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\gerugefu (C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175666-3210-8032-38C04F373638\cnsq572E.tmp) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\globalUpdate (C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /svc) -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\globalUpdatem (C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /medsvc) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\kymupiju (C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nsfDC74.tmp) -> Not selected
    [Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\rycimizu (C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp) -> Not selected
    [PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Not selected
    [PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Not selected
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected

    ¤¤¤ Tasks : 8 ¤¤¤
    [Suspicious.Path] Periodic Synchronize Task.job -- c:\programdata\{c3d16043-85af-478b-c3d1-1604385a810e}\hqghumeaylnlf.exe (--startup=1 --single) -> Not selected
    [Suspicious.Path] TZZF0LkcL.job -- C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL.exe (--c=vuAkolY1/l/0rgmFMO2GdKZiUwRClJuU+apdFsH2pVg27/7zXVJpL7DcDiKzTURGMSAkV26huVyl8SL0lHef6w/Bi6pjZ2wWB4Yi28mitRgCauDjdmeIPLMBT2CCQH5+q8Tq63VRHm2w2Nge09lAuoXbLy4jzjypdWa/tGiIyK4SIzMQs0FTPQBVwrAhsVaaISjhHMBOg1gILv+McymLIK/8T+zkOvtbjjAQRjN8CX22AafSgGWHqq1rPcG9jI2B8Er9e9BltQwJKPOUcbSM2GJfTlSgOeYG5ZC0nSqEaZqNmzUS94Zhuksjl+8gvQL0gO5/1JOi9iPxJWni8i3F8g==) -> Not selected
    [Suspicious.Path] WxrsUKVLrxa85McoQ4p.job -- C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p.exe (--c=P2e54RnkYbswnq/zBhaKw/5hbYz/GLZf4Zh14Sh9Vje58HAR6pNQCvX4FfTqS/mDNNbZAl3qW/H+KAhnci4kyos8PyEcv1GzHnxpeSKMtWwsHO2NyGw9Kb3o4wh1HqT69cWAvYDdxf258updYZG3Z2Y6x//BsnAuoggG++ePDmxdMDSqRJbTe8IgzIU1ufmvB8vkl/7Z4jLwB7/5iyCSS/up1n9u6HkqxFuEjGgxCw3q2mIVTeL28R8ujtjVAi29sG4zXdNatKbmBJuq/66coO1v33xpiitNM2wA2ooIblhfU3WM1WvZK3q5mWE7Z84rhivcl8kOE5csktdh+mHLeA==) -> Not selected
    [Suspicious.Path] \\Periodic Synchronize Task -- c:\programdata\{c3d16043-85af-478b-c3d1-1604385a810e}\hqghumeaylnlf.exe (--startup=1 --single) -> Not selected
    [PUP] \\Run_Bobby_Browser -- "C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\bobrowser.exe" (--no-startup-window) -> Not selected
    [Suspicious.Path] \\SmartWeb Upgrade Trigger Task -- C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\SmartWebHelper.exe -> Not selected
    [Suspicious.Path] \\TZZF0LkcL -- C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL.exe (--c=vuAkolY1/l/0rgmFMO2GdKZiUwRClJuU+apdFsH2pVg27/7zXVJpL7DcDiKzTURGMSAkV26huVyl8SL0lHef6w/Bi6pjZ2wWB4Yi28mitRgCauDjdmeIPLMBT2CCQH5+q8Tq63VRHm2w2Nge09lAuoXbLy4jzjypdWa/tGiIyK4SIzMQs0FTPQBVwrAhsVaaISjhHMBOg1gILv+McymLIK/8T+zkOvtbjjAQRjN8CX22AafSgGWHqq1rPcG9jI2B8Er9e9BltQwJKPOUcbSM2GJfTlSgOeYG5ZC0nSqEaZqNmzUS94Zhuksjl+8gvQL0gO5/1JOi9iPxJWni8i3F8g==) -> Not selected
    [Suspicious.Path] \\WxrsUKVLrxa85McoQ4p -- C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p.exe (--c=P2e54RnkYbswnq/zBhaKw/5hbYz/GLZf4Zh14Sh9Vje58HAR6pNQCvX4FfTqS/mDNNbZAl3qW/H+KAhnci4kyos8PyEcv1GzHnxpeSKMtWwsHO2NyGw9Kb3o4wh1HqT69cWAvYDdxf258updYZG3Z2Y6x//BsnAuoggG++ePDmxdMDSqRJbTe8IgzIU1ufmvB8vkl/7Z4jLwB7/5iyCSS/up1n9u6HkqxFuEjGgxCw3q2mIVTeL28R8ujtjVAi29sG4zXdNatKbmBJuq/66coO1v33xpiitNM2wA2ooIblhfU3WM1WvZK3q5mWE7Z84rhivcl8kOE5csktdh+mHLeA==) -> Not selected

    ¤¤¤ Files : 1 ¤¤¤
    [Suspicious.Path][File] SmartWeb.lnk -- C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk [LNK@] C:\Users\PHILIS~1\AppData\Local\SmartWeb\SMARTW~2.EXE -> Deleted

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

    ¤¤¤ Web browsers : 1 ¤¤¤
    [PUM.Proxy][FIREFX:Config] ai80rkp0.default : user_pref("network.proxy.type", 2); -> Not selected

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: Volume0 +++++
    --- User ---
    [MBR] ba822d4d2c9a9df352ff2cd2183adcc7
    [BSP] 3f29b1ca39e12a79424d0858560aed28 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 610384 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    User = LL1 ... OK
    Error reading LL2 MBR! ([57] The parameter is incorrect. )


    ============================================
    RKreport_SCN_05232015_142000.log


    # AdwCleaner v4.205 - Logfile created 23/05/2015 at 16:55:47
    # Updated 21/05/2015 by Xplode
    # Database : 2015-05-21.2 [Server]
    # Operating system : Windows 7 Ultimate Service Pack 1 (x64)
    # Username : Phil is fiiiine - M17X
    # Running from : C:\Users\Phil is fiiiine\Downloads\adwcleaner_4.205.exe
    # Option : Cleaning

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData\Uniblue
    Folder Deleted : C:\ProgramData\22603d000000113c
    Folder Deleted : C:\Program Files (x86)\globalUpdate
    Folder Deleted : C:\Program Files (x86)\predm
    Folder Deleted : C:\Program Files (x86)\Games Bot
    Folder Deleted : C:\Program Files (x86)\MyPCBU
    Folder Deleted : C:\Program Files (x86)\MaxComputerCleaner
    Folder Deleted : C:\Program Files\WebBar
    Folder Deleted : C:\Program Files\BubbleSound
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Local\globalUpdate
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Local\Innovative Solutions
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Local\Games Bot
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175529-3210-8032-38C04F373638
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175666-3210-8032-38C04F373638
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\LocalLow\AVG Secure Search
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\LocalLow\HPAppData
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\LocalLow\SmartWeb
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\Store
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\WTools
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\Innovative Solutions
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\AceWebExtension
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games Bot
    Folder Deleted : C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
    File Deleted : C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_engaigpbgdjjmanonjcjkcmomgibneba_0.localstorage
    File Deleted : C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_engaigpbgdjjmanonjcjkcmomgibneba_0.localstorage-journal
    File Deleted : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ndibdjnfmopecpmkdieinmbadjfpblof_0.localstorage
    File Deleted : C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
    File Deleted : C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage-journal
    File Deleted : C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0
    File Deleted : C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp
    File Deleted : C:\END
    File Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL
    File Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p
    File Deleted : C:\Users\Phil is fiiiine\Desktop\3D BubbleSound.lnk
    File Deleted : C:\Users\Phil is fiiiine\Desktop\Continue Live Installation.lnk
    File Deleted : C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\user.js

    ***** [ Scheduled tasks ] *****

    Task Deleted : Run_Bobby_Browser
    Task Deleted : SmartWeb Upgrade Trigger Task
    Task Deleted : amiupdaterExd
    Task Deleted : amiupdaterExi
    Task Deleted : TZZF0LkcL
    Task Deleted : WxrsUKVLrxa85McoQ4p

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [WinCheck]
    Key Deleted : HKLM\SOFTWARE\3c42222d-7b75-44d7-b677-e4c89c7c3e5e
    Key Deleted : HKLM\SOFTWARE\b39d2359-987f-098d-cb6f-0e7303bb2f58
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{2BB27047-C938-4EBC-9158-6C84F1CC09D1}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6A700506-A641-475A-8538-44AEE2F45DD0}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C0EE992D-B820-48A3-9339-363F5DA9545E}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EFD2925B-400E-4B47-8CC4-33EB2E3232F6}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F930C6AB-C4F4-4CBC-97CB-49ED410F99CF}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE97B593-B850-47EA-A787-977274C3B5B5}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0D692BF5-6C8C-4141-8C24-9CB731D78F75}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2BB27047-C938-4EBC-9158-6C84F1CC09D1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3DD579C6-640C-4873-9596-D5BD8ECB8E99}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{52A8C674-98FA-4A0A-9F64-C8B9D161FDC4}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6A700506-A641-475A-8538-44AEE2F45DD0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E377247-6BEC-4961-84B4-B0FB7ADF84AD}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7081BB03-D2E6-4797-A2E7-C9EB331636C8}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{74DDBF4E-EC16-468A-A6F4-6C1D250A4EC9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7CD8A44F-6DEF-4D91-952D-4492AC5E4306}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7CD8A44F-6DEF-4D91-952D-4492AC5E4306}
    Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\AVG Secure Search
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\GlobalUpdate
    Key Deleted : HKCU\Software\InstalledBrowserExtensions
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\Store
    Key Deleted : HKCU\Software\YahooPartnerToolbar
    Key Deleted : HKCU\Software\WTools
    Key Deleted : HKCU\Software\Games Bot
    Key Deleted : HKCU\Software\sidecom
    Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\SmartWeb
    Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
    Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    Key Deleted : HKLM\SOFTWARE\CompeteInc
    Key Deleted : HKLM\SOFTWARE\GlobalUpdate
    Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
    Key Deleted : HKLM\SOFTWARE\Uniblue
    Key Deleted : HKLM\SOFTWARE\Clara
    Key Deleted : HKLM\SOFTWARE\Games Bot
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wincheck
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Games Bot
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D7D6742-5B49-4454-9E9B-748E731E741A}_is1
    Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
    Key Deleted : [x64] HKLM\SOFTWARE\BubbleSound
    Key Deleted : [x64] HKLM\SOFTWARE\WebBar
    Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BubbleSound

    ***** [ Web browsers ] *****

    -\\ Internet Explorer v10.0.9200.16635


    -\\ Mozilla Firefox v38.0.1 (x86 en-US)


    -\\ Google Chrome v43.0.2357.65

    [C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}
    [C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://uk.ask.com/web?q={searchTerms}

    -\\ Chromium v


    *************************

    AdwCleaner[R0].txt - [10838 bytes] - [12/07/2014 21:00:45]
    AdwCleaner[R1].txt - [10435 bytes] - [23/05/2015 16:49:31]
    AdwCleaner[S0].txt - [10535 bytes] - [12/07/2014 21:04:19]
    AdwCleaner[S1].txt - [9697 bytes] - [23/05/2015 16:55:47]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [9756 bytes] ##########

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.7.8 (05.23.2015:2)
    OS: Windows 7 Ultimate x64
    Ran by Phil is fiiiine on 23/05/2015 at 17:11:01.14
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    ~~~ Services

    Successfully stopped: [Service] gamesbotservice
    Successfully deleted: [Service] gamesbotservice



    ~~~ Tasks



    ~~~ Registry Values



    ~~~ Registry Keys



    ~~~ Files

    Successfully deleted: [File] C:\Users\Phil is fiiiine\AppData\Roaming\resxyptz\encecal.dll [Adware.AdPeak?]
    Successfully deleted: [File] C:\Users\Phil is fiiiine\AppData\Roaming\rmydtrbp\encecal.dll [Adware.AdPeak?]



    ~~~ Folders

    Successfully deleted: [Folder] C:\Program Files (x86)\MaxComputerCleaner_v27.474
    Successfully deleted: [Folder] C:\ProgramData\abc
    Successfully deleted: [Folder] C:\Users\Phil is fiiiine\appdata\local\cre
    Successfully deleted: [Folder] C:\Users\Phil is fiiiine\AppData\Roaming\resxyptz [Adware.AdPeak?]
    Successfully deleted: [Folder] C:\Users\Phil is fiiiine\AppData\Roaming\rmydtrbp [Adware.AdPeak?]



    ~~~ FireFox

    Emptied folder: C:\Users\Phil is fiiiine\AppData\Roaming\mozilla\firefox\profiles\ai80rkp0.default\minidumps [70 files]



    ~~~ Chrome

    Successfully deleted: [Folder] C:\Users\Phil is fiiiine\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 23/05/2015 at 17:15:19.13
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    I've attached the malwarebytes report, as you requested. Thank you for your help =)

     

    Attached Files:

  9. Broni

    Broni Malware Annihilator Posts: 52,897   +344

    Please observe forum rules.
    All logs have to be pasted not attached.
     
  10. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Sorry about that, from the two sets of instructions for malwarebytes, the first one said attach so I went with that one. Sorry for the error

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 23/05/2015
    Scan Time: 14:30:48
    Logfile: Malware bytes 3.txt
    Administrator: Yes

    Version: 2.01.6.1022
    Malware Database: v2015.05.23.01
    Rootkit Database: v2015.05.16.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x64
    File System: NTFS
    User: Phil is fiiiine

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 453128
    Time Elapsed: 1 hr, 33 min, 56 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 16
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-10.exe, 2472, Delete-on-Reboot, [61acb3e4a8e22c0ad77d5bffc640ac54]
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-6.exe, 2460, Delete-on-Reboot, [d33a583fd4b6a6903024c09ac83e54ac]
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.exe, 3116, Delete-on-Reboot, [78951e796d1d1c1a5cf86cee2cda32ce]
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe, 3496, Delete-on-Reboot, [a5685c3b88022b0be4d35b0722e4ff01]
    PUP.Optional.Coupoon.A, C:\Program Files (x86)\Coupoon\UpdateCheck.exe, 2676, Delete-on-Reboot, [e924197ea1e9092d23bcc59d0bfb1fe1]
    PUP.Optional.Coupoon.A, C:\Program Files (x86)\Coupoon\UpdateCheck.exe, 5452, Delete-on-Reboot, [e924197ea1e9092d23bcc59d0bfb1fe1]
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, 7148, Delete-on-Reboot, [47c6edaac3c750e619c3c09bf70f13ed]
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, 7156, Delete-on-Reboot, [47c6edaac3c750e619c3c09bf70f13ed]
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\PopcornewUpdate.exe, 2848, Delete-on-Reboot, [ad60c1d6bfcb2c0a8358005b54b21ae6]
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\PopcornewUpdate.exe, 4376, Delete-on-Reboot, [ad60c1d6bfcb2c0a8358005b54b21ae6]
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Brito.exe, 3360, Delete-on-Reboot, [ff0e14836c1e1a1c790908e6699a1ee2]
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Brito64.exe, 3688, Delete-on-Reboot, [cf3ed8bf880296a0a3e0be3042c1e51b]
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Grubb.exe, 3148, Delete-on-Reboot, [eb22aaedc6c466d0058e1ad233d011ef]
    Rootkit.Agent.A, C:\Program Files\shopperz\csrcc.exe, 3700, Delete-on-Reboot, [7e8f7c1bbccea98dfe06ad415fa430d0]
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Anneliese.exe, 1772, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2]
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\csrcc.exe, 3700, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2]

    Modules: 8
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdate.dll, Delete-on-Reboot, [36d7098ec4c6c86e8d4e15466f970000],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdate.dll, Delete-on-Reboot, [36d7098ec4c6c86e8d4e15466f970000],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\psmachine.dll, Delete-on-Reboot, [7f8e3a5d22682c0af8e3afac5da9b54b],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\psmachine.dll, Delete-on-Reboot, [7f8e3a5d22682c0af8e3afac5da9b54b],
    PUP.Optional.Nova.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\3c42222d-7b75-44d7-b677-e4c89c7c3e5e.dll, Delete-on-Reboot, [de2f4b4c4f3ba3935577be54f909ad53],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Earlene32.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Ivonne.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Winfrey.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],

