Solved Laptop infected with msupdate71/dwm.exe

AbbbY Sen · Feb 18, 2015

I have got AVG which detects the threat every time but is not able to remove it. I tried to delete the folder itself but it always come back and had made my laptop run slow.
I'll be very thankful to you guys if you help me in getting my laptop cleaned. I want your pro assistance and I'll follow everything you tell me to do! Thanks again!

Broni · Feb 18, 2015

Welcome aboard

Please, complete all steps listed here: https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

AbbbY Sen · Feb 19, 2015

I tried the safe mode thing and deleted msupdate71 folder, which however is not showing up in the Temp as if now. But there seems many more malwares as checked by MBAM

1. MBAM Log
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 19-02-2015
Scan Time: 02:50:01
Logfile: malwareLogFile.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.18.09
Rootkit Database: v2015.02.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Abhishek

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 355159
Time Elapsed: 23 min, 7 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 56
PUP.Optional.Wajam.A, HKLM\SOFTWARE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [27ca20ff33578fa7d606c57ffc07a35d],
PUP.Optional.Wajam.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GamesAppIntegrationService, , [27ca20ff33578fa7d606c57ffc07a35d],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}, , [27ca20ff33578fa7d606c57ffc07a35d],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, , [7f7279a69feb26101ef1d56fd132a55b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [7f7279a69feb26101ef1d56fd132a55b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{C292AD0A-C11F-479B-B8DB-743E72D283B0}, , [7f7279a69feb26101ef1d56fd132a55b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc.1, , [7f7279a69feb26101ef1d56fd132a55b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\CLASSES\esrv.mysearchdialESrvc, , [7f7279a69feb26101ef1d56fd132a55b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc, , [7f7279a69feb26101ef1d56fd132a55b],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.mysearchdialESrvc.1, , [7f7279a69feb26101ef1d56fd132a55b],
PUP.Optional.Snapdo.T, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [d51c110ef49649edc6c4cb7c739050b0],
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, , [d51c110ef49649edc6c4cb7c739050b0],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, , [36bb849ba8e2e3535f67a4660ef5c937],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, , [faf7d649fa90be7812b5a56541c21fe1],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, , [faf7d649fa90be7812b5a56541c21fe1],
PUP.Optional.Wajam.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}, , [767bd14e3f4b54e2bbb08d84d0337987],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\iagcajndpnfncplednpbnkahadegklfa, , [e110110e7416cb6b348aefdd897ad927],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [925fd44ba5e57cbafec7d50a7c87926e],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [fcf5859a29610135af1c55a981831ae6],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BonanzaDealsLive.exe, , [648da877286244f28cb7cb30eb1921df],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\WOW6432NODE\BonanzaDealsLive, , [07ea1f003e4c320445fd7b803dc7b44c],
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\DataMngr, , [91609e812b5fd26441c74f72cc37d62a],
PUP.Optional.Qone8.A, HKLM\SOFTWARE\WOW6432NODE\qone8Software, , [b63b4cd35d2dd46295eb629b3cc811ef],
PUP.Optional.Ligtning.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\cekcjpgehmohobmdiikfnopibipmgnml, , [5998db44dab0d264653652873ec5b64a],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\defdhglnppeioeflggkmglipcecffkhk, , [f0011f00d4b63bfb333340d30bfa7090],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\iagcajndpnfncplednpbnkahadegklfa, , [42af25fa1575f73f605e4983867d5ea2],
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [727fe53ac0cace68279ec41b31d2d32d],
PUP.Optional.BonanzaDeals.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\BonanzaDealsLive.exe, , [f6fbb867f199340275cee6154bb99967],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [ac45e63958328caaf79702f210f4748c],
PUP.Optional.BonanzaDeals.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BonanzaDealsLive, , [d41dcf507b0fab8b41ff6e8d6b99d52b],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr, , [db1675aab6d463d338e530c338cc56aa],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr_Toolbar, , [826fde41503a003659c3ad460afaac54],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\mysearchdial.com, , [1cd5908f32586ccadd60965ee1237e82],
PUP.Optional.Softonic.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, , [4aa7a07f5832f145d8819c01b54e5ca4],
PUP.Optional.SProtector.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SProtector, , [33be9887870373c30da85e973ec63ec2],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\iagcajndpnfncplednpbnkahadegklfa, , [24cdfe214a40a195c2fdd6f68b78f30d],
PUP.Optional.DVDVideoSoftTB.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp, , [33be44db91f9c76fef3073379a69fa06],
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pflphaooapbgpeakohlggbpidpppgdff, , [ce2355ca1674c373596b9d42f310bf41],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [529f5dc2fe8cfd392a323f9e2ad9cb35],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [fbf6a976f09aee4885bbc3307292e21e],
PUP.Optional.OptimizerPro.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OptimizerPro, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO.1, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SuggestMeYes.SuggestMeYesBHO, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SuggestMeYes.SuggestMeYesBHO.1, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKLM\SOFTWARE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\INPROCSERVER32, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [1cd5cf5011795dd9b58cd69aab587b85],

Registry Values: 5
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [e40dfe215a3066d0a5a97a3358ab54ac]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, , [f100041b6822290dd37bdfce7f841fe1]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O1C1R1H2Z1S1G1M1F, , [fbf6a976f09aee4885bbc3307292e21e]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [db169f803357072f7a137a3c63a02cd4]
PUP.BitcoinMiner, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|tsiVideo, C:\Windows\SysWOW64\rundll32.exe C:\Users\Abhishek\AppData\Local\Temp\\mdi564.dll,asdasd, , [98594cd36426ae88e65c55c4ae577d83]

Registry Data: 10
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=1&...8693&ir=),,[40b168b76129fb3b7b0f4283b55026da]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[2dc42ff0afdb320479979135db2a35cb]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://start.mysearchdial.com/?f=2&...yBtDtN1L1Czu1L1C1H1B1QtCtDtA&cr=122594302&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=2&...4302&ir=),,[ad44ee3157330a2c8eab5c607d886b95]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=, Good: (www.google.com), Bad: (http://start.mysearchdial.com/?f=1&...8693&ir=),,[e809b56a97f33cfa71199d289f664cb4]
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[925fee31f1994cea3330fcbeaa5bbd43]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[51a0ea35b2d81c1a56107a40699cb34d]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[c52cf52a7911c571afb66159c73e8d73]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[1cd538e77a101c1ad7913288ff064ab6]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[0be6af70fd8dc0761950ebcf9c69c53b]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-674437956-1809715338-1024526891-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.snapdo.com/?publisher=S...ype=ds&q={searchTerms}&installDate=26/10/2013, Good: (www.google.com), Bad: (http://feed.snapdo.com/?publisher=S.../10/2013),,[b43d9a855139e353f17303b71ce90ff1]

AbbbY Sen · Feb 19, 2015

Folders: 67
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\chrome, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\defaults, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\defaults\preferences, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log, , [d61ba57a3e4cc175288f9742c043f10f],
PUP.Optional.BrowseToSave.A, C:\ProgramData\Browse2save, , [e90853ccc9c178be0805510763a02dd3],
PUP.Optional.OptimizerPro.A, C:\ProgramData\BetterSoft\OptimizerPro, , [6b867da2d7b325110b093f19db28966a],
PUP.Optional.OptimizerPro.A, C:\ProgramData\BetterSoft\OptimizerPro\3036567561, , [6b867da2d7b325110b093f19db28966a],
PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive, , [8170a976b3d7da5ca165ca8f40c3a35d],
PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive\Update, , [8170a976b3d7da5ca165ca8f40c3a35d],
PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive\Update\Log, , [8170a976b3d7da5ca165ca8f40c3a35d],
PUP.Optional.BonanzaDeals.A, C:\Users\Abhishek\AppData\Local\BonanzaDealsLive, , [7c75f6293852e94db84f65f432d12ad6],
PUP.Optional.BonanzaDeals.A, C:\Users\Abhishek\AppData\Local\BonanzaDealsLive\CrashReports, , [7c75f6293852e94db84f65f432d12ad6],
PUP.Optional.BonanzaDeals.A, C:\Program Files (x86)\BonanzaDealsLive, , [2ec38a955733ba7c16f3b0a9c73c6997],
PUP.Optional.BonanzaDeals.A, C:\Program Files (x86)\BonanzaDealsLive\CrashReports, , [2ec38a955733ba7c16f3b0a9c73c6997],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\misc, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Updater.A, C:\Users\Abhishek\AppData\Roaming\FoxTab\UpdateProc, , [da1728f724661224f631f97b8d76649c],
PUP.Optional.BonanzaDeals.A, C:\Program Files (x86)\BonanzaDeals, , [8869cf501d6d5bdbf182324cf01321df],