    Registry Keys: 288
    PUP.Optional.Infonaut.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\insvc_1.10.0.14, Quarantined, [a5685c3b88022b0be4d35b0722e4ff01],
    PUP.Optional.Coupoon.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UpdateCheck, Quarantined, [e924197ea1e9092d23bcc59d0bfb1fe1],
    PUP.Optional.Popcornew.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Popcornew_update, Quarantined, [ad60c1d6bfcb2c0a8358005b54b21ae6],
    PUP.Optional.Popcornew.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Popcornew_update_m, Quarantined, [ad60c1d6bfcb2c0a8358005b54b21ae6],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\POPCORNEWUPDATE.EXE, Quarantined, [ad60c1d6bfcb2c0a8358005b54b21ae6],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\POPCORNEWUPDATE.EXE, Quarantined, [ad60c1d6bfcb2c0a8358005b54b21ae6],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0F840CB3-F4B0-4746-9211-94E5372FBD05}, Quarantined, [7f8e3a5d22682c0af8e3afac5da9b54b],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0F840CB3-F4B0-4746-9211-94E5372FBD05}, Quarantined, [7f8e3a5d22682c0af8e3afac5da9b54b],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9892108A-038E-4D48-9D3C-D1E2A9B706EC}, Quarantined, [7f8e3a5d22682c0af8e3afac5da9b54b],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9892108A-038E-4D48-9D3C-D1E2A9B706EC}, Quarantined, [7f8e3a5d22682c0af8e3afac5da9b54b],
    PUP.Optional.ModGoog, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, Quarantined, [fe0fe4b35337e84e7fde96b4d52df30d],
    PUP.Optional.ModGoog, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, Quarantined, [fe0fe4b35337e84e7fde96b4d52df30d],
    PUP.Optional.ModGoog, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GLOBALUPDATE.EXE, Quarantined, [fe0fe4b35337e84e7fde96b4d52df30d],
    PUP.Optional.ModGoog, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GLOBALUPDATE.EXE, Quarantined, [fe0fe4b35337e84e7fde96b4d52df30d],
    PUP.Optional.Infonaut.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\innfd_1_10_0_14, Quarantined, [ef1e5d3af496c274bdfaacb62dd9fc04],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EFA7A511-B491-4312-BB35-4586B99E45ED}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9E598662-1ABE-48BC-B522-EF13ED372D08}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7711974F-6685-46CD-A62E-63C7B46F9705}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7711974F-6685-46CD-A62E-63C7B46F9705}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9E598662-1ABE-48BC-B522-EF13ED372D08}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{9E598662-1ABE-48BC-B522-EF13ED372D08}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\AdRotate.AdRotate.1, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\AdRotate.AdRotate, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\AdRotate.AdRotate, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\AdRotate.AdRotate, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EFA7A511-B491-4312-BB35-4586B99E45ED}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\AdRotate.AdRotate.1, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\AdRotate.AdRotate.1, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EFA7A511-B491-4312-BB35-4586B99E45ED}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EFA7A511-B491-4312-BB35-4586B99E45ED}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.Boxore.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFA7A511-B491-4312-BB35-4586B99E45ED}, Quarantined, [37d63265305a63d3b4b6e96f8d76ab55],
    PUP.Optional.ConsumerInput.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, Quarantined, [31dca6f1ef9b1422a7e9e878d92aec14],
    PUP.Optional.ConsumerInput.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, Quarantined, [31dca6f1ef9b1422a7e9e878d92aec14],
    PUP.Optional.ConsumerInput.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}, Quarantined, [31dca6f1ef9b1422a7e9e878d92aec14],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinemaPlus-3.2cV21.05, Quarantined, [e02d2e69a8e2ba7c193e8fd4d72fe61a],
    PUP.Optional.Infonaut.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Infonaut_1.10.0.14, Quarantined, [a36a5542f199b77ffabdf56d61a53cc4],
    Rootkit.Agent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\cherimoya, Quarantined, [46c73f58b4d637ffc6069457f3106d93],
    PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SoftwareUpdater, Quarantined, [2ae3efa89cee999da4c56609699c659b],
    PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\kymupiju, Quarantined, [4bc2d2c53d4dd5613b3389e60500f907],
    PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\rycimizu, Quarantined, [4bc2d2c53d4dd5613b3389e60500f907],
    PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\HighDefAction, Quarantined, [68a5692ecebc0234dcef086e5ca9e719],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\shopperz, Quarantined, [dd3004931b6ffb3baaeaad3fba4930d0],
    PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\YorkNewCin, Quarantined, [ef1e2077abdf072fd303d0a6ed184cb4],
    PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD, Quarantined, [d835098e2664d363396dcda56d98e21e],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, Quarantined, [67a64057eaa04ee823daec83e22341bf],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, Quarantined, [f8152c6b93f757df916c1956f60f0df3],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, Quarantined, [fa139bfcc1c9fd39f904145b2fd659a7],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync, Quarantined, [0b020f88b4d665d1bf3ff27dd5307c84],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, Quarantined, [d23b0e8975157bbb17e7f17e41c4659b],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass, Quarantined, [13fa5245197187af33cb2e41e520f20e],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreClass.1, Quarantined, [0ffe484f3b4f7eb86698026d14f1669a],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass, Quarantined, [f7163166a6e4999df10d3e310afbc838],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, Quarantined, [4ebf9afdef9b979fed11ee81d72e50b0],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, Quarantined, [b15c296e0f7be452c9358ee111f4dc24],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, Quarantined, [7c91b4e385050b2b44ba313e0005bd43],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, Quarantined, [4ebfa2f594f60e28e11da7c86b9ab848],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, Quarantined, [3fce098e91f9280ecd311d529e67728e],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, Quarantined, [759899fe3357092d7688f27d32d3fa06],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, Quarantined, [d934f2a5abdfbd7914ea6708ea1b3fc1],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, Quarantined, [d13c9700c9c159dd7e80e58aed1829d7],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, Quarantined, [41ccf7a0e6a48aac44ba94db33d23bc5],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher, Quarantined, [ed20a6f1d7b366d050ae620d669f4fb1],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, Quarantined, [8d80a9ee8cfeed4953ab4926b15416ea],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService, Quarantined, [c34a2077b4d638fe8579cda250b58b75],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, Quarantined, [9875c4d3e1a9c571bf3f84ebeb1a4bb5],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine, Quarantined, [19f44c4b3e4c9d99837b1c5326dfe719],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, Quarantined, [c94475224d3dfd39b14d6c03df26b24e],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, Quarantined, [f419880f24661f17c03e3c335aab5da3],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, Quarantined, [b05ddcbb8505cd69bb43353a9d6823dd],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc, Quarantined, [1eef37600882ae886e900669d33255ab],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, Quarantined, [cd404d4ac8c226100ef094db9d68649c],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.OneClickCtrl.9, Quarantined, [67a6a2f5eb9f60d67d29896caf547a86],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.OneClickProcessLauncherMachine, Quarantined, [0a0380170f7be353cfd744b1bc470ef2],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.OneClickProcessLauncherMachine.1.0, Quarantined, [ee1f9205f1995adc24824da863a0f907],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\Popcornew.Update3WebControl.3, Quarantined, [7c918f083753d36303a337be23e0c33d],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoCreateAsync, Quarantined, [20ed2275dab00c2a931319dc679cea16],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoCreateAsync.1.0, Quarantined, [ce3f425509811026a105fcf906fddc24],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreClass, Quarantined, [f914fc9b5d2d082ef4b2b5402bd826da],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreClass.1, Quarantined, [78956c2b8ffbbf77e7bfda1b03001ee2],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreMachineClass, Quarantined, [48c55047d0ba79bd62446e87976ccb35],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CoreMachineClass.1, Quarantined, [24e9aceb325877bfe0c6bd38d82b8878],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CredentialDialogMachine, Quarantined, [0d009007a4e64fe7d4d23bba3dc63cc4],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.CredentialDialogMachine.1.0, Quarantined, [16f7a8ef206a62d46145fcf923e0ae52],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine, Quarantined, [b25b7f1824669e98f2b4d32223e08a76],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine.1.0, Quarantined, [59b4c8cf13771620efb7569fe81b837d],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback, Quarantined, [1cf16433fe8c9b9b3076d0256b98669a],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback.1.0, Quarantined, [5eaf9304a8e2c76f91158e67669d01ff],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc, Quarantined, [7598781f7713b581c8dec62feb18a15f],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc.1.0, Quarantined, [b6579afdff8bb4820e98ba3b04ff3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.ProcessLauncher, Quarantined, [c746deb994f6eb4ba50127ce7b8804fc],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.ProcessLauncher.1.0, Quarantined, [cb42593ea2e847ef3e68da1b3fc4b44c],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3COMClassService, Quarantined, [e52898ffa4e67fb76f3755a09f64e020],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3COMClassService.1.0, Quarantined, [bc51f99e602ac175871f5b9ab54e936d],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachine, Quarantined, [a766ff98d1b9df57188e777e778cb44c],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachine.1.0, Quarantined, [f11c0e89dcae50e6287e16df758ee41c],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachineFallback, Quarantined, [38d505928bffab8b80269a5b1de612ee],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebMachineFallback.1.0, Quarantined, [878634630c7eb680475f06eff2111ee2],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebSvc, Quarantined, [dd30395ed8b2d75fb9edaf46ea19659b],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\PopcornewUpdate.Update3WebSvc.1.0, Quarantined, [fe0f564148425bdb8d1949ac0af9c040],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\APPID\PopcornewUpdate.exe, Quarantined, [77961e79395168ce7f264baa38cbb14f],
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE, Quarantined, [59b4cec91377191dc06a8de7c5405ba5],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.oneclickctrl.9, Quarantined, [a26bb0e71377bb7b33ab1cd65da69967],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.update3webcontrol.3, Quarantined, [fd10b5e2addd85b135a99d55ef14748c],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\PopcornewUpdate.exe, Quarantined, [9e6fd2c5a3e7142235706095e1227f81],
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE, Quarantined, [f815b2e56d1d979fa58578fc6c99b34d],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.oneclickctrl.9, Quarantined, [3dd0deb97812c17548967979c34014ec],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.update3webcontrol.3, Quarantined, [7f8eedaa84065adca43aa44e6e95a060],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [e7262e69bdcdf145ef5e6cb3818316ea],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV21.05, Quarantined, [07061e7984067cbab5c0926148bbaf51],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV21.05-nv, Quarantined, [28e5d8bfed9d89adb7be07eca95aa858],
    PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV21.05-nv-ie, Quarantined, [5eaf9bfc4f3bbc7a096c846f93706898],
    PUP.Optional.Coupoon.A, HKLM\SOFTWARE\WOW6432NODE\Coupoon, Quarantined, [010cb2e506847eb8df5976f9a06514ec],
    PUP.Optional.Crossbrowse.A, HKLM\SOFTWARE\WOW6432NODE\Crossbrowse, Quarantined, [7b927621bfcb61d5f872c11e7b88c838],
    PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, Quarantined, [d23b32650e7c64d23b90ec8a1ce906fa],
    PUP.Optional.Infonaut.A, HKLM\SOFTWARE\WOW6432NODE\Infonaut_1.10.0.14, Quarantined, [8d80781f9af0db5bdd3fa23c60a314ec],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\Popcornew, Quarantined, [8687296e1a704ee8713808edc43fb24e],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\shopperz, Quarantined, [5ab3f89f94f63cfa64a6eff0f50e05fb],
    PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, Quarantined, [31dc8413d1b962d431a59fd728ddbf41],
    PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [66a72572563436001df20dd042c1ff01],
    PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, Quarantined, [27e6f1a63159b086f2b4adc5f70e5fa1],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, Quarantined, [64a9d7c08802c373906dd699d0353ac6],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine, Quarantined, [39d4376096f46cca06f70b64788dc13f],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickProcessLauncherMachine.1.0, Quarantined, [838a7522701a0c2a0cf1f27db94c58a8],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync, Quarantined, [2ce19ff8e7a3c274ac52f87717ee08f8],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoCreateAsync.1.0, Quarantined, [c6475f382f5b2a0c7d816609f60fb34d],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass, Quarantined, [da337b1cd3b7290dc03e432c798cfd03],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreClass.1, Quarantined, [35d8d2c5286255e1a8563b3413f27e82],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass, Quarantined, [927b0e89d7b30c2ad826c1aece37bb45],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CoreMachineClass.1, Quarantined, [6f9ea9ee3a506fc7bd41a8c7e2231be5],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine, Quarantined, [1bf21c7b54361323b945cea1bf46bd43],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.CredentialDialogMachine.1.0, Quarantined, [0706b6e10783b08641bd3c3361a4ed13],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine, Quarantined, [8e7f5e39a8e248eef8060966fa0b669a],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachine.1.0, Quarantined, [7a933e5998f2bb7bfe009bd438cdcd33],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback, Quarantined, [4ac30f88761440f68d710b64877e4bb5],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0, Quarantined, [8c81c7d08cfe3501748adc93e124748c],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc, Quarantined, [11fc6730a9e18babe41a9fd026dfc63a],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.OnDemandCOMClassSvc.1.0, Quarantined, [f21b1b7ce3a7b18521ddb7b836cfda26],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher, Quarantined, [da338215fb8f82b41ce25817df26c43c],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.ProcessLauncher.1.0, Quarantined, [ed20f0a70486b086d32b432c8e7739c7],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService, Quarantined, [c34a03943f4bbf77bd41d39ca3624bb5],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3COMClassService.1.0, Quarantined, [1af36a2d365484b29767cea148bd55ab],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine, Quarantined, [0c01088f1b6f73c301fd5f10bd4858a8],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachine.1.0, Quarantined, [9d70593e28624cea6f8f531c2ed752ae],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback, Quarantined, [41cc2374cfbbec4af707402fdb2af20e],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebMachineFallback.1.0, Quarantined, [e9248b0c2d5d3ff7e717a4cbf3129d63],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc, Quarantined, [58b5efa8c7c349edac5283ec39cc09f7],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdateUpdate.Update3WebSvc.1.0, Quarantined, [c548c6d191f91224a65809661fe6e51b],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.OneClickCtrl.9, Quarantined, [3cd10790404af83ebbebba3b897a2fd1],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.OneClickProcessLauncherMachine, Quarantined, [bf4e99fe5e2c0f276a3caf46f3104cb4],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.OneClickProcessLauncherMachine.1.0, Quarantined, [57b68314bad07cba4d59c035996aaa56],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Popcornew.Update3WebControl.3, Quarantined, [a667455290fac571d9cd53a2ce35a55b],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoCreateAsync, Quarantined, [0904187f0387ad89b7efe60fad56ab55],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoCreateAsync.1.0, Quarantined, [33da385fbfcbdc5af3b3b93c5ba847b9],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreClass, Quarantined, [97761a7ddab0b383367042b3917210f0],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreClass.1, Quarantined, [45c8fb9c7119b482852143b2f60d5da3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreMachineClass, Quarantined, [808de8af46443ff76f37f30206fd38c8],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CoreMachineClass.1, Quarantined, [f31ad9bea9e152e4ecbad124c73c3fc1],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CredentialDialogMachine, Quarantined, [fc11b3e4107a0b2b881e12e33bc8c43c],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.CredentialDialogMachine.1.0, Quarantined, [0eff187f76146ec8970f8c69f90aa759],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine, Quarantined, [14f973242d5dc6701c8a28cd7291dc24],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachine.1.0, Quarantined, [57b6e5b2484251e51e88cc29f01301ff],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback, Quarantined, [41cc603761290f271d89ea0b020142be],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassMachineFallback.1.0, Quarantined, [1af3c0d7dab093a34c5a2cc9fa093ac6],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc, Quarantined, [f5185b3c2c5eef47baec6f86e12224dc],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.OnDemandCOMClassSvc.1.0, Quarantined, [31dc4e49cac03402eeb81cd91fe41be5],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.ProcessLauncher, Quarantined, [a16c227577136bcb9d0918dd877c7789],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.ProcessLauncher.1.0, Quarantined, [ec210a8d2c5e999deeb8e60fff042ed2],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3COMClassService, Quarantined, [d8352e69206a6fc7efb72ec79b686997],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3COMClassService.1.0, Quarantined, [18f50e89c0ca73c3efb7bd385ca72fd1],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachine, Quarantined, [e528088fbcce31053a6c965f47bc09f7],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachine.1.0, Quarantined, [2be26b2c8cfe8caa792dee07a063a45c],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachineFallback, Quarantined, [6e9f8512e4a6280e2c7abd3838cbb24e],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebMachineFallback.1.0, Quarantined, [b954059242484cea0f97f5000003f10f],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebSvc, Quarantined, [44c97b1ca0eaab8b31753eb7dc27639d],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\PopcornewUpdate.Update3WebSvc.1.0, Quarantined, [5db03f5889018bab10964aab26dd7e82],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\PopcornewUpdate.exe, Quarantined, [3ecf87106822ea4c9510b44129daaf51],
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE, Quarantined, [a56825723f4b42f457d3d89c74917f81],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.oneclickctrl.9, Quarantined, [6e9fb3e42f5b989e8c5218da6a9913ed],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\MIME\DATABASE\CONTENT TYPE\application/x-vnd.Popcornew.update3webcontrol.3, Quarantined, [d835afe8f595be787b63fdf5ec1729d7],
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE\Clients, Quarantined, [8a832e69f3972313d833185e3cc95ba5],
    PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [f31a108718721224034a0a15867e7f81],
    PUP.Optional.VoPackage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPackage, Quarantined, [e22b2b6c800a3600313d234b3fc69769],
    PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{54cc00c0}, Quarantined, [ed202374b9d194a25fe11561ae57ac54],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F67C6875-6414-40FA-886F-AE87A99AFED8}, Quarantined, [ba53a5f2bfcb65d16b6b43a2b94aac54],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, Quarantined, [6ca1158283073ef886d1aeb4fe0758a8],
    PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, Quarantined, [4bc29007e0aa6accd2863f23986dc13f],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@tools.Popcornew.com/Popcornew Update;version=3, Quarantined, [4cc10790ed9d94a29f09e70e55ae3ec2],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@tools.Popcornew.com/Popcornew Update;version=9, Quarantined, [28e551460f7b94a2ebbd777e966d56aa],
    PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, Quarantined, [dd300c8b8ffb2c0a642eda91c144a15f],
    PUP.Optional.Shopperz.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\shopperz Updater, Quarantined, [eb22aaedc6c466d0058e1ad233d011ef],
    Rootkit.Agent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CSRCC, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    Rootkit.Agent.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0],
    PUP.Optional.CinemaPlus.A, HKU\S-1-5-18\SOFTWARE\CinemaPlus-3.2cV21.05-nv, Quarantined, [c54872257f0b251146303ab9b54ea060],
    PUP.Optional.CinemaPlus.A, HKU\S-1-5-18\SOFTWARE\CinemaPlus-3.2cV21.05-nv-ie, Quarantined, [a667e7b06624b3836115d023aa596b95],
    PUP.Optional.Popcornew.A, HKU\S-1-5-18\SOFTWARE\Popcornew, Quarantined, [f01d494eafdb55e19a1021d42cd707f9],
    PUP.Optional.Crossrider.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, Quarantined, [32db10870d7d3bfb0b9e93dfbd4841bf],
    PUP.Optional.BoBrowser.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\BoBrowser, Quarantined, [b756f0a77218b3832ef8f4f8986b9868],
    PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\CinemaPlus-3.2cV21.05, Quarantined, [2fde1780bad07db983f3995ae61df40c],
    PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\CinemaPlus-3.2cV21.05-nv, Quarantined, [b459deb9a4e63bfb4432876c8b78b34d],
    PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\CinemaPlus-3.2cV21.05-nv-ie, Quarantined, [ce3ffe99543611253046f8fb07fc1de3],
    PUP.Optional.Crossbrowse.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\Crossbrowse, Quarantined, [9677a1f68ffbe650de8b66792cd758a8],
    PUP.Optional.HighDefAction.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\HighDefAction, Quarantined, [6ba2c7d0c7c342f46c5e205685808b75],
    PUP.Optional.Nosibay.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\Nosibay, Quarantined, [b05ddcbbf793082edcb3b53da65db64a],
    PUP.Optional.Popcornew.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\Popcornew, Quarantined, [d4394c4b23674aeca802bf36d52e38c8],
    PUP.Optional.YorkNewCin.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\YorkNewCin, Quarantined, [fb12762139513afc7b5acea842c348b8],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [49c4dfb86a20dd592aa94a0a3ec7f30d],
    PUP.Optional.CinemaPlus.C, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\ARENAHD, Quarantined, [62abf2a59eecc0768f163a38df269769],
    PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, Quarantined, [30ddb0e781090234ba7c805fad5604fc],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [57b6207784063bfb722503fab54eae52],
    PUP.Optional.CrossRider.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema PlusV21.05, Quarantined, [39d40b8c2d5d46f042b4f1019172b848],
    PUP.Optional.Spigot.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8CC9E743-9503-42DF-B064-7B2282AA7747}, Quarantined, [7598fe99434760d6d2f81ac4d033629e],
    PUP.Optional.WindApp.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\STORE\WindApp Tag, Quarantined, [9d70197e7614c76fdc4aad39d82bf10f],
    PUP.Optional.SelectionTool.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\WTOOLS\Selection Tools Tag, Quarantined, [a96416810f7bf5412437a5464db6ce32],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.OneClickCtrl.10, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
     