Files: 289
PUP.Optional.Wajam.A, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, , [27ca20ff33578fa7d606c57ffc07a35d],
Trojan.MSIL.Injector, C:\Users\Abhishek\AppData\Local\Temp\Runner2.exe, , [a44dbb64345689ade5c9a11737cec43c],
Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX4\key.exe, , [b63bf52ae6a4d264cbfa4a9835ccfb05],
Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX5\key.exe, , [b23fb9661b6f989e289dbc269d64d927],
Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX6\key.exe, , [b73a68b71f6bbf77f4d120c2a160619f],
Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX7\key.exe, , [718062bd1a7070c60eb702e0b849bf41],
Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX8\key.exe, , [8a678e919beff0467e474c9627da3cc4],
Trojan.Agent, C:\Users\Abhishek\AppData\Local\Temp\RarSFX9\key.exe, , [14dd1f00a9e1e05624a1f9e9d62bc937],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsv5E3F.exe, , [23ce39e6602af046f085e66baa577789],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsv5E40.exe, , [a54c26f90585fd39dd981b36e9183fc1],
PUP.Optional.SearchProtect.A, C:\Windows\Temp\nsb8BC6.exe, , [3fb2c45bc4c6e551542155fc38c9f50b],
Trojan.MSIL.Injector, C:\Users\Abhishek\Downloads\Imtoo_Video_Converter_Ultimate_6.0.15.1110_keymaker.exe, , [d61b849b1c6ed660446a2f890df8827e],
PUP.Optional.Amonetize.A, C:\Users\Abhishek\Downloads\Xilisoft Video Converter Ultimate 6 0 15 Build 1110 Serial_10924_i34265566_il345.exe, , [628fd54aff8b3600eb7376f5f01029d7],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\unins000.dat, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\FireFoxExtension.exe, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\InstTracker.exe, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\chrome\autocompleteprochrome.crx, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome.manifest, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\install.rdf, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\appIcon.png, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\browserOverlay.xul, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\options.js, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\options.xul, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\chrome\content\utils.js, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Complitly.A, C:\Program Files (x86)\Complitly\support@Complitly.com\defaults\preferences\predictad.js, , [b33e100f7f0b2e08ce657b2dc0430ff1],
PUP.Optional.Claro.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dcillohgikpecbmgioknapdpcjofaafl_0.localstorage, , [1ad7091695f56cca872a06a4946f7f81],
PUP.Optional.ContinueToSave.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage, , [22cf9c834f3bfb3b446b8a298182af51],
PUP.Optional.ContinueToSave.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal, , [9a57e23dd2b80c2a6f40892a6a9924dc],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\mysearchdial-speeddial.crx, , [fff2f12e6b1fcc6a6392eec99370e917],
PUP.Optional.Speedial.A, C:\Users\Abhishek\AppData\Local\speedial.crx, , [6c85f02fcbbfe05640f3289f04ffca36],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iagcajndpnfncplednpbnkahadegklfa_0.localstorage, , [d021d946206a1422e6d618b4ba49926e],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_iagcajndpnfncplednpbnkahadegklfa_0.localstorage-journal, , [3db47da28307ff3715a78c40e51e27d9],
PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log\eGdpSvc.LOG, , [d61ba57a3e4cc175288f9742c043f10f],
PUP.Optional.BrowseToSave.A, C:\ProgramData\Browse2save\51195a4b2bc24.tlb, , [e90853ccc9c178be0805510763a02dd3],
PUP.Optional.OptimizerPro.A, C:\ProgramData\BetterSoft\OptimizerPro\3036567561.ini, , [6b867da2d7b325110b093f19db28966a],
PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Readme.txt, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Setup.dat, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Setup.exe, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\Setup.ico, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\TsuDll.dll, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.OptimizerPro.A, C:\ProgramData\InstallMate\OptimizerPro\_Setup.dll, , [b23fe936c7c357df00210f4927dc6c94],
PUP.Optional.BonanzaDeals.A, C:\ProgramData\BonanzaDealsLive\Update\Log\BonanzaDealsLive.log, , [8170a976b3d7da5ca165ca8f40c3a35d],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\background.html, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\background.js, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\icon128.png, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\jquery.js, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\manifest.json, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\xa.js, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.Lightning.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\xagainit.js, , [529fd14e0882bb7b7742451534cf768a],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\manifest.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\background.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\background.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\browser\misc\screenshot.inject.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_de.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_en_gb.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_en_us.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_fr.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_he.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_it.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_pt_br.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_ru.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\data\favorites_tr.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\angular.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\crypto-js.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery-2.1.0.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.autocomplete.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.balloon.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.fittext.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.Jcrop.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\jquery.simplecolorpicker.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\mustache.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\string.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\external\underscore-min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\gallery.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\gallery.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\newtab.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\newtab.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\review.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\content\newtab\review.min.js, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\foundation.min.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\indicator.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\Jcrop.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\jquery.autocomplete.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\jquery.Jcrop.min.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\jquery.simplecolorpicker.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\external\normalize.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\arrow-gallery-cat-selected.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\arrow.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\emptyArea.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\gallery.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\gallery_templates.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\icon-gallery-search.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\not_available_32.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\plus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\gallery\X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons\128.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons\16.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\icons\48.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\buttons.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\footer.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\header.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\list.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\newtab.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\search.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\css\themes.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-layout.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-bar.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-medium.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader-small.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\ajax-loader.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\arrow-footer.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\arrow-header.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\attachment.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\close-bar2.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\close.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\edit-button.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-apps-dark.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-apps.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-chrome.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-close.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-contents-light.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-contents.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-edit.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-plus-dark.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-plus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-right.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-search.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\icon-theme.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\menu_v.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\menu_v_white.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\x-button.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\arab_tile.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\batthern_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\bo_play_pattern_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\dark_wood_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\diagonal_striped_brick.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\escheresque_ste_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\gold_scale.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\purty_wood_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\readme.txt, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\starring_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\tileable_wood_texture_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],

AbbbY Sen · Feb 19, 2015

PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\weave_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\wild_oliva_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\woven.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\groups.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\list.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\activetabs.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\favorites.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\layout.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-add.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-edit.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-group.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\readitlater.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\recentlyclosed.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\theme.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\webapps.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\bookmarks.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\download.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloads.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloas.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\extensions.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\history.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\trash.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\empty.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\error.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\shadow.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\contactus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\facebook.ico, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\rateus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\twitter.ico, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\activetabs.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\favorites.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\layout.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-add.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-edit.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-group.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_content.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\recentlyclosed.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\theme.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps_contextmenu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_1.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_3.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_4.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_5.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\rating-star.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\review.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\bg.html, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\contentscript.js, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\manifest.json, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\128.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\16.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\256.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\32.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\48.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\64.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\AutocompletePro.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\AutocompletePro64.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.mysearchdial.AL", 2)

, ,[e70a53ccd3b7df577c2c986aa264c43c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ser Preferences

/* Do not edit this file.
*
* If yo), ,[7f729f80098134029b0d699960a6f20e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to this file while the appl), ,[7d7449d67c0e72c4c3e5f60c63a38b75]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_), ,[46ab62bd5832e94dc0e8709247bf34cc]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (adfind.flashBar", 0);
user_pref("aol_toolbar.def), ,[cd249e81f09a93a32781cb37818520e0]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

/* Do not edit this file.
*
* If you ), ,[ab46a7789bef1b1b337531d109fd8779]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

/* Do not edit this file.
*
* If you ), ,[945de837305aad892d7b8a78c44255ab]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

/* Do not edit this file.
*
* If yo), ,[aa4730ef1476b284565244bed432d62a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you), ,[1cd574ab32584beb4c5c976b5ea8ff01]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
user_pref("app.update.lastUpdateTime.background-update-timer", 1424292174);
user_pref("app.update.lastUpdateTim), ,[ca27df401b6f78be4a5eb84a4abcb34d]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( 1424292174);
user_pref("app.update.lastUpdateTime.), ,[18d921fec0ca1323ebbd13ef3bcb45bb]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file whi), ,[d21fd34c147645f19414768c9c6a4cb4]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (s file.
*
* If you make changes to this file), ,[b140e13ecdbdf145f6b22cd6af57bd43]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check"), ,[3eb3b16ecebc0e28aefa13efa0661de3]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ();
user_pref("aol_toolbar.default.search.check", false);
u), ,[d91898876327b0865454857d3dc97b85]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make changes), ,[cc25889737537cba06a227dba75f01ff]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make chang), ,[00f120ff1b6f2d092f79c042bf47af51]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visi), ,[a74ac05fe4a6df57396ff80a5bab11ef]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (*
* To make a manual change to preferences, you can visit the URL), ,[a15029f67218cc6ae2c6fe049d6909f7]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
user_pref(), ,[f5fc5dc2513985b12682828014f21ee2]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
user_pref("aol_toolbar.default.search.check", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
user_pref("app.update.lastUpdateTime.backgrou), ,[c829f926d7b3989e66420ef40cfaba46]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e overwritten when the application exits.
*
* To make a), ,[1cd58b943753da5c931553af887ed62a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to t), ,[c928c45b5a303501b9ef90720df99c64]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make c), ,[e80931ee0288f0464464fa0863a3a55b]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

/* Do not edit this file.
*
* If you make cha), ,[ba370619f8923ff78b1d778b9c6a8e72]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (* Do not edit this file.
*
* If you make changes), ,[d41da47b6228d462396fed159c6af60a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
), ,[0ae78c933951bb7beabec24020e648b8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (r_pref("aol_toolbar.default.search.check", false);
us), ,[569b0c137e0c6fc7654328da6f97e818]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