  11. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.Update3WebControl.4, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{909F2E0D-650B-46B9-A27D-5A893BDDF58D}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Popcornew.Update3WebControl.3, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{909F2E0D-650B-46B9-A27D-5A893BDDF58D}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{909F2E0D-650B-46B9-A27D-5A893BDDF58D}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{909F2E0D-650B-46B9-A27D-5A893BDDF58D}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ADA3F4C6-F003-41AE-968D-6C2FFF09DA28}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Popcornew.OneClickCtrl.9, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{ADA3F4C6-F003-41AE-968D-6C2FFF09DA28}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ADA3F4C6-F003-41AE-968D-6C2FFF09DA28}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{ADA3F4C6-F003-41AE-968D-6C2FFF09DA28}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A911D50F-7390-4EA2-8E00-347933672CA2}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{5AF1EF08-C77F-4491-BD3B-B18216BD72DF}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{893793A2-D19A-4D8F-9092-B2B5EDA054AB}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{5AF1EF08-C77F-4491-BD3B-B18216BD72DF}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{893793A2-D19A-4D8F-9092-B2B5EDA054AB}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{5AF1EF08-C77F-4491-BD3B-B18216BD72DF}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{893793A2-D19A-4D8F-9092-B2B5EDA054AB}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A911D50F-7390-4EA2-8E00-347933672CA2}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{A911D50F-7390-4EA2-8E00-347933672CA2}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\1DEA2C4A-8529-46b5-ACC0-C3873ED068E6, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\csrcc, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2395B860-45E4-42fd-96E6-50BA597C1C42}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9AE7A6AE-162E-44c4-9A2B-A6B4EF19909D}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E4C3E50F-5761-4BF8-95A0-939A819DF1C3}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E4C3E50F-5761-4BF8-95A0-939A819DF1C3}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E4C3E50F-5761-4BF8-95A0-939A819DF1C3}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9AE7A6AE-162E-44c4-9A2B-A6B4EF19909D}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{9AE7A6AE-162E-44c4-9A2B-A6B4EF19909D}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\Extension.Treena.1, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\Extension.Treena, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Extension.Treena, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Extension.Treena, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2395B860-45E4-42FD-96E6-50BA597C1C42}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2395B860-45E4-42FD-96E6-50BA597C1C42}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Extension.Treena.1, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Extension.Treena.1, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\CLSID\{2395B860-45E4-42FD-96E6-50BA597C1C42}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\CLSID\{2395B860-45E4-42FD-96E6-50BA597C1C42}\INPROCSERVER32, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2395B860-45E4-42FD-96E6-50BA597C1C42}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2395B860-45E4-42FD-96E6-50BA597C1C42}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2395B860-45E4-42FD-96E6-50BA597C1C42}, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{2395B860-45E4-42fd-96E6-50BA597C1C42}_is1, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],

    Registry Values: 29
    PUP.Optional.Popcornew.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Popcornew, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, Quarantined, [47c6edaac3c750e619c3c09bf70f13ed]
    PUP.Optional.SmartWeb.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SmartWeb, C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\SmartWebHelper.exe, Quarantined, [a06d3265f892cf6732f77490927026da]
    PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [d835098e2664d363396dcda56d98e21e]
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, Quarantined, [59b4cec91377191dc06a8de7c5405ba5]
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, Quarantined, [f815b2e56d1d979fa58578fc6c99b34d]
    PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [a6675146701a3105fdb4d99955b0de22]
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|shopperz, C:\Program Files\shopperz\Brito.exe, Quarantined, [ff0e14836c1e1a1c790908e6699a1ee2]
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|shopperz64, C:\Program Files\shopperz\Brito64.exe, Quarantined, [cf3ed8bf880296a0a3e0be3042c1e51b]
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{2395B860-45E4-42fd-96E6-50BA597C1C42}, C:\Program Files\shopperz\Firefox, Quarantined, [68a5e8af81099a9c3aedf8775ea7e61a]
    PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, Quarantined, [27e6f1a63159b086f2b4adc5f70e5fa1]
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\GLOBALUPDATE.EXE|AppID, {3278F5CF-48F3-4253-A6BB-004CE84AF492}, Quarantined, [a56825723f4b42f457d3d89c74917f81]
    PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATEDEV|AuCheckPeriodMs, 21600000, Quarantined, [a76645521f6b4ee84859e1fdd72c6997]
    PUP.Optional.PCTuner.C, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, Quarantined, [2ce1efa895f5ec4a664b2250ea1bdc24]
    PUP.Optional.MBot.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|mbot_gb_571, Quarantined, [1df0a9eebbcff04690bb2ad8927260a0],
    PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_us_598, Quarantined, [eb227d1a751560d6c1a8a74a26dd01ff],
    PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_us_608, Quarantined, [0eff1b7c127830065d0c26cbcd36926e],
    PUP.Optional.Shopperz.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{2395B860-45E4-42fd-96E6-50BA597C1C42}, C:\Program Files\shopperz\Firefox, Quarantined, [e528d1c62367ed49e443c5aaf90cf60a]
    PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, BBB0F2E5-03A4-4704-9AE0-44EB85611B81, Quarantined, [dd300c8b8ffb2c0a642eda91c144a15f]
    PUP.Optional.Vitruvian.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\insvc_1.10.0.14|ImagePath, "C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe", Quarantined, [87862e690b7ff93dd97fef857194c53b]
    PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\kymupiju|ImagePath, C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nsfDC74.tmp, Quarantined, [0508dfb8276395a14ca791dc9f66867a]
    PUP.Optional.MultiPlug.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\rycimizu|ImagePath, C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp, Quarantined, [a06d1e79a5e55bdbb53facc15baac43c]
    Rootkit.Agent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CSRCC|ImagePath, "C:\Program Files\shopperz\csrcc.exe", Quarantined, [7e8f7c1bbccea98dfe06ad415fa430d0]
    PUP.Optional.Coupoon.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UPDATECHECK|ImagePath, C:\Program Files (x86)\Coupoon\UpdateCheck.exe run , Quarantined, [fd10f99ed6b4221437fa8be960a5fa06]
    PUP.Optional.CinemaPlus.C, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\ARENAHD|value, 1, Quarantined, [62abf2a59eecc0768f163a38df269769]
    PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, Quarantined, [30ddb0e781090234ba7c805fad5604fc]
    PUP.Optional.PCTuner.C, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [b756b3e43c4e0135812eb4beb451867a]
    PUP.Optional.Spigot.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8CC9E743-9503-42DF-B064-7B2282AA7747}|URL, https://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=667671&p={searchTerms}, Quarantined, [7598fe99434760d6d2f81ac4d033629e]
    PUP.Optional.WindApp.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WindApp, "C:\Users\Phil is fiiiine\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup, Quarantined, [51bc791e96f4d75f2c2bf4f729da1be5]
    PUP.Optional.SelectionTools.A, HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Selection Tools, "C:\Users\Phil is fiiiine\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe" /winstartup, Quarantined, [1eefd6c13a5044f2d7a7c727ad56c23e]

    Registry Data: 0
    (No malicious items detected)

    Folders: 330
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05, Delete-on-Reboot, [27e6cccbbecc58de4fbc706cc14207f9],
    PUP.Optional.WebBar.A, C:\Users\Phil is fiiiine\AppData\Local\WebBar, Quarantined, [db32d1c6a4e6ea4c1730c9150df6b14f],
    PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar, Quarantined, [33dae3b49cee49ed2e19845af70c1be5],
    PUP.Optional.SmartWeb.A, C:\Users\Phil is fiiiine\AppData\Local\SmartWeb, Quarantined, [88853760a8e23bfb71a9924e80830ef2],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175686-3210-8032-38C04F373638, Quarantined, [2ae3efa89cee999da4c56609699c659b],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638, Quarantined, [4bc2d2c53d4dd5613b3389e60500f907],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.SuperOptimizer.A, C:\ProgramData\{c3d16043-85af-478b-c3d1-1604385a810e}, Quarantined, [52bb395e89019b9b42d4393c09fcdb25],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{4B85BA0A-3386-453D-B15F-5D81B8C9C918}, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728, Quarantined, [818ca5f2a7e349ed479debd219eac937],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\ext, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\features, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\fonts, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\social, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\it, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ar, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\bg, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\bn, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ca, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\cs, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\da, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\de, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\el, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\en_GB, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\en_US, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\es, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\es_419, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\et, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fa, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fi, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fil, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fr, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\he, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\hi, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\hr, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\hu, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\id, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ja, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ko, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\lt, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\lv, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ms, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\nb, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\nl, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\pl, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\pt_BR, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\pt_PT, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ro, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ru, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sk, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sl, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sr, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sv, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ta, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\te, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\th, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\tr, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\uk, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\vi, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\zh_CN, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\zh_TW, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Popcornew, Quarantined, [7796d1c61971a4927952d1f96e95c33d],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Popcornew\CrashReports, Quarantined, [7796d1c61971a4927952d1f96e95c33d],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew, Delete-on-Reboot, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\CrashReports, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew, Delete-on-Reboot, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\IE, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Download, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Download\{82BE43A3-77AF-4978-B081-893EF286DC00}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Download\{82BE43A3-77AF-4978-B081-893EF286DC00}\7.3.0.0, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Install, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Offline, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
     
  12. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Update\Offline\{A10FD8B5-1020-413F-A268-1746753FF271}, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Nosibay.A, C:\Users\Phil is fiiiine\AppData\Roaming\Nosibay, Quarantined, [da332176fc8ea591edf4874533d03ac6],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\content, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\content\libraries, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\content\resources, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\locale, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\locale\en-US, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\skin, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\defaults, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\defaults\preferences, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\libraries, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\resources, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Installer, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\PepperFlash, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\VisualElements, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts\libs, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\fonts, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\views, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\de, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\en, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\es, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\fr, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\it, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\pt, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\tr, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\userCode, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\icons, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\icons\actions, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\api, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\popupResource, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\img, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\background, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\content, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\libs, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\tools, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\views, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\de, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\en, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\es, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\fr, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\it, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\pt, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\tr, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\scripts, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\Temp, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cache, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\databases, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\databases\chrome-extension_ebpeonjdeofpjegbdiibbdjlgfohngee_0, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Rules, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\GPUCache, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Storage, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Session Storage, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Web Applications, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Web Applications\_crx_gfmdmibgfbecppaeocifplgmepgcpcbi, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\pnacl, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\recovery, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\recovery\101.3.26.8, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.FlashBeat.A, C:\ProgramData\FlashBeat, Quarantined, [8b823c5bbfcb8ea8b0c79b3a59aa58a8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\mocks, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\bgs, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\templates, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\scripts, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ar, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\be, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\bg, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\bn, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ca, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\cs, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\da, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\de, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\el, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\en, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\en_GB, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\es, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\et, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\fa, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\fi, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\fr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\he, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\hi, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\hr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\hu, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\id, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\it, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ja, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ko, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\lt, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\lv, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ms, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\nb, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\nl, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\pl, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\pt_BR, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\pt_PT, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ro, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ru, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sk, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sl, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sv, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\th, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\tr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\uk, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ur, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\vi, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\zh_CN, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\zh_TW, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_metadata, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14, Delete-on-Reboot, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Service, Delete-on-Reboot, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Coupoon.A, C:\Program Files (x86)\Coupoon, Delete-on-Reboot, [25e83364a8e2bb7bf02dc3167291bd43],
    PUP.Optional.Coupoon.A, C:\Program Files (x86)\Coupoon\locales, Quarantined, [25e83364a8e2bb7bf02dc3167291bd43],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\api, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\popupResource, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\userCode, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\icons, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\icons\actions, Quarantined, [fa13c7d087032610ec00065d7d897789],

    Files: 1319
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-10.exe, Delete-on-Reboot, [61acb3e4a8e22c0ad77d5bffc640ac54],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-6.exe, Delete-on-Reboot, [d33a583fd4b6a6903024c09ac83e54ac],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.exe, Delete-on-Reboot, [78951e796d1d1c1a5cf86cee2cda32ce],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe, Delete-on-Reboot, [a5685c3b88022b0be4d35b0722e4ff01],
    PUP.Optional.Coupoon.A, C:\Program Files (x86)\Coupoon\UpdateCheck.exe, Delete-on-Reboot, [e924197ea1e9092d23bcc59d0bfb1fe1],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\popcornew.exe, Delete-on-Reboot, [47c6edaac3c750e619c3c09bf70f13ed],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\PopcornewUpdate.exe, Quarantined, [ad60c1d6bfcb2c0a8358005b54b21ae6],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdate.dll, Quarantined, [36d7098ec4c6c86e8d4e15466f970000],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\psmachine.dll, Quarantined, [7f8e3a5d22682c0af8e3afac5da9b54b],
    PUP.Optional.Nova.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\3c42222d-7b75-44d7-b677-e4c89c7c3e5e.dll, Delete-on-Reboot, [de2f4b4c4f3ba3935577be54f909ad53],
    PUP.Optional.SmartWeb.A, C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\SmartWebHelper.exe, Quarantined, [a06d3265f892cf6732f77490927026da],
     