/* Do not edit this file.
*
* If you make c), ,[7978c05f3159a09663459a6819edbc44]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you ma), ,[a0518897206a93a31e8acf33ee18847c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
*
* If you ), ,[19d89d8273172115fdab7d850501d030]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ences

/* Do not edit this file.
*
* If you make ), ,[b0411708137700363d6b7f83887ee41c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make changes to t), ,[14dd958a523811259f09887ac54127d9]
PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prtkDS", 0)

, ,[9b569d82434724123b7548bade287d83]
PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (Preferences

/* Do not edit this file.
*
* If), ,[d918ff2018728ea85858ba485aac2dd3]
PUP.Optional.ASK.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTR...C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx")

, ,[658ce53a90fa9e98b90a689a5da9bc44]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff")

, ,[70810c13fd8dd2644f51a55ddf2706fa]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extensions.ir), ,[3cb56db21674a88e2f7146bcb155e818]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extension), ,[5f927ca36b1f79bd8b15d230a75f3cc4]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0Et), ,[03ee809fbcce46f03e62ea1843c3c937]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpg", true)

, ,[07eaa27d177372c404a53cc621e58e72]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (sions.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2St), ,[c928b36c365472c46940e022e6203fc1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (B0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0Dy), ,[678aef30f991c96d2386f30f986e44bc]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irm), ,[e011b867a3e751e5acfd52b09274ea16]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (h.aflt", "dvd_14_16_ff");
user_pref("extensions.I), ,[ec05fa25206aeb4b89203bc7e4222fd1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ons.irmysearch.aflt", "dvd_14_16_ff");
user_pref("ex), ,[ac45928d87031d19d4d560a2f41228d8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtD), ,[579a110ec6c4b086cfda897914f258a8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0E), ,[8f62dd420a803df905a422e0fa0c58a8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0F), ,[05ec87980d7d96a06148699958aeff01]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (arch.aflt", "dvd_14_16_ff");
user_pref("extensions.irm), ,[32bf3ae53753c373abfeb44e43c3b44c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extensio), ,[cd24a9766f1b78be8d1c45bd09fd27d9]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensio), ,[45ac38e775155cda4465639fce38ba46]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysear), ,[2ac7ca55662472c4b1f8986a3fc7ea16]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.ins), ,[0de4110e5931f14521886a98689e5ea2]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysear), ,[f8f90b145a309b9b397053af22e428d8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (earch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmys), ,[cb2642ddb5d5c0767e2b18ea53b337c9]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extensions.I), ,[1dd4ba65078391a58e1b808227dfb54b]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extens), ,[b140f12e672361d5b1f87f83f90df808]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extension), ,[a051c659b1d935015950c042bd494bb5]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extens), ,[b1408a958ffb42f4a20762a03dc9ae52]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ions.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", ), ,[f9f87ba498f2a78f4c5d966ccb3bf907]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (");
user_pref("extensions.irmysearch.instlRef", "14), ,[37ba30ef91f91e18d1d8e1216a9c0ff1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("exten), ,[ee0376a9a6e49b9b3673b2507f87db25]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGy), ,[4ea36db21a701b1b8f1a22e0a165fc04]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtG), ,[cf22a8770288d75f1e8b36cc2adce21e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=")

, ,[856cfc2337532c0a8b1f917149bd728e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");
user_pref), ,[955c0916c3c758de07a311f1ef1706fa]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...tBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1), ,[5c9587986e1c0630b6f461a1050117e9]

Physical Sectors: 0
(No malicious items detected)

(end)

AbbbY Sen · Feb 19, 2015

PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\weave_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\wild_oliva_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\woven.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\groups.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\list.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\activetabs.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\favorites.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\layout.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-add.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-edit.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-group.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\readitlater.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\recentlyclosed.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\theme.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\webapps.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\bookmarks.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\download.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloads.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloas.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\extensions.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\history.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\trash.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\empty.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\error.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\shadow.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\contactus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\facebook.ico, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\rateus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\twitter.ico, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\activetabs.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\favorites.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\layout.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-add.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-edit.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-group.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_content.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\recentlyclosed.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\theme.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps_contextmenu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_1.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_3.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_4.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_5.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\rating-star.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\review.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\bg.html, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\contentscript.js, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\manifest.json, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\128.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\16.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\256.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\32.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\48.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\64.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\AutocompletePro.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\AutocompletePro64.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.mysearchdial.AL", 2)

, ,[e70a53ccd3b7df577c2c986aa264c43c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ser Preferences

/* Do not edit this file.
*
* If yo), ,[7f729f80098134029b0d699960a6f20e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to this file while the appl), ,[7d7449d67c0e72c4c3e5f60c63a38b75]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_), ,[46ab62bd5832e94dc0e8709247bf34cc]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (adfind.flashBar", 0);
user_pref("aol_toolbar.def), ,[cd249e81f09a93a32781cb37818520e0]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

/* Do not edit this file.
*
* If you ), ,[ab46a7789bef1b1b337531d109fd8779]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

/* Do not edit this file.
*
* If you ), ,[945de837305aad892d7b8a78c44255ab]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

/* Do not edit this file.
*
* If yo), ,[aa4730ef1476b284565244bed432d62a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you), ,[1cd574ab32584beb4c5c976b5ea8ff01]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
user_pref("app.update.lastUpdateTime.background-update-timer", 1424292174);
user_pref("app.update.lastUpdateTim), ,[ca27df401b6f78be4a5eb84a4abcb34d]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( 1424292174);
user_pref("app.update.lastUpdateTime.), ,[18d921fec0ca1323ebbd13ef3bcb45bb]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file whi), ,[d21fd34c147645f19414768c9c6a4cb4]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (s file.
*
* If you make changes to this file), ,[b140e13ecdbdf145f6b22cd6af57bd43]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check"), ,[3eb3b16ecebc0e28aefa13efa0661de3]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ();
user_pref("aol_toolbar.default.search.check", false);
u), ,[d91898876327b0865454857d3dc97b85]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make changes), ,[cc25889737537cba06a227dba75f01ff]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make chang), ,[00f120ff1b6f2d092f79c042bf47af51]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visi), ,[a74ac05fe4a6df57396ff80a5bab11ef]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (*
* To make a manual change to preferences, you can visit the URL), ,[a15029f67218cc6ae2c6fe049d6909f7]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
user_pref(), ,[f5fc5dc2513985b12682828014f21ee2]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
user_pref("aol_toolbar.default.search.check", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
user_pref("app.update.lastUpdateTime.backgrou), ,[c829f926d7b3989e66420ef40cfaba46]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e overwritten when the application exits.
*
* To make a), ,[1cd58b943753da5c931553af887ed62a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to t), ,[c928c45b5a303501b9ef90720df99c64]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make c), ,[e80931ee0288f0464464fa0863a3a55b]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

/* Do not edit this file.
*
* If you make cha), ,[ba370619f8923ff78b1d778b9c6a8e72]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (* Do not edit this file.
*
* If you make changes), ,[d41da47b6228d462396fed159c6af60a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
), ,[0ae78c933951bb7beabec24020e648b8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (r_pref("aol_toolbar.default.search.check", false);
us), ,[569b0c137e0c6fc7654328da6f97e818]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

/* Do not edit this file.
*
* If you make c), ,[7978c05f3159a09663459a6819edbc44]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you ma), ,[a0518897206a93a31e8acf33ee18847c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
*
* If you ), ,[19d89d8273172115fdab7d850501d030]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ences

/* Do not edit this file.
*
* If you make ), ,[b0411708137700363d6b7f83887ee41c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make changes to t), ,[14dd958a523811259f09887ac54127d9]
PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prtkDS", 0)

, ,[9b569d82434724123b7548bade287d83]
PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (Preferences

/* Do not edit this file.
*
* If), ,[d918ff2018728ea85858ba485aac2dd3]
PUP.Optional.ASK.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTR...C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx")

, ,[658ce53a90fa9e98b90a689a5da9bc44]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff")

, ,[70810c13fd8dd2644f51a55ddf2706fa]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extensions.ir), ,[3cb56db21674a88e2f7146bcb155e818]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extension), ,[5f927ca36b1f79bd8b15d230a75f3cc4]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0Et), ,[03ee809fbcce46f03e62ea1843c3c937]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpg", true)