  13. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.ModGoog, C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe, Quarantined, [fe0fe4b35337e84e7fde96b4d52df30d],
    PUP.Optional.Infonaut.A, C:\Windows\System32\drivers\innfd_1_10_0_14.sys, Quarantined, [ef1e5d3af496c274bdfaacb62dd9fc04],
    PUP.Optional.PCOptimizerPro, C:\ProgramData\{c3d16043-85af-478b-c3d1-1604385a810e}\hqghumeaylnlf.exe, Quarantined, [0607f99ef298c86ef24b104db64c9f61],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\TZZF0LkcL.exe, Quarantined, [f01d8314b7d3d561cb7fa4aa6c96f30d],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\WxrsUKVLrxa85McoQ4p.exe, Quarantined, [f41981165a3054e2bbbd99be24dcb24e],
    PUP.Optional.Nova.A, C:\Program Files (x86)\Adobe\9dccfda1-d58c-48d7-acbc-c7d2ad67d11c.dll, Quarantined, [55b8f5a2800a76c000cc7d9507fb3bc5],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\Adobe\b03f3eb2-ecf3-4ee9-848a-6804140d73f7.dll, Quarantined, [9e6fa1f6aedc62d494c35013f70fdc24],
    PUP.Optional.Nova.A, C:\Program Files (x86)\b03f3eb2-ecf3-4ee9-848a-6804140d73f7\29cb003d-8997-4562-9f39-28c99c621938.dll, Quarantined, [7b92217676140e2807c54fc356ac6d93],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\b03f3eb2-ecf3-4ee9-848a-6804140d73f7\67314d7a-8280-4340-b540-aa878feb8ca9.dll, Quarantined, [65a87e192763f83ec493491a27df0cf4],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-1-7.exe, Quarantined, [d5385f3891f971c5193b14467a8c649c],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-11.exe, Quarantined, [05083e591b6f6cca361e67f326e04ab6],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-3.exe, Quarantined, [eb228017bdcdc76f1440ce8cb94da15f],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-4.exe, Quarantined, [66a703940d7d47efe86cabaff610966a],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-5.exe, Quarantined, [f01d9007e5a50c2a4a0a5cfe60a6718f],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-64.exe, Quarantined, [66a741561c6e85b11143b0aa38ced828],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633-7.exe, Quarantined, [d9341c7bfc8e96a0eb691248c54105fb],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\a5d090ca-81ba-4183-85eb-163ecd8bbdb1.dll, Quarantined, [45c86037147694a2f7608fd434d27987],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\Uninstall.exe, Quarantined, [e02d2e69a8e2ba7c193e8fd4d72fe61a],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\UninstallBrw.exe, Quarantined, [68a5c7d0afdbdd592e2696c4fd099d63],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\Uninstall.exe, Quarantined, [a36a5542f199b77ffabdf56d61a53cc4],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\1368.exe, Quarantined, [84899cfbfa90ad899db774e6ed1923dd],
    PUP.Optional.CrossBrowse, C:\Users\Phil is fiiiine\AppData\Local\Temp\1737.exe, Quarantined, [eb2296011b6fc0760df3154222e0738d],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\4851.exe, Quarantined, [e22bc9cedab059dd9cb8293175918977],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\7064.exe, Quarantined, [db326a2d4a40300681d35406ea1c6997],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\7101.exe, Quarantined, [9875158211798ea8361eef6b4db947b9],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\7420.exe, Quarantined, [2ce12b6cfb8f35011d37ce8c0afc12ee],
    PUP.Optional.Compete, C:\Users\Phil is fiiiine\AppData\Local\Temp\nsy4CDB.tmp, Quarantined, [42cb108790fa0f278eda5f0450b6cb35],
    PUP.Optional.Amonetize, C:\Users\Phil is fiiiine\AppData\Local\Temp\warhammer 40k dark eldar codex 7th edition pdf__10924_i1520102218_il794181.exe, Quarantined, [6f9eafe821690a2cafee93c76c96817f],
    PUP.Optional.OutBrowse, C:\Users\Phil is fiiiine\AppData\Local\Temp\setup.exe, Quarantined, [54b9484ffb8fc76fe93f7ae54fb3e719],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\8883.exe, Quarantined, [d03df89f9feb0036cf85b3a74abc9967],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\91.exe, Quarantined, [d4397126c8c2171f342083d7b0565aa6],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\933.exe, Quarantined, [1bf2dbbc5832f83e60f494c6ae58a858],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\9477.exe, Quarantined, [a964692e9ded69cd9cb8cf8bc145a858],
    PUP.Optional.Nosibay.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\215201522833\Bubble Dock Uninstall.exe, Quarantined, [e22b1c7b1f6b142223ceeb773ec87f81],
    PUP.Optional.Nosibay.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\2252015142749\Selection Tools Uninstall.exe, Quarantined, [8786c8cfa8e2280e35bc5210af57728e],
    PUP.Optional.Nosibay.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\2252015143311\WindApp Uninstall.exe, Quarantined, [30dd4552d1b9ae8851a08fd3bc4a8d73],
    PUP.Optional.Tuto4PC.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-2Q0A8.tmp\gentlemjmp_ieu.exe, Quarantined, [b5581f7896f47abc825bf36f55b1a858],
    PUP.Optional.Tuto4PC.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-54G9J.tmp\gentlemjmp_ieu.exe, Quarantined, [6e9f76218a00c1758b52f76b34d26e92],
    PUP.Optional.Tuto4PC.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-75B75.tmp\gentlemjmp_ieu.exe, Quarantined, [ea23c5d2f694dc5aa23b88daf610629e],
    PUP.Optional.Taplika, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-9CAE5.tmp\150.exe, Quarantined, [b05d60370189ae8804854334b94736ca],
    PUP.Optional.PriceLess.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-9CAE5.tmp\package_priceless_installer_multilang.exe, Quarantined, [8489e7b0a4e612249607055d75917987],
    PUP.Optional.WebBar.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-9CAE5.tmp\package_airwebbar_installer_multilang.exe, Quarantined, [030a296ee3a7c373b6d99bc7a165df21],
    PUP.Optional.Amonetize.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-9CAE5.tmp\package_AmNuvision_installer_multilang.exe, Quarantined, [b558593ef991aa8c762110528b7b1ee2],
    PUP.Optional.CubepileShopperz.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-9CAE5.tmp\package_CubepileShopperz_installer_multilang.exe, Quarantined, [d538682fb9d10d29ff77481a74925ca4],
    PUP.Optional.Linkey.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-9CAE5.tmp\package_linkey_pariente_installer_multilang.exe, Quarantined, [cd4035628505ec4a1a7e82e009fdf808],
    PUP.Optional.Taplika, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-DUT9D.tmp\150.exe, Quarantined, [2be2e0b7ec9ec96d88013443e31dca36],
    PUP.Optional.WebBar.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-DUT9D.tmp\package_airwebbar_installer_multilang.exe, Quarantined, [c944484f2565d85eace3c89a798d3ac6],
    PUP.Optional.Linkey.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-DUT9D.tmp\package_linkey_pariente_installer_multilang.exe, Quarantined, [8984336421695adc2d6ba6bca06627d9],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\globalupdate.exe, Quarantined, [b35a9700aedc7db9312cec5e4ab8758b],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\globalupdateBroker.exe, Quarantined, [e32a66314f3b79bd6af386c4768cfe02],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\globalupdateCrashHandler.exe, Quarantined, [19f4e7b05a30aa8ccc9135150bf73ec2],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\globalupdateOnDemand.exe, Quarantined, [22ebfd9a068467cf83da0a40c43ef30d],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\goopdate.dll, Quarantined, [ad60dabd5e2c65d1223b77d32fd3649c],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\goopdateres_en.dll, Quarantined, [d4399bfca1e9072f0459113904fee020],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\npglobalupdateUpdate4.dll, Quarantined, [080586115f2bd462fc61450553af28d8],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\psmachine.dll, Quarantined, [94795f38bbcf83b3da832d1d867c6997],
    PUP.Optional.ModGoog, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\psuser.dll, Quarantined, [47c68512543666d0b2abfb4f52b024dc],
    PUP.Optional.Taplika, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-R4HA1.tmp\150.exe, Quarantined, [7b92aaed0e7cc96d3c4d284f49b745bb],
    PUP.Optional.WebBar.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-R4HA1.tmp\package_airwebbar_installer_multilang.exe, Quarantined, [010c494e3b4f2c0ad7b8382ae0262cd4],
    PUP.Optional.Linkey.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\is-R4HA1.tmp\package_linkey_pariente_installer_multilang.exe, Quarantined, [c8453b5c3b4f71c5cbcdb2b0af5704fc],
    PUP.Optional.Amonetize, C:\Users\Phil is fiiiine\Downloads\warhammer 40k dark eldar codex 7th edition pdf_10924_i10327314_il345.exe, Quarantined, [0805b6e151399c9aeea77bbefb07bd43],
    PUP.Optional.Clara.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\bobrowser.exe, Quarantined, [f5186433a3e74fe7b145431fe32346ba],
    PUP.Optional.Clara.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\chrome_elf.dll, Quarantined, [18f5593e4743fe38cf2766fc4eb8b749],
    PUP.Optional.SmartWeb.A, C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\SmartWebApp.exe, Quarantined, [d835f3a48efc171f2306c63e36ccb64a],
    PUP.Optional.SmartWeb.A, C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\swhk.dll, Quarantined, [84893661dcae06301e0b8b790df5d030],
    PUP.Optional.Popcornew.A, C:\Windows\Installer\a33d4.msi, Quarantined, [f21babecd9b16dc9c814d18adb2b0cf4],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\bgNova.html, Quarantined, [27e6cccbbecc58de4fbc706cc14207f9],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633.crx, Quarantined, [27e6cccbbecc58de4fbc706cc14207f9],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\3c42222d-7b75-44d7-b677-e4c89c7c3e5e.crx, Quarantined, [27e6cccbbecc58de4fbc706cc14207f9],
    PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaPlus-3.2cV21.05\78df016b-ac63-4392-aae4-fd25f2dab633.xpi, Quarantined, [27e6cccbbecc58de4fbc706cc14207f9],
    PUP.Optional.WebBar.A, C:\Users\Phil is fiiiine\AppData\Local\WebBar\wb.log, Quarantined, [db32d1c6a4e6ea4c1730c9150df6b14f],
    PUP.Optional.WebBar.A, C:\Users\Phil is fiiiine\AppData\Local\WebBar\wb.user.history, Quarantined, [db32d1c6a4e6ea4c1730c9150df6b14f],
    PUP.Optional.WebBar.A, C:\Users\Phil is fiiiine\AppData\Local\WebBar\wb.user.settings, Quarantined, [db32d1c6a4e6ea4c1730c9150df6b14f],
    PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar\wb.log, Quarantined, [33dae3b49cee49ed2e19845af70c1be5],
    PUP.Optional.Clara.A, C:\claraInstaller.txt, Quarantined, [7c91f0a7a0ea45f18f7ef1efe81bf010],
    PUP.Optional.SmartWeb.A, C:\Users\Phil is fiiiine\AppData\Local\SmartWeb\uninst.lnk, Quarantined, [88853760a8e23bfb71a9924e80830ef2],
    PUP.Optional.SelectionTools.A, C:\Users\Phil is fiiiine\AppData\Roaming\Selection Tools.installation.log, Quarantined, [9974a6f12c5e88ae557b46a4da298a76],
    Rootkit.Agent.A, C:\Windows\System32\drivers\cherimoya.sys, Quarantined, [46c73f58b4d637ffc6069457f3106d93],
    PUP.Optional.BoBrowser.A, C:\Windows\System32\Tasks\Run_Bobby_Browser, Quarantined, [0c013760acdeb97d58ec7c71df246b95],
    PUP.Optional.Bubbledock.A, C:\Users\Phil is fiiiine\AppData\Roaming\Bubble Dock.boostrap.log, Quarantined, [60adf7a00b7fcc6aa4b16987867d966a],
    PUP.Optional.Bubbledock.A, C:\Users\Phil is fiiiine\AppData\Roaming\Bubble Dock.installation.log, Quarantined, [4bc291063f4b330381d4af41748ff20e],
    PUP.Optional.WindApp.A, C:\Users\Phil is fiiiine\AppData\Roaming\WindApp.boostrap.log, Quarantined, [cd40badda1e90333f46206eaa063dc24],
    PUP.Optional.WindApp.A, C:\Users\Phil is fiiiine\AppData\Roaming\WindApp.installation.log, Quarantined, [aa638e09206a290d3026935da65d16ea],
    PUP.Optional.BoostSaves.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage, Quarantined, [f01d286fee9c72c4c0aa7a763fc4bc44],
    PUP.Optional.BoostSaves.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal, Quarantined, [a766e4b375153ff75a10f1ffb44fe11f],
    PUP.Optional.SmartWeb.A, C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task, Quarantined, [7c91d7c0404a270f47ae5d95877cc838],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\{4585447E-5FD3-4281-BD73-DD57B2DCE8C5}.xpi, Quarantined, [5eafc1d65e2c6acca2dede16649f1ce4],
    PUP.Optional.Popcornew.A, C:\Windows\System32\Tasks\PopcornewUpdateTaskMachineCore, Quarantined, [4dc0c3d44b3f48eec93a946257accb35],
    PUP.Optional.Popcornew.A, C:\Windows\System32\Tasks\PopcornewUpdateTaskMachineUA, Quarantined, [6aa317800387dd59ee1510e625deda26],
    PUP.Optional.Popcornew.A, C:\Windows\Tasks\PopcornewUpdateTaskMachineCore.job, Quarantined, [3dd07f18cbbfdb5b14f0ee083dc6c13f],
    PUP.Optional.Popcornew.A, C:\Windows\Tasks\PopcornewUpdateTaskMachineUA.job, Quarantined, [58b5ebac18723afcc93bf3037c87a957],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-6, Quarantined, [f11c4a4d5d2d00362c12d632e61ec53b],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-7, Quarantined, [9479356243471a1ccc72f51307fd1ee2],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-10_user, Quarantined, [967731668cfebc7a46f84fb93ec6a35d],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-11, Quarantined, [b6570295078339fdee508d7b9c68867a],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-3, Quarantined, [74990493e1a98bab7bc37d8b31d320e0],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-4, Quarantined, [62ab57408604fb3b340a9b6dc53ff10f],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5, Quarantined, [53ba1a7d7d0d89ad142a5cac758f867a],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5_user, Quarantined, [3dd0ebac167426108cb27b8d62a28878],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-6, Quarantined, [62abf6a1d0ba61d5231b25e30bf9a759],
    PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-7, Quarantined, [22eb514652381026fd41dc2ce91b19e7],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-6.job, Quarantined, [ab62aaed335741f53d164a16c24327d9],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-1-7.job, Quarantined, [de2f3f58fb8ff442252e2f3110f5966a],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-10_user.job, Quarantined, [7b92c5d2711954e2e271055b778eff01],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-11.job, Quarantined, [da33c1d6503ae452e66d1e4207fe11ef],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-3.job, Quarantined, [8f7ed9beb2d8b08673e097c9f51033cd],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-4.job, Quarantined, [44c9cbcc9cee86b03a19213f1ee7f808],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5.job, Quarantined, [a568682f4347c96de0739fc19372cc34],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-5_user.job, Quarantined, [9578b3e48109e2546fe484dcd53008f8],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-6.job, Quarantined, [62ab504777131c1ad77cc9975da89e62],
    PUP.Optional.CrossRider.T, C:\Windows\Tasks\78df016b-ac63-4392-aae4-fd25f2dab633-7.job, Quarantined, [cd4076211e6c54e22e256cf4c4410ff1],
    PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, Quarantined, [25e80592206acc6ab2b0c7992fd632ce],
    PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, Quarantined, [d43961360387e45286dd80e024e118e8],
    PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, Quarantined, [0ffe5d3ac8c2290d4024204075906997],
     
  14. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, Quarantined, [9e6f0295f09a999d3c29ea769c6946ba],
    PUP.Optional.Vitruvian.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\vitruvian-installer-hardwareprofile-v0001, Quarantined, [68a5f3a4a6e47cba65fbb7b134d1d828],
    PUP.Optional.Vitruvian.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\vitruvian-installer-install-v0003, Quarantined, [6e9f8d0a008a4de9b3ad1e4a53b213ed],
    PUP.Optional.Vitruvian.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\vitruvian-installer-processes-v0002, Quarantined, [41ccdabdcfbb13231947363249bcbf41],
    PUP.Optional.Vitruvian.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\vitruvian-installer-scheduledtasks-v0001, Quarantined, [7598b6e1cbbf05318dd39bcd00059c64],
    PUP.Optional.Vitruvian.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\vitruvian-installer-softwareregkeys-v0002, Quarantined, [c24b26713951d36365fb6107ee1732ce],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175686-3210-8032-38C04F373638\onsq92E6.tmp, Quarantined, [2ae3efa89cee999da4c56609699c659b],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175686-3210-8032-38C04F373638\pnsq92E7.exe, Quarantined, [2ae3efa89cee999da4c56609699c659b],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175686-3210-8032-38C04F373638\rnsb92D6.exe, Quarantined, [2ae3efa89cee999da4c56609699c659b],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Local\4C4C4544-1432175686-3210-8032-38C04F373638\Uninstall.exe, Quarantined, [2ae3efa89cee999da4c56609699c659b],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\nsfDC74.tmp, Quarantined, [4bc2d2c53d4dd5613b3389e60500f907],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\hnsk912F.tmp, Quarantined, [4bc2d2c53d4dd5613b3389e60500f907],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\Uninstall.exe, Quarantined, [4bc2d2c53d4dd5613b3389e60500f907],
    PUP.Optional.MultiPlug.A, C:\Users\Phil is fiiiine\AppData\Roaming\4C4C4544-1432171864-3210-8032-38C04F373638\vnsz2C26.tmp, Quarantined, [4bc2d2c53d4dd5613b3389e60500f907],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\crossrider_statusbar.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button1.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button2.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button3.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button4.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button5.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon128.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon16.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon24.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon48.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\panelarrow-up.png, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\popup.html, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\skin.css, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\update.css, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome.manifest, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\install.rdf, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\1bd286c8d04bff11c37bcf4a3856da76.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\32a5a17926753ae36df2f4e581d517b3.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\3324a1389cd696c9adff70eb89907515.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\background.html, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\browser.xul, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\ce10e193ff5e14a26366abc7c3570fb5.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\dialog.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\e651953c44d0dc44bd78d6155da0367f.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\e699aeb0838d17590bbd6e75f119cda4.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.xul, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\search_dialog.xul, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\6f8a86915c3646c05885cacf7375d20a.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\13afab70494307b02ee17170bb25c26e.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\16a6d5b9a172c7bb3c0f6dbd07555590.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\4556c1441b9f13579abec25034854a3d.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\49730690403d4a3beab705130efde613.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\58dfcb517b880bbcb5b512442bd9f9af.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\5b0297a1ec8224721f15369263745166.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\655c7a95a1a258c8ece25c883741a594.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\6a4fa06fc998401780956b8375dfc587.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\7f8998920e79be1b061df14f09629285.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\8ca76457d6985f83b7f43738f508b913.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\8ede6b2cd264c7a3b389fb76bfd37506.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\a6f9229ccf1a101aa38a8261b9ba8050.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\cf840f41e93f35440cfb74d5d601b0f4.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\df31132334ac62d404ffc21d98c64ed9.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\f2ece6cef8733f0df6129be18f77e7a6.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\000fb92223d773d19b6a6c23498058be.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\002e6d7b88bfc4777061e795ba377c17.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1e41860c082d2707f3f55cad27739c9a.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1f3b3c83d7f1c90fad2d4aab146629df.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\228d0ed4b09439e75728720eaefec827.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\230afa48233ee786c8b7341283030c70.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\3103195a6d35428450833c10b0b3faff.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\32805e8aa64046b2002d777ffc717457.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\46848fcec80a9956d6ad6bf1ecd03bc9.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\4f118558cba33dfff0c1dfcee15c6905.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\6ce42bf375246ebc6716827fb87c4cc7.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\8094f19f3cfb07025219264dbb231041.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\af4b2255426d0d0fff24aaf76a20e48b.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\b97f626defba2a112b90a8d4057189db.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\cb1a41bb734a2be0406b4b25c9710e25.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ce6f4b98f2dffc991a71228104c0fd41.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\e113bf91ec6889ae630a849b87afd2a5.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\e79f1cd909c9c18a35b51b71f38ae164.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\fdc09e4a6ceb3c6eb9a601d6035ee844.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\fe174a5b30902de3fb30322f972c298e.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\installer.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences\prefs.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\manifest.xml, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins.json, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\273.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\102.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\119.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\13.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\14.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\16.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\17.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\178.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\179.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\180.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\184.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\195.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\200.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\220.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\221.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\223.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\231.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\232.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\234.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\242.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\246.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\252.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\253.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\260.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\262.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\263.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\281.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\288.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\289.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\300.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\334.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\335.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\339.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\345.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\354.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\356.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\376.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\380.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\385.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\389.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\390.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\391.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\397.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\4.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\47.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\64.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\7.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\78.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\9.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\91.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\background.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\extension.js, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US\translations.dtd, Quarantined, [63aa583fa8e23204c2afa3ccc83d5ea2],
    PUP.Optional.SuperOptimizer.A, C:\ProgramData\{c3d16043-85af-478b-c3d1-1604385a810e}\hqghumeaylnlf.dat, Quarantined, [52bb395e89019b9b42d4393c09fcdb25],
    PUP.Optional.SuperOptimizer.A, C:\ProgramData\{c3d16043-85af-478b-c3d1-1604385a810e}\4a35079218296190, Quarantined, [52bb395e89019b9b42d4393c09fcdb25],
    PUP.Optional.SuperOptimizer.A, C:\ProgramData\{c3d16043-85af-478b-c3d1-1604385a810e}\87c8a1c73ffd8644, Quarantined, [52bb395e89019b9b42d4393c09fcdb25],
    PUP.Optional.SuperOptimizer.A, C:\ProgramData\{c3d16043-85af-478b-c3d1-1604385a810e}\87c8a1c73ffd8644.lock, Quarantined, [52bb395e89019b9b42d4393c09fcdb25],
    PUP.Optional.MultiPlug.A, C:\Windows\System32\Tasks\Periodic Synchronize Task, Quarantined, [49c40196dfab32040a34f086ac597b85],
    PUP.Optional.MultiPlug.A, C:\Windows\Tasks\Periodic Synchronize Task.job, Quarantined, [9479ddba1d6d3cfa4bf46e08af56649c],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Brito.exe, Delete-on-Reboot, [ff0e14836c1e1a1c790908e6699a1ee2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Brito64.exe, Delete-on-Reboot, [cf3ed8bf880296a0a3e0be3042c1e51b],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Grubb.exe, Delete-on-Reboot, [eb22aaedc6c466d0058e1ad233d011ef],
    Rootkit.Agent.A, C:\Program Files\shopperz\csrcc.exe, Delete-on-Reboot, [7e8f7c1bbccea98dfe06ad415fa430d0],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdate.exe, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateBroker.exe, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateCrashHandler.exe, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateHelper.msi, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\globalupdateOnDemand.exe, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
     
  15. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, Quarantined, [61ac10876c1ef343ad1ecfeea2611ee2],
    PUP.Optional.GlobalUpdate.A, C:\Users\Phil is fiiiine\AppData\Local\Temp\comh.41728\globalupdateHelper.msi, Quarantined, [818ca5f2a7e349ed479debd219eac937],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\background.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\block.html, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\block.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\config.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\i18n.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\iconAnimation.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\include.idle.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\include.postload.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\include.preload.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\manifest.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\notification.html, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\notification.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\options.html, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\options.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\popcornew.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\popupBlocker.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\smartdisplay.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\stats.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\subscriptions.xml, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\utils.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\webrequest.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\ext\background.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\ext\common.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\ext\content.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\ext\popup.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-4.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-5.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-6.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-7.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-8.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-9.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-1.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-2.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-3.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-4.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-5.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-7.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-8.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-9.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-1.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-2.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-3.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-4.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-5.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-6.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-7.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-128.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-16-notification-critical.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-16-notification-information.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-16.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-1.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-2.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-9.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-1.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-2.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-3.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-4.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-5.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-6.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-7.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-8.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-information-9.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-32.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-48.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-critical-3.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-notification-information-6.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\icons\abp-19-whitelisted-notification-critical-8.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\jquery-ui-1.8.16.custom.css, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_flat_0_aaaaaa_40x100.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_flat_75_ffffff_40x100.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_glass_55_fbf9ee_1x400.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_glass_65_ffffff_1x400.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_glass_75_dadada_1x400.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_glass_75_e6e6e6_1x400.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_glass_95_fef1ec_1x400.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-bg_highlight-soft_75_cccccc_1x100.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-icons_222222_256x240.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-icons_2e83ff_256x240.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-icons_454545_256x240.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-icons_888888_256x240.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\css\smoothness\images\ui-icons_cd0a0a_256x240.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\js\jquery-1.7.1.min.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\jquery-ui\js\jquery-ui-1.8.16.custom.min.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\adblockplus.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\basedomain.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\compat.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\info.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\io.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\jsbn.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\publicSuffixList.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\punycode.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\rsa.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\lib\sha1.js, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\abp-icon-big.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\ajax-loader.gif, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\background-main.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\background-share.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\background.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\donate.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\firstRun.css, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\popup.css, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\popup.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\features\malware.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\features\social.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\features\tracking.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\fonts\CreteRound-Italic.otf, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\fonts\CreteRound-Regular.otf, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\social\facebook.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\social\googleplus.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\social\renren.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\social\twitter.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\skin\social\weibo.png, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\it\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ar\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\bg\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\bn\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ca\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\cs\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\da\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\de\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\el\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\en_GB\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\en_US\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\es\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\es_419\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\et\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fa\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fi\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fil\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\fr\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\he\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\hi\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\hr\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\hu\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\id\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ja\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ko\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\lt\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\lv\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ms\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\nb\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\nl\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\pl\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\pt_BR\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\pt_PT\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ro\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ru\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sk\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sl\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sr\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\sv\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\ta\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\te\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\th\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\tr\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\uk\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\vi\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\zh_CN\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\2.5_0\_locales\zh_TW\messages.json, Quarantined, [3ecf4a4d14761125bb0ffeccac57e818],
    PUP.Optional.Popcornew.A, C:\Users\Phil is fiiiine\AppData\Local\Popcornew\state, Quarantined, [7796d1c61971a4927952d1f96e95c33d],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\index, Delete-on-Reboot, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\Popcornew.crx, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\Popcornew.xpi, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\rules, Delete-on-Reboot, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Popcornew\IE\AdRotateEngine.exe, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_de.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_el.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_en-GB.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_en.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_es-419.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_es.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_et.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_fa.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_fi.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_fil.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_fr.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_gu.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
     