, ,[07eaa27d177372c404a53cc621e58e72]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (sions.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2St), ,[c928b36c365472c46940e022e6203fc1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (B0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0Dy), ,[678aef30f991c96d2386f30f986e44bc]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irm), ,[e011b867a3e751e5acfd52b09274ea16]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (h.aflt", "dvd_14_16_ff");
user_pref("extensions.I), ,[ec05fa25206aeb4b89203bc7e4222fd1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ons.irmysearch.aflt", "dvd_14_16_ff");
user_pref("ex), ,[ac45928d87031d19d4d560a2f41228d8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtD), ,[579a110ec6c4b086cfda897914f258a8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0E), ,[8f62dd420a803df905a422e0fa0c58a8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0F), ,[05ec87980d7d96a06148699958aeff01]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (arch.aflt", "dvd_14_16_ff");
user_pref("extensions.irm), ,[32bf3ae53753c373abfeb44e43c3b44c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extensio), ,[cd24a9766f1b78be8d1c45bd09fd27d9]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensio), ,[45ac38e775155cda4465639fce38ba46]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysear), ,[2ac7ca55662472c4b1f8986a3fc7ea16]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.ins), ,[0de4110e5931f14521886a98689e5ea2]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysear), ,[f8f90b145a309b9b397053af22e428d8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (earch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmys), ,[cb2642ddb5d5c0767e2b18ea53b337c9]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extensions.I), ,[1dd4ba65078391a58e1b808227dfb54b]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extens), ,[b140f12e672361d5b1f87f83f90df808]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extension), ,[a051c659b1d935015950c042bd494bb5]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extens), ,[b1408a958ffb42f4a20762a03dc9ae52]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ions.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", ), ,[f9f87ba498f2a78f4c5d966ccb3bf907]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (");
user_pref("extensions.irmysearch.instlRef", "14), ,[37ba30ef91f91e18d1d8e1216a9c0ff1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("exten), ,[ee0376a9a6e49b9b3673b2507f87db25]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGy), ,[4ea36db21a701b1b8f1a22e0a165fc04]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtG), ,[cf22a8770288d75f1e8b36cc2adce21e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=")

, ,[856cfc2337532c0a8b1f917149bd728e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");
user_pref), ,[955c0916c3c758de07a311f1ef1706fa]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...tBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1), ,[5c9587986e1c0630b6f461a1050117e9]

Physical Sectors: 0
(No malicious items detected)

(end)

AbbbY Sen · Feb 19, 2015

PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\weave_@2X.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\wild_oliva_@2X.jpg, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\images\patterns\woven.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\groups.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\list.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\newtab\resources\menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\activetabs.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\favorites.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\layout.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-add.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-edit.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\modal-fav-group.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\readitlater.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\recentlyclosed.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\theme.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\css\webapps.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\bookmarks.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\download.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloads.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\downloas.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\extensions.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\history.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\settings.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\chrome\trash.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\empty.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\error.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\favorites\shadow.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\contactus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\facebook.ico, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\rateus.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\images\info\twitter.ico, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\activetabs.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\favorites.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\layout.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-add.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-edit.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\modal-fav-group.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_content.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\readitlater_menu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\recentlyclosed.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\theme.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\plugins\resources\webapps_contextmenu.html, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_1.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_2.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_3.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_4.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\cat_5.gif, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\rating-star.png, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\skin\review\review.css, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ar\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\de\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\en\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\es\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\fr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\he\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\it\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ja\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\nl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pl\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\pt_BR\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\ru\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\iagcajndpnfncplednpbnkahadegklfa\9.4.24_0\_locales\tr\messages.json, , [b83927f8a7e35cda6b23550c0df6f709],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\bg.html, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\contentscript.js, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\manifest.json, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\128.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\16.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\256.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\32.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\48.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk\1.1_0\icons\64.png, , [13de8996038712241927cda32dd65aa6],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\AutocompletePro.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\AutocompletePro64.dll, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.Complitly.A, C:\Users\Abhishek\AppData\Roaming\Complitly\64\KeepMeUpdated.exe, , [1cd5cf5011795dd9b58cd69aab587b85],
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.mysearchdial.AL", 2)

, ,[e70a53ccd3b7df577c2c986aa264c43c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ser Preferences

/* Do not edit this file.
*
* If yo), ,[7f729f80098134029b0d699960a6f20e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to this file while the appl), ,[7d7449d67c0e72c4c3e5f60c63a38b75]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_), ,[46ab62bd5832e94dc0e8709247bf34cc]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (adfind.flashBar", 0);
user_pref("aol_toolbar.def), ,[cd249e81f09a93a32781cb37818520e0]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

/* Do not edit this file.
*
* If you ), ,[ab46a7789bef1b1b337531d109fd8779]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

/* Do not edit this file.
*
* If you ), ,[945de837305aad892d7b8a78c44255ab]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (eferences