  16. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_hi.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_hr.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_hu.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_id.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_it.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_iw.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ja.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_kn.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ko.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_lt.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_lv.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ml.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_mr.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ms.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_nl.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_no.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_pl.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_pt-BR.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_pt-PT.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ro.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_am.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ar.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_bg.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_bn.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ca.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_cs.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_sk.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_sl.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_sr.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_sv.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_sw.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ta.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_te.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_th.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_tr.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_uk.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ur.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_vi.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_zh-CN.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_zh-TW.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\npPopcornewUpdate3.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\PopcornewCrashHandler.exe, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\PopcornewUpdate.exe, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\PopcornewUpdateBroker.exe, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\PopcornewUpdateHelper.msi, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\PopcornewUpdateOnDemand.exe, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\psuser.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_da.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_is.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\1.3.25.0\goopdateres_ru.dll, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Popcornew.A, C:\Program Files (x86)\Popcornew\Update\Download\{82BE43A3-77AF-4978-B081-893EF286DC00}\7.3.0.0\Popcornew_7.3.msi, Quarantined, [a667d2c502880b2bdcf2b31708fb3dc3],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Anneliese.exe, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Cote.bat, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\csrcc.exe, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Earlene32.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Earlene64.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\gcpum.dll, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Isaacson.dll, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Ivonne.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Ivonne64.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\nfregdrv64.exe, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Sorensen32.dll, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Sorensen64.dll, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Sturgeon64.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\tree.js, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\unins000.dat, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\unins000.exe, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Winfrey.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Winfrey64.dll, Delete-on-Reboot, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome.manifest, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\icon.png, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\install.rdf, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\{2395B860-45E4-42fd-96E6-50BA597C1C42}.xpi, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\content\main.js, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\content\main.xul, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\content\libraries\DataExchangeScript.js, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\content\resources\LocalScript.js, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\locale\en-US\overlay.dtd, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\chrome\skin\overlay.css, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\Firefox\defaults\preferences\defaults.js, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\libraries\DataExchangeScript.js, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.Shopperz.A, C:\Program Files\shopperz\resources\LocalScript.js, Quarantined, [48c5deb9a1e980b6a9b704cd2ad93ec2],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\debug.log, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\extension_list.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\master_preferences, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\VisualElementsManifest.xml, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Installer\setup.exe, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\hi.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\am.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ar.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\bg.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\bn.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ca.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\cs.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\da.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\de.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\el.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\en-GB.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\en-US.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\es-419.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\es.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\et.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\fa.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\fi.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\fil.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\fr.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\gu.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\he.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\hr.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\hu.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\id.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\it.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ja.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\kn.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ko.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\lt.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\lv.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ml.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\mr.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ms.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\nb.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\nl.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\pl.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\pt-BR.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\pt-PT.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ro.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ru.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\sk.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\sl.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\sr.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\sv.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\sw.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\ta.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\te.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\th.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\tr.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\uk.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\vi.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\zh-CN.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\Locales\zh-TW.pak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\PepperFlash\manifest.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\PepperFlash\pepflashplayer.dll, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\VisualElements\logo.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\VisualElements\smalllogo.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\Application\36.0.1985.136\VisualElements\splash-620x300.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Bloom Prefix Set, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\First Run, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Local State, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Bloom, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Cookies, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Cookies-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Csd Whitelist, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Download, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Download Whitelist, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing Extension Blacklist, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Safe Browsing IP Blacklist, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Archived History, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Archived History-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Bookmarks, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Bookmarks.bak, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cookies, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cookies-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Current Session, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Cookies, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Cookies-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Login Data, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Login Data-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Network Action Predictor, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Network Action Predictor-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Origin Bound Certs, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Origin Bound Certs-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Preferences, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\QuotaManager, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\QuotaManager-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Favicons, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Favicons-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Google Profile.ico, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\History, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\History Provider Cache, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\History-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Last Session, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\README, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Shortcuts, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Shortcuts-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Top Sites, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Top Sites-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Visited Links, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Web Data, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Web Data-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\background.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\manifest.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\acceptButton.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\amazon.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\amazon_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\arrow.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\back.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\bbc.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\bbc_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\close.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\closeWhite.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\craigslist.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\craigslist_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\cross.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\ebay.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\ebay_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\facebook.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\facebookBox.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\facebook_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\fb_handle.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\freeButton.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\globo.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
     
  17. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\globo_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\gmail.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\gmx.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\gmx_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\google+.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\google+_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\leboncoin.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\leboncoin_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\libero.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\libero_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\linkedin.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\linkedin_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\lock.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\logo1stBrowser.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\logoFacebook.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\marca.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\marca_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\mercado.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\mercado_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\milanuncios.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\milanuncios_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\msn.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\msn_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\orange.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\orange_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\outlook.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\outlook_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\pin.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\pinterest.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\pinterest_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\popupFacebook.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\previewChrome.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\separator.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\stars.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\switch_off.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\switch_on.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\transparent.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\twitter.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\twitter_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\unlock.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\Uol.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\Uol_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\web.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\web_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\wikipedia.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\wikipedia_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\yahoo.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\yahoo_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\youtube.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\youtube_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\cross_white.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\gmail_large.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\img\settings.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts\coreApp.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts\facebookSidebarController.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts\linkSliderController.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts\libs\angular-sanitize.min.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts\libs\angular.min.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\scripts\libs\sienium.remoteCoordinator.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\angular-csp.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\cssreset-min.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\facebookSidebar.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\font.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\linkSlider.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\main.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\offerscreenFacebook.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\fonts\OpenSans-Bold.woff, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\fonts\OpenSans-Light.woff, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\styles\fonts\OpenSans-Regular.woff, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\views\facebookSidebar.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\views\linkSlider.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\de\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\en\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\es\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\fr\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\it\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\pt\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\cfonhidlapoahmcjpnilgpjjmgnmnnoa\1.3.0.9509_0\_locales\tr\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\background.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\chromeCoreFilesIndex.txt, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\manifest.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\popup.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\Settings.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\manifest.xml, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\13.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\14.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\17.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\180.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\19.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\200.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\246.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\253.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\281.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\289.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\345.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\354.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\376.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\379.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\391.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\397.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\4.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\47.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\64.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\78.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\80.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\91.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\plugins\97.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\userCode\background.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\extensionData\userCode\extension.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\icons\icon128.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\icons\icon16.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\icons\icon48.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\icons\actions\1.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\52bb3c0f544457f2c672e6fc9d066443.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\85d99d0158b11bb8c8a21c8a7012dffd.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\main.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\api\33305cb387014c75db3dad3ac52700c5.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\api\48f7f3220ba228fbd92423cee48773c3.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\api\52a997357bbe37c6f8c041d6784ae387.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\api\5e2905619a312faada9554bc92f1fb4a.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\api\cf5386515f9d019ee95be00e1688bff3.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\api\pageAction.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\2ea13930e57855be1684a67f4b5e7435.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\4747cd16cd50526fdf469b2e02e14bd3.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\49335b643c23e956b0fbba3bcb6ec36c.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\4d53bc3bcf56e32edadf3e4f6e037e4a.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\4ea422c2a5d15766c6342f57fbe70459.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\552fd92696aaecd5096a2206730939d6.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\71b710a29d7f6675735b2c80d42189a6.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\7f7898d5300892ec84f0cf475f7eebad.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\808a8268b7828748f43e2d047f693c8e.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\86cd550a0e7010e87c36681444ef6b4f.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\a28f04be0ae446935683126c1a1e8712.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\afea949288e078ea740304f0d5f2a2d8.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\app_api.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\b0280da429e223a881f07f533fed3415.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\e5bbac057df8dec8d6d9fbb0c527d1dc.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\installer.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\popupResource\newPopup.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\ebpeonjdeofpjegbdiibbdjlgfohngee\1.26.39_0\js\lib\popupResource\popup.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\background.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\manifest.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\manifest_old.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\css\angular-csp.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\css\cssreset-min.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\css\followedProducts.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\css\offerscreen.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\img\arrow.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\img\closeWhite.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\img\fb_handle.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\img\logo1stBrowser.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\img\logoBeamrise.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\img\sidebar.png, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\offerscreenController.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\background\background.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\content\handle.css, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\content\handleHelper.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\content\montiera.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\content\offerscreen.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\content\scriptInjection.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\libs\angular-sanitize.min.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\libs\angular.min.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\libs\sienium.installAppAsync.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\libs\sienium.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\libs\sienium.remoteCoordinator.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\tools\analytics.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\tools\config.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\scripts\tools\tracking.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\views\adView.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\views\followedproducts.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\views\offerscreen.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\views\offershop.html, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\de\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\en\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\es\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\fr\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\it\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\pt\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\gfmdmibgfbecppaeocifplgmepgcpcbi\1.3.0.10000_0\_locales\tr\messages.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\manifest.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\backendservice.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\background.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\lunr.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\suggestionEngine.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\util.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_0\scripts\uuid.core.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\manifest.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\scripts\backendservice.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\scripts\background.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\scripts\lunr.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\scripts\suggestionEngine.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\scripts\util.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extensions\pdlpmjkeahlbfeiclkokomifjfnkghpg\1.0.0.9393_1\scripts\uuid.core.js, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cache\data_0, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cache\data_1, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cache\data_2, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cache\data_3, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Cache\index, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\databases\Databases.db, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\databases\Databases.db-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\databases\chrome-extension_ebpeonjdeofpjegbdiibbdjlgfohngee_0\1, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Rules\000003.log, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Rules\CURRENT, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Rules\LOCK, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Rules\LOG, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension Rules\MANIFEST-000002, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
     
  18. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\000005.ldb, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\000008.ldb, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\000011.ldb, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\000012.log, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\CURRENT, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\LOCK, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\LOG, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\LOG.old, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Extension State\MANIFEST-000010, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\GPUCache\data_0, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\GPUCache\data_1, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\GPUCache\data_2, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\GPUCache\data_3, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\GPUCache\index, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons\Amazon, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons\BoBrowser, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons\Facebook, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons\Hotmail, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons\Search, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons\Wikipedia, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Icons\Youtube, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\000005.ldb, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\000008.ldb, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\000012.log, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\CURRENT, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\LOCK, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\LOG, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\LOG.old, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\ebpeonjdeofpjegbdiibbdjlgfohngee\MANIFEST-000010, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\000005.ldb, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\000012.log, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\CURRENT, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\LOCK, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\LOG, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\LOG.old, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\MANIFEST-000010, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000005.ldb, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000008.log, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOCK, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG.old, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000007, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Storage\chrome-extension_ebpeonjdeofpjegbdiibbdjlgfohngee_0.localstorage, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Storage\chrome-extension_ebpeonjdeofpjegbdiibbdjlgfohngee_0.localstorage-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Session Storage\000003.log, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Session Storage\CURRENT, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Session Storage\LOCK, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Session Storage\LOG, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Session Storage\MANIFEST-000002, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Web Applications\_crx_gfmdmibgfbecppaeocifplgmepgcpcbi\Core.ico, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\Default\Web Applications\_crx_gfmdmibgfbecppaeocifplgmepgcpcbi\Core.ico.md5, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\recovery\101.3.26.8\ChromeRecovery.exe, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\recovery\101.3.26.8\manifest.fingerprint, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.BoBrowser.A, C:\Users\Phil is fiiiine\AppData\Local\BoBrowser\User Data\recovery\101.3.26.8\manifest.json, Quarantined, [4bc2e4b32763122443bd488a0ff4e719],
    PUP.Optional.FlashBeat.A, C:\ProgramData\FlashBeat\NSISHelper.dll, Quarantined, [8b823c5bbfcb8ea8b0c79b3a59aa58a8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\chrome.dat, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\First Run, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Local State, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cookies, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cookies-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Current Session, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Current Tabs, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Favicons, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Favicons-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Google Profile.ico, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\History, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\History Provider Cache, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\History-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Last Session, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Last Tabs, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Login Data, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Login Data-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Network Action Predictor, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Network Action Predictor-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Preferences, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\README, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Secure Preferences, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Shortcuts, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Shortcuts-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Top Sites, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Top Sites-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\TransportSecurity, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Visited Links, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Web Data, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Web Data-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_0, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_1, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_2, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\data_3, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000001, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000002, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000003, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000004, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000005, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000006, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000007, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000008, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000009, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_00000a, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_00000b, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_00000c, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_00000d, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_00000e, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_00000f, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000010, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000011, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000012, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\f_000013, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cache\index, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\manifest.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\options.html, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs\csl.parser.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs\eventemitter2.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs\jquery-1.5.2.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs\jquery.mustache.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs\lodash.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs\protobuf.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\libs\q.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\mocks\empty.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\mocks\ga.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\mocks\gpt.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\mocks\omniture.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\aos.panel.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\avastwrc.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\ava_connector.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\bal.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\gpb.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\ial.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\options.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\query.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\scripts\templates.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\css\extension.css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\css\settings.css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_extensiontop_orange.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\sas_logo.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\avast-logo.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icnthumbdownsmall.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icnthumbsmall.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_bug.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_check.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_checkbig.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_close.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_close_small.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_extensiontop.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_extensiontop_green.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_extensiontop_red.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_eye.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_norating_big.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_norating_big2.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_siteforward.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_thumbdown_big.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_thumblearn.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_thumbright_big.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_thumbup_big.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icn_warning.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icon128.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icon16.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icon256.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icon32.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icon48.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\icon64.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\img_bg.jpg, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\logo_avast.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
     
  19. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\logo_avastblack.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\logo_avastsmall.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_green.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_grey.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_norating.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_orange.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_red.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_thumbdown.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_thumbneutral.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\se_icn_thumbup.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switchersmall_dotgreen.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switchersmall_dotred.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switcher_dotgreen.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switcher_dotorange.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switcher_dotred.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switcher_greenbg.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switcher_orangebg.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\skin\img\switcher_redbg.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\aos.panel.html, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\bgs\logo-avast-dark.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\bgs\logo-avast-white.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\bgs\logo-avast.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\css\style.css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\css\style.modal.css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\accordeon.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\arrow-right.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\attention.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\error.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\globe.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\ok.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\serp-attention.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\serp-error.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\serp-none.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\serp-ok.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-facebook.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-gplus.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-in.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-instagram.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-pin.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-snapchat.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-twitter.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-vk.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\social-youtube.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\status-attention.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\status-none.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\status-ok.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\status-warning.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\thumbs-down.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\thumbs-up.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\icons\unknown.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\common\ui\templates\aos.control.html, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\scripts\abek.bl.crx.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\scripts\anchor.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\scripts\aos.bl.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\scripts\bs.aos.crx.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\scripts\bs.crx.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\scripts\extension.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ar\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\be\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\bg\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\bn\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ca\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\cs\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\da\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\de\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\el\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\en\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\en_GB\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\es\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\et\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\fa\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\fi\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\fr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\he\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\hi\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\hr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\hu\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\id\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\it\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ja\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ko\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\lt\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\lv\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ms\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\nb\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\nl\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\pl\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\pt_BR\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\pt_PT\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ro\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ru\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sk\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sl\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\sv\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\th\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\tr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\uk\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\ur\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\vi\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\zh_CN\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_locales\zh_TW\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\_metadata\verified_contents.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_background.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_window.js, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\manifest.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css\craw_window.css, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html\craw_window.html, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\flapper.gif, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_128.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_16.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_close.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_hover.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_maximize.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_pressed.png, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
     
  20. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW\messages.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata\verified_contents.json, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_0, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_1, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_2, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\data_3, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\GPUCache\index, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000017.ldb, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000020.ldb, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\000021.log, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\CURRENT, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\LOCK, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\LOG, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\LOG.old, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Crossbrowse.C, C:\Users\Phil is fiiiine\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Session Storage\MANIFEST-000019, Quarantined, [f5180c8b1377f3439dba14c47c8748b8],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\terms-of-service.rtf, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\buildcrx-license.txt, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\Info-ZIP-license.txt, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\JSON-simple-license.txt, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\nsJSON-license.txt, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\Nustache-license.txt, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\TaskScheduler-license.txt, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.Infonaut.A, C:\Program Files (x86)\Infonaut_1.10.0.14\3rd Party Licenses\UAC-license.txt, Quarantined, [aa637d1a8ffb0630426967713cc7dc24],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\f32eba6506567f788011777d37a5c935.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\6a0d09e896b8ad3ebade8b8bf839fd25.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\main.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\api\066f8264b96bf9714b9f7878e704e23d.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\api\21776e3aea805106a8f4a3010f10dea7.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\api\2d6425bb1be5380404db45849024faf0.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\api\8f916028d80dd4a9867dda3b5b0f5c07.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\api\e144c2ff4e9c4d203c3cd96121212c81.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\api\pageAction.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\a22abf36d235bdf3c33a69d4b59134c7.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\051390221c5be7f74da5aee455d6631a.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\182f2ead88237a78a5d0a753da494baf.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\2d2f00acf01f72913f022afe9c3d627a.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\2dc950793c5aa26f31750c660b9e7104.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\6017427be1e1e306f83ce17d2cfdb931.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\6311661aeaadf0d8ecaee8d0223eaaa8.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\7ec2bf00ae22ca2e2bc98505766e193f.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\88118893b8818614014898e52f56db6f.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\app_api.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\b056bf27154dd7879516c00ed50b67ad.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\cac13fb5dd74a39ce70a8273480eb223.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\d303dda2e94c16f061f05bb0309a6107.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\d795290ec2cd41f9b58ec7a3679aa573.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\db9c7d8e24fd288dbe42cfff8820d6fa.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\installer.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\popupResource\newPopup.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\js\lib\popupResource\popup.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\background.html, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\chromeCoreFilesIndex.txt, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\manifest.json, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\popup.html, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\Settings.json, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\manifest.xml, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins.json, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\281.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\102.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\119.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\13.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\14.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\17.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\178.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\179.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\180.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\184.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\19.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\195.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\200.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\220.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\221.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\223.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\231.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\232.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\234.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\242.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\246.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\252.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\253.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\260.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\262.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\263.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\273.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\288.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\289.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\300.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\334.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\335.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\339.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\345.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\354.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\356.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\376.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\380.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\385.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\389.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\390.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\391.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\397.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\4.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\47.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\64.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\7.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\78.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\80.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\9.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\91.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\plugins\97.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\userCode\background.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\extensionData\userCode\extension.js, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\icons\icon128.png, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\icons\icon16.png, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\icons\icon48.png, Quarantined, [fa13c7d087032610ec00065d7d897789],
    PUP.Optional.CrossRider.A, C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp\1.26.61_0\icons\actions\1.png, Quarantined, [fa13c7d087032610ec00065d7d897789],

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  21. Broni

    Broni Malware Annihilator Posts: 52,897   +344

    Please download ComboFix from Here, Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
      If the connection is not there use restore point you created prior to running Combofix.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try the following...

    Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
    iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

    Restart computer in safe mode

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    When the scan is done Notepad will open with rKill.txt log.
    NOTE. rKill.txt log will also be present on your desktop.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
     
  22. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    ComboFix 15-05-19.01 - Phil is fiiiine 23/05/2015 21:52:36.1.8 - x64
    Microsoft Windows 7 Ultimate 6.1.7601.1.1252.44.1033.18.8180.6485 [GMT 1:00]
    Running from: c:\users\Phil is fiiiine\Desktop\ComboFix.exe
    AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
    SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\windows\msdownld.tmp
    .
    .
    ((((((((((((((((((((((((( Files Created from 2015-04-23 to 2015-05-23 )))))))))))))))))))))))))))))))
    .
    .
    2015-05-23 21:02 . 2015-05-23 21:02 -------- d-----w- c:\users\user\AppData\Local\temp
    2015-05-23 16:11 . 2015-05-23 16:11 -------- d-----w- C:\RegBackup
    2015-05-23 15:51 . 2015-05-03 03:16 12214312 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3538746F-9BB1-48F4-B815-C7207E8060FA}\mpengine.dll
    2015-05-23 15:31 . 2010-11-20 12:17 314368 ----a-w- c:\windows\SysWow64\config\systemprofile\sndvol.exe
    2015-05-23 14:33 . 2009-07-14 01:14 8192 ----a-w- c:\windows\SysWow64\config\systemprofile\systray.exe
    2015-05-23 13:08 . 2015-05-23 13:08 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
    2015-05-23 13:08 . 2015-05-23 13:22 -------- d-----w- c:\programdata\RogueKiller
    2015-05-22 13:35 . 2015-05-03 03:16 12214312 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2015-05-21 14:35 . 2015-05-21 15:45 -------- d-----w- C:\FRST
    2015-05-21 13:35 . 2015-05-23 15:29 -------- d-----w- c:\program files (x86)\b03f3eb2-ecf3-4ee9-848a-6804140d73f7
    2015-05-21 12:47 . 2015-05-21 12:47 -------- d-----w- c:\windows\SysWow64\config\systemprofile\locales
    2015-05-21 01:28 . 2015-05-21 01:28 -------- d-----w- c:\users\Phil is fiiiine\AppData\Local\Geckofx
    2015-05-21 01:27 . 2015-05-21 01:28 -------- d-----w- c:\users\Phil is fiiiine\AppData\Roaming\SSN
    2015-05-19 10:43 . 2015-05-19 10:44 -------- d-----w- c:\users\Phil is fiiiine\.ebookreader
    2015-05-19 10:42 . 2015-05-19 10:42 -------- d-----w- c:\program files (x86)\Icecream Ebook Reader
    2015-05-05 14:31 . 2015-05-08 20:13 -------- d-----w- c:\users\Phil is fiiiine\AppData\Local\Razer_Inc
    2015-05-02 16:57 . 2015-05-02 16:57 -------- d-----w- c:\program files (x86)\Common Files\Java
    2015-05-02 10:38 . 2015-05-02 10:38 -------- d-----w- c:\users\Phil is fiiiine\AppData\Roaming\hott notes 4
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2015-05-23 16:01 . 2014-07-12 20:19 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
    2015-05-17 11:28 . 2013-07-16 04:00 778416 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
    2015-05-17 11:28 . 2013-07-16 04:00 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2015-05-02 16:57 . 2014-11-11 09:46 97888 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
    2015-04-14 08:37 . 2014-07-12 20:19 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
    2015-04-14 08:37 . 2014-07-12 20:19 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
    2015-04-14 08:37 . 2014-07-12 20:19 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
    2015-04-09 13:06 . 2015-04-09 13:06 82432 ----a-w- c:\users\Phil is fiiiine\AppData\Roaming\Microsoft\MSXML2\msxml4r.dll
    2015-04-09 13:06 . 2015-04-09 13:06 44544 ----a-w- c:\users\Phil is fiiiine\AppData\Roaming\Microsoft\MSXML2\msxml4a.dll
    2015-04-09 13:06 . 2015-04-09 13:06 1275392 ----a-w- c:\users\Phil is fiiiine\AppData\Roaming\Microsoft\MSXML2\msxml4.dll
    2015-03-25 21:32 . 2015-04-01 13:21 1187344 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E075ECAE-1BAE-4D7C-8E9F-703E1A7AED87}\gapaengine.dll
    2015-03-25 21:32 . 2013-06-03 14:31 1187344 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
    2015-03-20 07:22 . 2015-03-28 23:11 1061902 ----a-w- c:\windows\system32\amdocl_ld64.exe
    2015-03-20 07:22 . 2015-03-28 23:10 1187342 ----a-w- c:\windows\system32\amdocl_as64.exe
    2015-03-20 07:22 . 2015-03-28 23:10 798734 ----a-w- c:\windows\SysWow64\amdocl_ld32.exe
    2015-03-20 07:22 . 2015-03-28 23:10 995342 ----a-w- c:\windows\SysWow64\amdocl_as32.exe
    2015-03-03 13:17 . 2013-05-18 09:05 295552 ------w- c:\windows\system32\MpSigStub.exe
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Steam"="c:\program files (x86)\Steam\Steam.exe" [2015-02-18 2874048]
    "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-07-03 3673184]
    "F.lux"="c:\users\Phil is fiiiine\AppData\Local\FluxSoftware\Flux\flux.exe" [2013-10-15 1016712]
    "Save Serp Now"="c:\users\Phil is fiiiine\AppData\Roaming\SSN\updssn.exe" [2014-11-21 26112]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "FATrayAlert"="c:\program files\Alienware\Command Center\AlienSense\FATrayMon.exe" [2010-04-04 95560]
    "OSD"="c:\program files\OSD\Launch.exe" [2009-05-12 36864]
    "hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
    "Adobe Photo Downloader"="c:\program files (x86)\Adobe\Photoshop Elements 5.0\apdproxy.exe" [2006-12-22 67752]
    "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
    "AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2013-04-25 1075296]
    "Adobe Creative Cloud"="c:\program files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" [2014-03-21 2691480]
    "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-10-02 4085896]
    "DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-11-17 448856]
    "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
    "StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-11-20 767176]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-04-30 334896]
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 0 (0x0)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    "PromptOnSecureDesktop"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\FastAccess]
    2010-04-04 18:43 144712 ----a-w- c:\program files\Alienware\Command Center\AlienSense\FALogNot.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
    "LoadAppInit_DLLs"=1 (0x1)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0bootdelete
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Notification Packages REG_MULTI_SZ scecli FAPassSync
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    R2 AlienFusionService;Alienware Fusion Service;c:\program files\Alienware\Command Center\AlienFusionService.exe;c:\program files\Alienware\Command Center\AlienFusionService.exe [x]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
    R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
    R3 ALSysIO;ALSysIO;c:\users\user\AppData\Local\Temp\ALSysIO64.sys;c:\users\user\AppData\Local\Temp\ALSysIO64.sys [x]
    R3 FACAP;facap, FastAccess Video Capture;c:\windows\system32\DRIVERS\facap.sys;c:\windows\SYSNATIVE\DRIVERS\facap.sys [x]
    R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
    R3 hitmanpro37;HitmanPro 3.7 Support Driver;c:\windows\system32\drivers\hitmanpro37.sys;c:\windows\SYSNATIVE\drivers\hitmanpro37.sys [x]
    R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
    R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
    R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
    R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
    R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
    R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
    R3 t_mouse.sys;HID-compliand device;c:\windows\system32\DRIVERS\t_mouse.sys;c:\windows\SYSNATIVE\DRIVERS\t_mouse.sys [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
    R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
    R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
    R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]
    R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
    S0 aswRvrt;avast! Revert; [x]
    S0 aswVmm;avast! VM Monitor; [x]
    S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
    S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
    S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
    S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
    S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
    S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
    S2 CustomSvc;Vista Session Launcher Service;c:\program files\OSD\Service1.exe;c:\program files\OSD\Service1.exe [x]
    S2 Ds3Service;SCP DS3 Service;c:\program files\Scarlet.Crush Productions\bin\ScpService.exe;c:\program files\Scarlet.Crush Productions\bin\ScpService.exe [x]
    S2 FAService;FAService;c:\program files\Alienware\Command Center\AlienSense\FAService.exe;c:\program files\Alienware\Command Center\AlienSense\FAService.exe [x]
    S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys;c:\windows\SYSNATIVE\DRIVERS\rimspe64.sys [x]
    S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\rixdpe64.sys [x]
    S2 RzKLService;RzKLService;c:\program files (x86)\Razer\Razer Game Booster\RzKLService.exe;c:\program files (x86)\Razer\Razer Game Booster\RzKLService.exe [x]
    S2 WTabletServiceCon;Wacom Consumer Service;c:\program files\Tablet\Pen\WTabletServiceCon.exe;c:\program files\Tablet\Pen\WTabletServiceCon.exe [x]
    S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Acceler.sys;c:\windows\SYSNATIVE\DRIVERS\Acceler.sys [x]
    S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
    S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
    S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
    S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
    S3 ScpVBus;Scp Virtual Bus Driver;c:\windows\system32\DRIVERS\ScpVBus.sys;c:\windows\SYSNATIVE\DRIVERS\ScpVBus.sys [x]
    .
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
    2015-05-23 14:00 986440 ----a-w- c:\program files (x86)\Google\Chrome\Application\43.0.2357.65\Installer\chrmstp.exe
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2015-05-23 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-16 11:28]
    .
    2015-05-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-05 09:26]
    .
    2015-05-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-05 09:26]
    .
    .
    --------- X64 Entries -----------
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
    @="{472083B0-C522-11CF-8763-00608CC02F24}"
    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
    2014-10-02 15:51 634872 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
    "AlienFX Controller"="c:\program files\Alienware\Command Center\AlienwareAlienFXController.exe" [2010-05-21 63304]
    "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-02-27 558496]
    "XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184]
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    mLocal Page = c:\windows\SysWOW64\blank.htm
    TCP: DhcpNameServer = 192.168.1.254
    FF - ProfilePath - c:\users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\
    FF - prefs.js: browser.search.selectedEngine - Wikipedia (en)
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.co.uk/
    FF - prefs.js: network.proxy.type - 2
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Wow6432Node-HKCU-Run-AceWebExtensionUpdater - c:\users\Phil is fiiiine\AppData\Roaming\AceWebExtension\updater\ace_web_extension.exe
    Wow6432Node-HKLM-Run-FAStartup - (no file)
    Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
    HKLM-Run-3D BubbleSound - c:\program files\BubbleSound\3D BubbleSound.exe
    AddRemove-zz.474.mcc - c:\program files (x86)\MaxComputerCleaner\uninstall.exe
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.17"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker6"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
    @Denied: (A) (Everyone)
    .
    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
    @Denied: (A) (Everyone)
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\program files\AVAST Software\Avast\AvastSvc.exe
    c:\program files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    c:\program files\Tablet\Pen\WacomHost.exe
    .
    **************************************************************************
    .
    Completion time: 2015-05-23 22:11:23 - machine was rebooted
    ComboFix-quarantined-files.txt 2015-05-23 21:11
    .
    Pre-Run: 65,409,531,904 bytes free
    Post-Run: 66,467,823,616 bytes free
    .
    - - End Of File - - 9AF0352C953D3AAAEB600CC015AF73DD
    A36C5E4F47E84449FF07ED3517B43A31
     
  23. Broni

    Broni Malware Annihilator Posts: 52,897   +344

    Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

    • Double-click to run it. When the tool opens click Yes to disclaimer.
    • Make sure you checkmark Addition.txt box.
    • Press Scan button.
    • Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.
     
  24. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-05-2015 01
    Ran by Phil is fiiiine (administrator) on M17X on 23-05-2015 23:28:14
    Running from C:\Users\Phil is fiiiine\Desktop
    Loaded Profiles: Phil is fiiiine (Available Profiles: user & Phil is fiiiine)
    Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
    Internet Explorer Version 10 (Default browser not detected!)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
    (AMD) C:\Windows\System32\atiesrxx.exe
    (Sensible Vision ) C:\Program Files\Alienware\Command Center\AlienSense\FAService.exe
    (AMD) C:\Windows\System32\atieclxx.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    () C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    () C:\Program Files\OSD\Service1.exe
    (Scarlet.Crush Productions) C:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
    (Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
    (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
    (Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM-x32\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1281512 2013-01-27] (Microsoft Corporation)
    HKLM-x32\...\Run: [AlienFX Controller] => C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe [63304 2010-05-21] (Alienware Corporation)
    HKLM-x32\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
    HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
    HKLM-x32\...\Run: [FATrayAlert] => C:\Program Files\Alienware\Command Center\AlienSense\FATrayMon.exe [95560 2010-04-04] (Sensible Vision )
    HKLM-x32\...\Run: [OSD] => c:\Program Files\OSD\Launch.exe [36864 2009-05-12] (HH)
    HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
    HKLM-x32\...\Run: [Adobe Photo Downloader] => C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\apdproxy.exe [67752 2006-12-22] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2691480 2014-03-21] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-10-02] (AVAST Software)
    HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
    HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
    HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
    Winlogon\Notify\FastAccess: C:\Program Files\Alienware\Command Center\AlienSense\FALogNot.dll [2010-04-04] ()
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2874048 2015-02-19] (Valve Corporation)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [F.lux] => C:\Users\Phil is fiiiine\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Run: [Save Serp Now] => C:\Users\Phil is fiiiine\AppData\Roaming\SSN\updssn.exe [26112 2014-11-21] ()
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Policies\system: [LogonHoursAction] 2
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
    Lsa: [Notification Packages] scecli FAPassSync
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-10-02] (AVAST Software)
    BootExecute: autocheck autochk * bootdelete
    GroupPolicyUsers\S-1-5-21-2075418120-132197448-404415077-1003\User: Group Policy Restriction detected <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-2075418120-132197448-404415077-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
    BHO-x32: No Name -> {0347C33E-8762-4905-BF09-768834316C61} -> No File
    BHO-x32: No Name -> {326E768D-4182-46FD-9C16-1449A49795F4} -> No File
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-02] (Oracle Corporation)
    BHO-x32: No Name -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> No File
    BHO-x32: No Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> No File
    BHO-x32: No Name -> {DA5BCE70-D057-4D63-943D-5F3927EC59F1} -> No File
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-02] (Oracle Corporation)
    BHO-x32: No Name -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> No File
    Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

    FireFox:
    ========
    FF ProfilePath: C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default
    FF DefaultSearchEngine: Wikipedia (en)
    FF SelectedSearchEngine: Wikipedia (en)
    FF Homepage: hxxp://www.google.co.uk/
    FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
    FF NetworkProxy: "type", 2
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-17] ()
    FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
    FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-05-18] (Microsoft Corporation)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-05-23] (Wacom)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
    FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-17] ()
    FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
    FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
    FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
    FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-02] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-02] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-05-18] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2012-05-23] (Wacom)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
    FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CrazyTalk4Native.dll [2008-10-28] (C3D)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctdomemhelper.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctframeplayerobject.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctplayerobject.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\imagickrt.dll [2008-10-28] (BEXTech)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npRLCT4Player.dll [2008-10-28] ( )
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\rlcontentclass.dll [2008-10-28] (Reallusion Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLMusicPacker.dll [2008-10-28] ()
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLMusicUnpacker.dll [2008-10-28] ()
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLVoicePacker.dll [2008-10-28] ()
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\RLVoiceUnpacker.dll [2008-10-28] ()
    FF Extension: ProxMate - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-09-25]
    FF Extension: Flash Control - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\jid1-sNL73VCI4UB0Fw@jetpack.xpi [2015-03-19]
    FF Extension: Adblock Plus - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-07-16]
    FF Extension: Greasemonkey - C:\Users\Phil is fiiiine\AppData\Roaming\Mozilla\Firefox\Profiles\ai80rkp0.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-09-22]
    FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-07-06]
    FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-08-11]
    FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

    Chrome:
    =======
    CHR Profile: C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Docs) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-05]
    CHR Extension: (Google Drive) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-05]
    CHR Extension: (YouTube) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-05]
    CHR Extension: (Adblock Plus) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-07-05]
    CHR Extension: (Google Search) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-05]
    CHR Extension: (Session Buddy) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2013-07-06]
    CHR Extension: (Bookmark Manager) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-29]
    CHR Extension: (Avast Online Security) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-16]
    CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-21]
    CHR Extension: (FlashControl) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfidmkgnfgnkihnjeklbekckimkipmoe [2015-01-23]
    CHR Extension: (Gmail) - C:\Users\Phil is fiiiine\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-05]
    CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-23]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 AdobeActiveFileMonitor5.0; C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe [108712 2006-12-22] ()
    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-02] (AVAST Software)
    R2 CustomSvc; C:\Program Files\OSD\Service1.exe [13312 2009-02-20] () []
    R2 Ds3Service; C:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe [388352 2013-05-05] (Scarlet.Crush Productions)
    R2 FAService; C:\Program Files\Alienware\Command Center\AlienSense\FAService.exe [2409800 2010-04-04] (Sensible Vision )
    R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) []
    R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) []
    R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) []
    S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) []
    S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) []
    R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
    S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) []
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
    R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-23] ()
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-23] (Avast Software s.r.o.)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-23] (Avast Software s.r.o.)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-23] ()
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-23] (Avast Software s.r.o.)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-23] (Avast Software s.r.o.)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-23] (Avast Software s.r.o.)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-23] ()
    R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50464 2014-06-25] (AVG Technologies)
    R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-07-06] (Disc Soft Ltd)
    S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-07-12] ()
    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
    S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-05-23] (Malwarebytes Corporation)
    S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
    S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
    R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
    U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-05-23] ()
    S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
    S3 ALSysIO; \??\C:\Users\user\AppData\Local\Temp\ALSysIO64.sys [X]
    S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
    S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    S3 wacommousefilter; system32\DRIVERS\wacommousefilter.sys [X]
    S3 wacomvhid; system32\DRIVERS\wacomvhid.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-05-23 23:28 - 2015-05-23 23:28 - 00024317 _____ () C:\Users\Phil is fiiiine\Desktop\FRST.txt
    2015-05-23 23:27 - 2015-05-23 23:27 - 00000000 ____D () C:\Users\Phil is fiiiine\Desktop\FRST-OlderVersion
    2015-05-23 22:23 - 2015-05-23 22:23 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
    2015-05-23 22:23 - 2015-05-23 22:23 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
    2015-05-23 22:23 - 2014-11-22 11:30 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\asw97F3.tmp
    2015-05-23 22:23 - 2014-10-02 17:00 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswB0B6.tmp
    2015-05-23 22:23 - 2014-10-02 16:51 - 00224896 _____ () C:\Windows\system32\Drivers\aswB3A4.tmp
    2015-05-23 22:23 - 2014-10-02 16:51 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\asw9C38.tmp
    2015-05-23 22:23 - 2014-10-02 16:51 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswB6D0.tmp
    2015-05-23 22:23 - 2014-10-02 16:51 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswA5CC.tmp
    2015-05-23 22:23 - 2014-10-02 16:51 - 00065776 _____ () C:\Windows\system32\Drivers\aswABD5.tmp
    2015-05-23 22:23 - 2014-10-02 16:51 - 00029208 _____ () C:\Windows\system32\Drivers\aswA119.tmp
    2015-05-23 22:11 - 2015-05-23 22:11 - 00022203 _____ () C:\ComboFix.txt
    2015-05-23 21:49 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
    2015-05-23 21:49 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
    2015-05-23 21:49 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
    2015-05-23 21:49 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
    2015-05-23 21:49 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
    2015-05-23 21:49 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
    2015-05-23 21:49 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
    2015-05-23 21:49 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
    2015-05-23 20:59 - 2015-05-23 22:11 - 00000000 ____D () C:\Qoobox
    2015-05-23 20:58 - 2015-05-23 22:10 - 00000000 ____D () C:\Windows\erdnt
    2015-05-23 20:57 - 2015-05-23 20:57 - 05627500 ____R (Swearware) C:\Users\Phil is fiiiine\Desktop\ComboFix.exe
    2015-05-23 17:11 - 2015-05-23 17:11 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-M17X-Windows-7-Ultimate-(64-bit).dat
    2015-05-23 17:11 - 2015-05-23 17:11 - 00000000 ____D () C:\RegBackup
    2015-05-23 17:09 - 2015-05-23 17:09 - 02720636 _____ (Thisisu) C:\Users\Phil is fiiiine\Downloads\JRT.exe
    2015-05-23 16:48 - 2015-05-23 16:48 - 02223104 _____ () C:\Users\Phil is fiiiine\Downloads\adwcleaner_4.205.exe
    2015-05-23 15:11 - 2015-05-23 15:12 - 00421896 _____ () C:\Users\Phil is fiiiine\Downloads\Unconfirmed 752093.crdownload
    2015-05-23 15:11 - 2015-05-23 15:12 - 00421896 _____ () C:\Users\Phil is fiiiine\Downloads\Unconfirmed 704492.crdownload
    2015-05-23 15:10 - 2015-05-23 15:12 - 00421896 _____ () C:\Users\Phil is fiiiine\Downloads\Unconfirmed 396237.crdownload
    2015-05-23 14:26 - 2015-05-23 14:27 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Phil is fiiiine\Downloads\mbam-setup-2.1.6.1022.exe
    2015-05-23 14:08 - 2015-05-23 14:22 - 00000000 ____D () C:\ProgramData\RogueKiller
    2015-05-23 14:08 - 2015-05-23 14:08 - 16986200 _____ () C:\Users\Phil is fiiiine\Downloads\RogueKiller.exe
    2015-05-23 14:08 - 2015-05-23 14:08 - 00035064 _____ () C:\Windows\system32\Drivers\TrueSight.sys
    2015-05-22 14:20 - 2015-05-22 15:17 - 00002068 _____ () C:\Users\Phil is fiiiine\Desktop\Continue GamesDesktop Uninstaller.lnk
    2015-05-22 14:17 - 2015-05-22 14:17 - 00000983 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    2015-05-22 14:17 - 2015-05-22 14:17 - 00000971 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
    2015-05-21 16:04 - 2015-05-21 16:45 - 00065692 _____ () C:\Users\Phil is fiiiine\Desktop\Addition 1.txt
    2015-05-21 15:41 - 2015-05-21 16:45 - 00059898 _____ () C:\Users\Phil is fiiiine\Desktop\FRST 1.txt
    2015-05-21 15:35 - 2015-05-23 23:28 - 00000000 ____D () C:\FRST
    2015-05-21 15:34 - 2015-05-23 23:27 - 02108416 _____ (Farbar) C:\Users\Phil is fiiiine\Desktop\FRST64.exe
    2015-05-21 14:35 - 2015-05-23 16:29 - 00000000 ____D () C:\Program Files (x86)\b03f3eb2-ecf3-4ee9-848a-6804140d73f7
    2015-05-21 14:35 - 2015-05-23 13:56 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
    2015-05-21 14:32 - 2015-05-21 14:32 - 00003638 _____ () C:\Windows\System32\Tasks\Norwood
    2015-05-21 13:51 - 2015-05-21 13:53 - 00688992 ____R (Swearware) C:\Users\Phil is fiiiine\Downloads\dds.scr
    2015-05-21 13:47 - 2015-05-23 16:32 - 00000112 _____ () C:\ProgramData\kS2l7aocg.dat
    2015-05-21 03:10 - 2015-05-23 22:03 - 00635316 _____ () C:\Windows\PFRO.log
    2015-05-21 02:34 - 2015-05-21 02:34 - 00003238 _____ () C:\Users\Phil is fiiiine\Desktop\MiniGet Smart Downloader.lnk
    2015-05-21 02:31 - 2009-06-10 22:00 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hp.bak
    2015-05-21 02:29 - 2015-05-21 02:30 - 00000909 _____ () C:\Windows\SysWOW64\${LOGFILE}
    2015-05-21 02:28 - 2015-05-21 02:28 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Geckofx
    2015-05-21 02:27 - 2015-05-21 02:28 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\SSN
    2015-05-21 02:15 - 2015-05-21 02:15 - 00000000 ____D () C:\Users\Phil is fiiiine\Downloads\Warhammer 40K - 7th Edition - Codex Space Wolves
    2015-05-20 20:40 - 2015-05-23 22:04 - 00000728 _____ () C:\Windows\setupact.log
    2015-05-20 20:40 - 2015-05-20 20:40 - 00000000 _____ () C:\Windows\setuperr.log
    2015-05-19 11:51 - 2015-05-19 11:55 - 00000000 ____D () C:\Users\Phil is fiiiine\Downloads\Warhammer 40k - 7th Edition Codex - Grey Knights (New Version)
    2015-05-19 11:43 - 2015-05-19 11:44 - 00000000 ____D () C:\Users\Phil is fiiiine\.ebookreader
    2015-05-19 11:42 - 2015-05-19 11:42 - 17631232 _____ (Icecream Apps ) C:\Users\Phil is fiiiine\Downloads\ebook_reader_setup.exe
    2015-05-19 11:42 - 2015-05-19 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Ebook Reader
    2015-05-19 11:42 - 2015-05-19 11:42 - 00000000 ____D () C:\Program Files (x86)\Icecream Ebook Reader
    2015-05-19 11:15 - 2015-05-19 11:46 - 00000000 ____D () C:\Users\Phil is fiiiine\Downloads\Warhammer 40k - 7th Edition Codex - Necrons
    2015-05-17 02:34 - 2015-05-17 02:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2015-05-16 11:57 - 2015-05-23 22:08 - 00232593 _____ () C:\Windows\WindowsUpdate.log
    2015-05-13 10:32 - 2015-05-13 10:32 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2015-05-05 15:31 - 2015-05-08 21:13 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Razer_Inc
    2015-05-02 17:56 - 2015-05-02 17:56 - 00561248 _____ (Oracle Corporation) C:\Users\Phil is fiiiine\Downloads\jxpiinstall.exe
    2015-05-02 11:38 - 2015-05-02 11:38 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\hott notes 4
    2015-04-27 00:23 - 2015-04-27 00:23 - 00002150 _____ () C:\Users\Phil is fiiiine\Desktop\Shadow Of Mordor.lnk

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-05-23 23:02 - 2015-03-20 00:37 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
    2015-05-23 22:39 - 2013-07-05 10:26 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
    2015-05-23 22:24 - 2013-07-06 07:23 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
    2015-05-23 22:23 - 2014-10-02 16:51 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
    2015-05-23 22:23 - 2014-10-02 16:51 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
    2015-05-23 22:23 - 2013-07-06 07:23 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
    2015-05-23 22:23 - 2013-07-06 07:23 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
    2015-05-23 22:23 - 2013-07-06 07:23 - 00272248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
    2015-05-23 22:23 - 2013-07-06 07:23 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
    2015-05-23 22:23 - 2013-07-06 07:23 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
    2015-05-23 22:23 - 2013-07-06 07:23 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
    2015-05-23 22:11 - 2009-07-14 05:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2015-05-23 22:11 - 2009-07-14 05:45 - 00022704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2015-05-23 22:11 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
    2015-05-23 22:05 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
    2015-05-23 22:04 - 2013-07-05 10:26 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
    2015-05-23 22:04 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
    2015-05-23 21:46 - 2013-07-05 23:54 - 00000000 ____D () C:\Program Files (x86)\Steam
    2015-05-23 17:01 - 2014-07-12 21:19 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
    2015-05-23 16:55 - 2014-07-12 20:59 - 00000000 ____D () C:\AdwCleaner
    2015-05-23 16:29 - 2013-07-05 11:51 - 00000000 ____D () C:\Program Files (x86)\Adobe
    2015-05-23 16:17 - 2013-07-05 10:27 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
    2015-05-23 14:28 - 2014-07-12 21:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2015-05-23 14:28 - 2014-07-12 21:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
    2015-05-23 13:57 - 2013-07-05 23:18 - 00001413 _____ () C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    2015-05-22 14:31 - 2015-03-27 01:26 - 00000000 ____D () C:\Windows\system32\appmgmt
    2015-05-22 13:08 - 2015-03-20 04:44 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\.ACEStream
    2015-05-22 13:08 - 2015-03-20 04:38 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\ACEStream
    2015-05-19 11:43 - 2013-07-05 23:18 - 00000000 ____D () C:\Users\Phil is fiiiine
    2015-05-19 11:39 - 2015-04-10 22:04 - 00027005 _____ () C:\Users\Phil is fiiiine\Downloads\cr3.log
    2015-05-19 11:39 - 2015-04-10 22:04 - 00000000 ____D () C:\Users\Phil is fiiiine\.cr3
    2015-05-17 12:28 - 2015-03-20 00:37 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
    2015-05-17 12:28 - 2013-10-11 23:52 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Adobe
    2015-05-17 12:28 - 2013-07-16 05:00 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
    2015-05-17 12:28 - 2013-07-16 05:00 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
    2015-05-17 12:27 - 2013-07-05 10:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
    2015-05-16 17:34 - 2013-07-05 10:26 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
    2015-05-16 17:34 - 2013-07-05 10:26 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
    2015-05-16 17:24 - 2015-03-22 15:01 - 00000000 ____D () C:\_acestream_cache_
    2015-05-13 10:33 - 2013-07-05 11:52 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
    2015-05-13 10:31 - 2013-07-16 05:00 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\Adobe
    2015-05-09 23:23 - 2015-03-19 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
    2015-05-09 23:23 - 2014-04-14 13:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
    2015-05-09 23:23 - 2014-04-14 13:28 - 00000000 ____D () C:\Program Files (x86)\Razer
    2015-05-09 23:23 - 2013-11-17 12:56 - 00000000 ____D () C:\Users\TEMP
    2015-05-09 23:23 - 2013-08-24 05:01 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Roaming\DivX
    2015-05-09 23:23 - 2013-08-24 04:55 - 00000000 ____D () C:\Program Files (x86)\DivX
    2015-05-09 23:23 - 2013-08-14 04:36 - 00000000 ____D () C:\Program Files\DivX
    2015-05-09 23:23 - 2013-08-14 04:33 - 00000000 ____D () C:\ProgramData\DivX
    2015-05-09 23:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
    2015-05-09 23:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
    2015-05-09 23:22 - 2015-04-02 05:49 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Popcorn-Time
    2015-05-09 23:22 - 2014-04-14 13:28 - 00000000 ____D () C:\ProgramData\Razer
    2015-05-05 15:33 - 2013-07-18 05:01 - 00000000 ____D () C:\Users\Phil is fiiiine\AppData\Local\Razer
    2015-05-05 15:31 - 2013-07-18 05:01 - 00000000 ____D () C:\Users\Phil is fiiiine\Documents\Razer
    2015-05-02 17:58 - 2014-11-11 10:46 - 00000000 ____D () C:\Program Files (x86)\Java
    2015-05-02 17:58 - 2014-05-02 22:46 - 00000000 ____D () C:\ProgramData\Oracle
    2015-05-02 17:57 - 2014-11-11 10:46 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
    2015-05-01 23:46 - 2015-03-28 03:48 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
    2015-05-01 20:13 - 2009-07-14 06:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

    ==================== Files in the root of some directories =======

    2013-07-07 13:11 - 2014-06-25 18:44 - 0003730 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
    2013-08-11 17:41 - 2013-08-11 17:55 - 0001261 _____ () C:\ProgramData\hpzinstall.log
    2015-05-21 13:47 - 2015-05-23 16:32 - 0000112 _____ () C:\ProgramData\kS2l7aocg.dat
    2014-01-18 07:00 - 2014-01-18 07:00 - 0000040 _____ () C:\ProgramData\ra3.ini

    Files to move or delete:
    ====================
    C:\ProgramData\kS2l7aocg.dat


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2015-05-14 14:33

    ==================== End of log ============================
     
  25. PhilM

    PhilM TS Rookie Topic Starter Posts: 39

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-05-2015 01
    Ran by Phil is fiiiine at 2015-05-23 23:29:08
    Running from C:\Users\Phil is fiiiine\Desktop
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-2075418120-132197448-404415077-500 - Administrator - Disabled)
    Guest (S-1-5-21-2075418120-132197448-404415077-501 - Limited - Disabled)
    Phil is fiiiine (S-1-5-21-2075418120-132197448-404415077-1003 - Administrator - Enabled) => C:\Users\Phil is fiiiine
    user (S-1-5-21-2075418120-132197448-404415077-1001 - Administrator - Enabled) => C:\Users\user

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Microsoft Security Essentials (Enabled - Up to date) {3F839487-C7A2-C958-E30C-E2825BA31FB5}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Microsoft Security Essentials (Enabled - Up to date) {84E27563-E198-C6D6-D9BC-D9F020245508}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
    AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
    Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
    Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
    Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
    Adobe Photoshop Elements 5.0 (HKLM-x32\...\Adobe Photoshop Elements 5) (Version: 5.0 - Adobe Systems Inc.)
    Adobe Reader XI (11.0.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
    Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
    Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
    AIO_CDA_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    AIO_CDA_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    AIO_Scan (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
    ArtRage 2.2 (HKLM-x32\...\ArtRage_is1) (Version: - Ambient Design Ltd)
    ArtRage 4 (HKLM-x32\...\ArtRage 4 4.0.2.1) (Version: 4.0.2.1 - Ambient Design)
    ArtRage 4 (x32 Version: 4.0.2.1 - Ambient Design) Hidden
    ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.11 Beta2 - Michael Tippach)
    Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software)
    Bamboo Link (HKLM-x32\...\InstallShield_{947C41AC-5926-41D6-9139-D41ABE9173AE}) (Version: 1.0.2008.0530 - Invu)
    Bamboo Link (x32 Version: 1.0.2008.0530 - Invu) Hidden
    BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
    C3100 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
    c3100_Help (x32 Version: 82.0.256.000 - Hewlett-Packard) Hidden
    CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
    CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version: - dvd8n)
    Command Center (HKLM-x32\...\InstallShield_{AE1E0DFB-A3D9-451C-AA7F-46FD390400D4}) (Version: 2.5.54.0 - Alienware Corp.)
    Command Center (Version: 2.5.54.0 - Alienware Corp.) Hidden
    Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
    Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
    CPUID HWMonitor 1.23 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
    DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0335 - Disc Soft Ltd)
    Dark Fall - Lights Out - Directors Cut Version 6.0 (HKLM-x32\...\Dark Fall - Lights Out - Directors Cut_is1) (Version: 6.0 - Darkling Room)
    Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
    Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 1.40.05 - Creative Technology Ltd)
    Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
    DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
    DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
    DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
    Dolphin x86 (HKLM-x32\...\Dolphin x86) (Version: 4.0.2 - Dolphin Development Team)
    f.lux (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Flux) (Version: - )
    Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
    FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
    FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.65 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
    GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.9.220 - SurfRight B.V.)
    hott notes 4 (HKLM-x32\...\hott notes 4) (Version: 4.1 - Joel Riley)
    HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
    HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
    HP Photosmart All-In-One Driver Software 13.0 Rel. A (HKLM\...\{17016DA1-F040-4032-BD36-34DD317BC9D5}) (Version: 13.0 - HP)
    HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
    HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
    HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
    HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
    HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
    HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
    HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
    HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Icecream Ebook Reader version 1.60 (HKLM-x32\...\{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1) (Version: 1.60 - Icecream Apps)
    IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line)
    Intel(R) Network Connections 14.8.43.0 (HKLM\...\PROSetDX) (Version: 14.8.43.0 - Intel)
    Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
    JBidwatcher 2.5.5 (HKLM-x32\...\JBidwatcher_0) (Version: 2.5.5 - CyberFOX Software, Inc)
    League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
    League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
    Live! Cam Avatar Creator (HKLM-x32\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.3009.1 - Creative Technology Ltd)
    MaintenanceService 1.0.0 (HKLM-x32\...\zz.474.mcc) (Version: 1.0.0 - CSDI)
    Malwarebytes Anti-Malware version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
    MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
    Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE (HKLM-x32\...\{F112F66E-25CA-42DD-983C-6118EB38F606}) (Version: 3.0.89.0 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
    Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.2.223.1 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
    Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
    Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
    Middle Earth SOM GPR Repack version 1.0.0.0 (HKLM-x32\...\Middle Earth SOM GPR Repack_is1) (Version: 1.0.0.0 - Warner Bros. Interactive)
    Mozilla Firefox 38.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 en-US)) (Version: 38.0.1 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.2 - Mozilla)
    Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
    OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
    OpenAL (HKLM-x32\...\OpenAL) (Version: - )
    OpenOffice 4.0.1 (HKLM-x32\...\{24B89186-2A56-4D28-B930-6F4FCF224E2F}) (Version: 4.01.9714 - Apache Software Foundation)
    PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
    Popcorn Time (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Popcorn Time) (Version: - Popcorn Official)
    qBittorrent 3.1.12 (HKLM-x32\...\qBittorrent) (Version: 3.1.12 - The qBittorrent project)
    Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.2.45.0 - Razer Inc.)
    RollerCoaster Tycoon 3 Platinum (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - Atari)
    Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
    Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
    SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
    SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
    SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
    SSN (HKU\S-1-5-21-2075418120-132197448-404415077-1003\...\Save Serp Now) (Version: 1.05 - SSN Corp)
    Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
    Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
    swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
    System Requirements Lab (HKLM-x32\...\{A92D0DBB-834A-4CAD-A434-F2232C692516}) (Version: 6.1.4.0 - Husdawg, LLC)
    Tablet (HKLM-x32\...\Tablet Driver) (Version: - Wacom Technology Corp.)
    The Sims 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.797.20 - Electronic Arts)
    The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.63.5 - Electronic Arts)
    The Sims™ 3 Ambitions (HKLM-x32\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
    The Sims™ 3 Into the Future (HKLM-x32\...\{A0BBD6C7-B546-4048-B33A-F21F5C9F5B09}) (Version: 21.0.150 - Electronic Arts)
    The Sims™ 3 Island Paradise (HKLM-x32\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
    The Sims™ 3 Pets (HKLM-x32\...\{C12631C6-804D-4B32-B0DD-8A496462F106}) (Version: 10.0.96 - Electronic Arts)
    The Sims™ 3 World Adventures (HKLM-x32\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
    Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
    TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
    TreeSize Professional 5.3.1 (HKLM-x32\...\TreeSize Professional_is1) (Version: 5.3.1 - JAM Software)
    UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
    VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
    Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.2-1 - Wacom Technology Corp.)
    Warhammer® 40,000™: Dawn of War® II - Chaos Rising™ (HKLM-x32\...\Steam App 20570) (Version: - Relic Entertainment)
    WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
    WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.2 - Wacom Technology Corp.)
    WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.2 - Wacom Technology Corp.)
    Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
    WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
    yWriter5 (HKLM-x32\...\yWriter5_is1) (Version: - Spacejock Software)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== Restore Points =========================

    19-05-2015 10:54:59 Windows Update
    22-05-2015 14:05:57 Windows Update
    23-05-2015 22:22:20 avast! antivirus system restore point

    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-14 03:34 - 2015-05-23 22:05 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
    127.0.0.1 localhost

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {03789C6D-844D-43A6-A685-569119BF696E} - System32\Tasks\{291652F2-BA7A-468F-8DDE-D33B529A8CCC} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {0B1FAE48-631D-46BA-8AA6-7443A9866B54} - System32\Tasks\AdobeAAMUpdater-1.0-M17X-user => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
    Task: {12FDB8A6-13E5-4844-8873-162BF068DC65} - System32\Tasks\{4638D490-2275-465C-A472-4787BB453518} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {17C9A8CE-B0DA-4C96-8874-0105454D8FB9} - \Optimizer Pro Schedule No Task File <==== ATTENTION
    Task: {24B890F9-5A94-49E3-BFBB-49A526DD0189} - System32\Tasks\{94327FFB-F200-4595-9224-200DB61D98BB} => pcalua.exe -a "C:\Users\user\Documents\EA Games\The Sims 2 extras\MTS\Hacks\MaKeSound.exe" -d "C:\Users\user\Documents\EA Games\The Sims 2 extras\MTS\Hacks"
    Task: {24EC68FF-CBA7-4493-A364-E9B0D04FA261} - System32\Tasks\Norwood => C:\Program Files\shopperz\Cote.bat
    Task: {359B2F49-9E24-4B3B-88E3-844E33FB9464} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-05] (Google Inc.)
    Task: {3C10899E-71D8-4ABC-BB30-78D6179BA9CE} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe
    Task: {3C595593-7E33-44D4-A3D4-3CA4631B74E3} - System32\Tasks\{CBDE6CD8-3A0B-42D8-9EEA-BC40BCB75B33} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {3C71FD55-DAE5-4562-B315-51F597FC3EF0} - System32\Tasks\{B3D7F787-3543-48FD-BCB5-8350645CF254} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {40774CE8-3B3D-40DB-9DFE-D5D3E9B3DAB8} - System32\Tasks\{A5995E6D-35AF-4428-9145-3B0A22443D6B} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {73F3BB95-137F-4BF8-A233-1D673F8019B3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-05-23] (Avast Software s.r.o.)
    Task: {88AD9682-D7FE-47BF-8CA5-7B532CE01783} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
    Task: {9099AD5F-BD87-4C73-AC73-EF012669C265} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-17] (Adobe Systems Incorporated)
    Task: {9682C460-7112-480E-834E-F85A902CF83A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
    Task: {9EB4BF07-41B2-4829-8BEB-D4F8EC1191C1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-05] (Google Inc.)
    Task: {A5317ECA-F64D-48CA-A61D-62EB45C81959} - System32\Tasks\{1FD0BD35-C80D-44E4-9BAF-C159A6BFE4BA} => pcalua.exe -a E:\dell\drivers\R240771\R240771\OSD_Setup.exe -d E:\dell\drivers\R240771\R240771
    Task: {BA86FF2C-6C17-4A97-9209-19CF1A8A4573} - System32\Tasks\{481D234E-47C0-4466-8EC4-3223545972E9} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {C376D369-1CA3-41C8-B9D7-C1E4F20F4DB4} - System32\Tasks\{352167B4-6C4C-4BF9-B81D-DAE2F9701CE5} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {D6B4066D-3B4A-4C23-BC63-B0C88CDE1414} - System32\Tasks\{6D3222E2-1F7C-4DBD-97DE-2BC4CEA455E4} => C:\Riot Games\League of Legends\lol.launcher.exe [2014-01-21] ()
    Task: {D74AAA9F-6B13-4823-8090-C6F5F4BF0BAD} - System32\Tasks\{22F8D798-1B84-40C0-A73E-3C5D62F56FBD} => C:\Program Files (x86)\Maxis\The Sims\Sims.exe
    Task: {E379BD98-4DD9-4E9F-A772-77CFE42F072B} - System32\Tasks\{48D631BD-BCEE-4405-85C9-1109FA49B048} => pcalua.exe -a "C:\Program Files (x86)\Electronic Arts\The Sims 4\__Installer\vp6\vp6install.exe" -d "C:\Program Files (x86)\Electronic Arts\The Sims 4\__Installer\vp6"
    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==================== Loaded Modules (Whitelisted) ==============

    2006-12-22 07:31 - 2006-12-22 07:31 - 00108712 _____ () C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
    2013-05-18 11:35 - 2009-02-20 13:13 - 00013312 _____ () C:\Program Files\OSD\Service1.exe
    2013-09-21 21:34 - 2012-12-11 13:07 - 01184640 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
    2010-04-04 19:45 - 2010-04-04 19:45 - 00094536 _____ () C:\Windows\system32\FAIEExtension.DLL
    2014-10-02 16:51 - 2014-10-02 16:51 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
    2015-05-23 17:12 - 2015-05-23 17:12 - 02931200 _____ () C:\Program Files\AVAST Software\Avast\defs\15052302\algo.dll
    2015-05-23 16:16 - 2015-05-13 17:48 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.65\libglesv2.dll
    2015-05-23 16:16 - 2015-05-13 17:48 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.65\libegl.dll
    2014-10-02 16:51 - 2014-10-02 16:51 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51

    ==================== Safe Mode (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-2075418120-132197448-404415077-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Phil is fiiiine\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
    DNS Servers: 192.168.1.254

    ==================== MSCONFIG/TASK MANAGER Error getting ==

    (Currently there is no automatic fix for this section.)

    MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
    MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
    MSCONFIG\startupreg: DellSystemDetect => C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
    MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
    MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [{B257B29E-E9A3-4189-BBCB-DB42838247EE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{C0C60CB2-EEB3-450B-AFC8-9BA725B34B9B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{4359DC49-FA7C-4ADA-8396-9397C753D3D0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War 2\DOW2.exe
    FirewallRules: [{E543EFEC-A878-4631-8A5A-A091BCFFDB18}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War 2\DOW2.exe
    FirewallRules: [TCP Query User{A2762392-37BC-4F5C-9676-2A3841390015}C:\users\phil is fiiiine\desktop\utorrent.exe] => (Allow) C:\users\phil is fiiiine\desktop\utorrent.exe
    FirewallRules: [UDP Query User{DB4F295F-5D45-48B4-A5AF-B45F878D1BDD}C:\users\phil is fiiiine\desktop\utorrent.exe] => (Allow) C:\users\phil is fiiiine\desktop\utorrent.exe
    FirewallRules: [{2B43A306-2DF9-41C1-ACEB-E03A547E8AB0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
    FirewallRules: [{949EFE00-9F55-431A-862E-F4381E6FD0AE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
    FirewallRules: [{3C72C6AC-240E-4133-82EF-ACFFB9CE706B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
    FirewallRules: [{5A9E5F51-EA5E-45AD-8D76-F7067BF34252}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
    FirewallRules: [{B1297B7A-AD5C-4466-9F22-A423046B6F56}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
    FirewallRules: [{04941184-54DE-4731-9E91-E1CFF6097B4A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
    FirewallRules: [{35CC0CE5-BFCF-4FC5-B861-C8727586F0F0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
    FirewallRules: [{6374FC4A-3468-47D7-A3FF-EBA96D3D6C08}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
    FirewallRules: [{D146FD03-168D-4509-B0A0-CE430343E004}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
    FirewallRules: [{860EF8A8-7C51-411C-AF54-54C785023D4F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
    FirewallRules: [{4F9439DA-AE39-4623-BFE0-31C175B1CC30}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
    FirewallRules: [{35860BE0-4B34-4F48-B1D0-0C93EDA6DDE9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
    FirewallRules: [{695CA903-EBEF-4C5B-AC21-6553CBFF300F}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
    FirewallRules: [{8E072FD2-AE33-4FA2-804E-D2C83E5223F2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
    FirewallRules: [{B98D8455-13BE-4A48-9F86-BD3921BD4CC6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
    FirewallRules: [{530D1F3E-3BB2-4689-AD1D-D5A56ACF869B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
    FirewallRules: [{D32D64D3-B5A6-4C6B-B86E-2D69C94B1F24}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
    FirewallRules: [{AE24A9D1-8DB0-4EEB-AF12-345646D1AB80}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
    FirewallRules: [{6B09A686-43D4-4C6C-ACCF-5D824542F47A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
    FirewallRules: [{979052B6-A870-4503-AF07-A42F43596C48}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
    FirewallRules: [{DB6E953A-C098-42D4-8D26-81DC4F5321CA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
    FirewallRules: [{106904F8-55C8-47EF-AEA2-DD3EC4607A33}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
    FirewallRules: [{42B13E17-BE4B-441B-9E1F-0DC291815590}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
    FirewallRules: [{4FE12339-CE48-45EE-9264-C1FADBEF45F5}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
    FirewallRules: [{374B220B-A1F7-4074-BCD7-9CF9FE9C973E}] => (Allow) C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [{6D006888-0DA6-4BF6-A9AA-724C972B3526}] => (Allow) C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\AdobePhotoshopElementsMediaServer.exe
    FirewallRules: [TCP Query User{1C67466C-6C5A-4429-8645-FB8C6D0AEB10}C:\users\user\downloads\utorrent.exe] => (Block) C:\users\user\downloads\utorrent.exe
    FirewallRules: [UDP Query User{7F86125E-1138-4F1F-BE1A-D7B00BD18624}C:\users\user\downloads\utorrent.exe] => (Block) C:\users\user\downloads\utorrent.exe
    FirewallRules: [TCP Query User{9868CEBD-36C2-4BD1-B7E2-8EE6CD91557C}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
    FirewallRules: [UDP Query User{5D03D997-C70C-497B-ACFE-E86613A52188}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
    FirewallRules: [{C3065CC7-BCB5-4333-991C-4471F5A35810}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 11\FL.exe
    FirewallRules: [TCP Query User{81A584C2-C60C-4A22-8BF9-6F6A8653DBD1}C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Block) C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe
    FirewallRules: [UDP Query User{2ED6BE86-3410-49EB-AF8D-E0E49750AB99}C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe] => (Block) C:\program files (x86)\goat simulator\binaries\win32\goatgame-win32-shipping.exe
    FirewallRules: [{55D7B587-AFDE-4984-BD80-46A55D0F9395}] => (Allow) C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{64651EB9-2D54-4EA4-83F0-4FBD4E412DBD}] => (Allow) C:\Users\user\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{FDAD6701-D228-4FF9-AF1E-D181EFC5F66C}] => (Allow) %SystemDrive%\Riot Games\League of Legends\lol.launcher.exe
    FirewallRules: [{4BA01515-08F0-4C48-A579-ACAFC5AA4FCA}] => (Allow) %SystemDrive%\Riot Games\League of Legends\lol.launcher.admin.exe
    FirewallRules: [{A4E6D925-A57E-4F7D-BAE8-8A2A6CDFF74F}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\ACEStream\engine\ace_engine.exe
    FirewallRules: [{FC85F7A8-3AD9-4811-A4B9-C398627B51DF}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\ACEStream\engine\ace_engine.exe
    FirewallRules: [{BC6E0CB7-C238-45D2-A537-F3C736820AEA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [{39B3A410-DBB1-4648-9F6F-77E155187FE0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    FirewallRules: [TCP Query User{C032B241-9A26-4074-BF49-4A19EC0A9881}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
    FirewallRules: [UDP Query User{48311837-D0CF-4F48-9B21-70F469A1065C}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
    FirewallRules: [TCP Query User{40E11571-C03E-4135-B6F2-104E6255E216}C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe
    FirewallRules: [UDP Query User{FE8B23C6-128B-4E43-9E9A-8027711BE30F}C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\phil is fiiiine\appdata\local\popcorn time\node-webkit\popcorn time.exe
    FirewallRules: [{51591956-E7B3-40E3-B3E1-3657690B2FDC}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
    FirewallRules: [{6D79657B-FA8B-4D47-A242-0F87A73030F3}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
    FirewallRules: [{1D42777D-6C37-43A0-AA7A-06A054C6B1F5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
    FirewallRules: [{75A51A08-9AA2-4640-8866-C34A20AC39BA}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
    FirewallRules: [{C19A6DFC-5CAA-424B-BBC8-713B68086E2D}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
    FirewallRules: [{249CA198-C068-4024-9EB4-07D255EFEEC9}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
    FirewallRules: [TCP Query User{F88708E6-881E-4D08-B4F7-B5FC211860B7}C:\program files (x86)\qbittorrent\qbittorrent.exe] => (Allow) C:\program files (x86)\qbittorrent\qbittorrent.exe
    FirewallRules: [UDP Query User{1ED81086-5EEE-4FBF-85D4-9EE3A66A7B53}C:\program files (x86)\qbittorrent\qbittorrent.exe] => (Allow) C:\program files (x86)\qbittorrent\qbittorrent.exe
    FirewallRules: [{239A9306-B654-4BB8-B94B-E30B73AD4850}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\SSN\ssn.exe
    FirewallRules: [{F60D17F9-15BE-457D-B752-73B192075D21}] => (Allow) C:\Users\Phil is fiiiine\AppData\Roaming\SSN\updssn.exe
    FirewallRules: [{B3B22FC0-3104-45EA-B458-ED2BBE4C28D0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    ==================== Faulty Device Manager Devices =============

    Name: Teredo Tunneling Pseudo-Interface
    Description: Microsoft Teredo Tunneling Adapter
    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
    Manufacturer: Microsoft
    Service: tunnel
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

    Name: facap, FastAccess Video Capture
    Description: facap, FastAccess Video Capture
    Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
    Manufacturer: Sensible Vision
    Service: FACAP
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

    Name: Lexmark X422
    Description: Lexmark X422
    Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
    Manufacturer: Lexmark
    Service: usbscan
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (05/23/2015 07:34:34 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: Activation context generation failed for "assemblyIdentity1".Error in manifest or policy file "assemblyIdentity2" on line assemblyIdentity3.
    The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 8193) (User: )
    Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80070013, The media is write protected.
    .

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 13) (User: )
    Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x80070013, The media is write protected.
    ]

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 8193) (User: )
    Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80070013, The media is write protected.
    .

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 13) (User: )
    Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x80070013, The media is write protected.
    ]

    Error: (05/23/2015 01:58:35 PM) (Source: ESENT) (EventID: 215) (User: )
    Description: WinMail (5164) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.

    Error: (05/22/2015 01:59:15 PM) (Source: MsiInstaller) (EventID: 11316) (User: M17X)
    Description: Product: Popcornew Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Popcornew\Update\1.3.25.0\GoogleUpdateHelper.msi

    Error: (05/22/2015 01:52:36 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )
    Description: Prefs: Failed to get user path

    Error: (05/22/2015 01:05:08 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )
    Description: Prefs: Failed to get user path

    Error: (05/22/2015 01:02:40 PM) (Source: AWPower) (EventID: 0) (User: )
    Description: Service cannot be started. The service process could not connect to the service controller


    System errors:
    =============
    Error: (05/23/2015 10:05:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
    Description: The Alienware Fusion Service service failed to start due to the following error:
    %%1053

    Error: (05/23/2015 10:05:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the Alienware Fusion Service service to connect.

    Error: (05/23/2015 10:02:45 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

    Error: (05/23/2015 09:58:08 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
    Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

    Error: (05/23/2015 09:52:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Vista Session Launcher Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (05/23/2015 09:49:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The HP CUE DeviceDiscovery Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (05/23/2015 09:49:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The hpqcxs08 service terminated unexpectedly. It has done this 1 time(s).

    Error: (05/23/2015 08:58:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The HP CUE DeviceDiscovery Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (05/23/2015 08:58:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The hpqcxs08 service terminated unexpectedly. It has done this 1 time(s).

    Error: (05/23/2015 05:11:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
    Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.


    Microsoft Office:
    =========================
    Error: (05/23/2015 07:34:34 PM) (Source: SideBySide) (EventID: 63) (User: )
    Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 8193) (User: )
    Description: CoCreateInstance0x80070013, The media is write protected.

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 13) (User: )
    Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x80070013, The media is write protected.

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 8193) (User: )
    Description: CoCreateInstance0x80070013, The media is write protected.

    Error: (05/23/2015 04:35:33 PM) (Source: VSS) (EventID: 13) (User: )
    Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x80070013, The media is write protected.

    Error: (05/23/2015 01:58:35 PM) (Source: ESENT) (EventID: 215) (User: )
    Description: WinMail5164WindowsMail0:

    Error: (05/22/2015 01:59:15 PM) (Source: MsiInstaller) (EventID: 11316) (User: M17X)
    Description: Product: Popcornew Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\Popcornew\Update\1.3.25.0\GoogleUpdateHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

    Error: (05/22/2015 01:52:36 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )
    Description: Prefs: Failed to get user path

    Error: (05/22/2015 01:05:08 PM) (Source: WTabletServiceCon) (EventID: 1) (User: )
    Description: Prefs: Failed to get user path

    Error: (05/22/2015 01:02:40 PM) (Source: AWPower) (EventID: 0) (User: )
    Description: Service cannot be started. The service process could not connect to the service controller


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i7 CPU Q 840 @ 1.87GHz
    Percentage of memory in use: 29%
    Total physical RAM: 8180.46 MB
    Available physical RAM: 5733.22 MB
    Total Pagefile: 16359.1 MB
    Available Pagefile: 13774.43 MB
    Total Virtual: 8192 MB
    Available Virtual: 8191.84 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:596.08 GB) (Free:61.49 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 65DEA0FB)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=596.1 GB) - (Type=07 NTFS)

    ==================== End of log ============================
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...