/* Do not edit this file.
*
* If yo), ,[aa4730ef1476b284565244bed432d62a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you), ,[1cd574ab32584beb4c5c976b5ea8ff01]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
user_pref("app.update.lastUpdateTime.background-update-timer", 1424292174);
user_pref("app.update.lastUpdateTim), ,[ca27df401b6f78be4a5eb84a4abcb34d]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( 1424292174);
user_pref("app.update.lastUpdateTime.), ,[18d921fec0ca1323ebbd13ef3bcb45bb]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file whi), ,[d21fd34c147645f19414768c9c6a4cb4]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (s file.
*
* If you make changes to this file), ,[b140e13ecdbdf145f6b22cd6af57bd43]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check"), ,[3eb3b16ecebc0e28aefa13efa0661de3]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ();
user_pref("aol_toolbar.default.search.check", false);
u), ,[d91898876327b0865454857d3dc97b85]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make changes), ,[cc25889737537cba06a227dba75f01ff]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make chang), ,[00f120ff1b6f2d092f79c042bf47af51]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visi), ,[a74ac05fe4a6df57396ff80a5bab11ef]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (*
* To make a manual change to preferences, you can visit the URL), ,[a15029f67218cc6ae2c6fe049d6909f7]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: ( not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
user_pref(), ,[f5fc5dc2513985b12682828014f21ee2]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
user_pref("aol_toolbar.default.search.check", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1424282825);
user_pref("app.update.lastUpdateTime.backgrou), ,[c829f926d7b3989e66420ef40cfaba46]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (e overwritten when the application exits.
*
* To make a), ,[1cd58b943753da5c931553af887ed62a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (

/* Do not edit this file.
*
* If you make changes to t), ,[c928c45b5a303501b9ef90720df99c64]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (
/* Do not edit this file.
*
* If you make c), ,[e80931ee0288f0464464fa0863a3a55b]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (references

/* Do not edit this file.
*
* If you make cha), ,[ba370619f8923ff78b1d778b9c6a8e72]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (* Do not edit this file.
*
* If you make changes), ,[d41da47b6228d462396fed159c6af60a]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (rences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("aol_toolbar.default.homepage.check", false);
user_pref("aol_toolbar.default.search.check", false);
), ,[0ae78c933951bb7beabec24020e648b8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (r_pref("aol_toolbar.default.search.check", false);
us), ,[569b0c137e0c6fc7654328da6f97e818]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (nces

/* Do not edit this file.
*
* If you make c), ,[7978c05f3159a09663459a6819edbc44]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you ma), ,[a0518897206a93a31e8acf33ee18847c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ferences

/* Do not edit this file.
*
* If you ), ,[19d89d8273172115fdab7d850501d030]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ences

/* Do not edit this file.
*
* If you make ), ,[b0411708137700363d6b7f83887ee41c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (ces

/* Do not edit this file.
*
* If you make changes to t), ,[14dd958a523811259f09887ac54127d9]
PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("extensions.BabylonToolbar.prtkDS", 0)

, ,[9b569d82434724123b7548bade287d83]
PUP.Optional.Babylon.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (Preferences

/* Do not edit this file.
*
* If), ,[d918ff2018728ea85858ba485aac2dd3]
PUP.Optional.ASK.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTR...C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx")

, ,[658ce53a90fa9e98b90a689a5da9bc44]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff")

, ,[70810c13fd8dd2644f51a55ddf2706fa]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extensions.ir), ,[3cb56db21674a88e2f7146bcb155e818]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extension), ,[5f927ca36b1f79bd8b15d230a75f3cc4]
PUP.Optional.MySearch.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0Et), ,[03ee809fbcce46f03e62ea1843c3c937]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpg", true)

, ,[07eaa27d177372c404a53cc621e58e72]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (sions.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2St), ,[c928b36c365472c46940e022e6203fc1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (B0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0Dy), ,[678aef30f991c96d2386f30f986e44bc]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irm), ,[e011b867a3e751e5acfd52b09274ea16]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (h.aflt", "dvd_14_16_ff");
user_pref("extensions.I), ,[ec05fa25206aeb4b89203bc7e4222fd1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ons.irmysearch.aflt", "dvd_14_16_ff");
user_pref("ex), ,[ac45928d87031d19d4d560a2f41228d8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtD), ,[579a110ec6c4b086cfda897914f258a8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0E), ,[8f62dd420a803df905a422e0fa0c58a8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0F), ,[05ec87980d7d96a06148699958aeff01]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (arch.aflt", "dvd_14_16_ff");
user_pref("extensions.irm), ,[32bf3ae53753c373abfeb44e43c3b44c]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extensio), ,[cd24a9766f1b78be8d1c45bd09fd27d9]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensio), ,[45ac38e775155cda4465639fce38ba46]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysear), ,[2ac7ca55662472c4b1f8986a3fc7ea16]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.ins), ,[0de4110e5931f14521886a98689e5ea2]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysear), ,[f8f90b145a309b9b397053af22e428d8]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (earch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmys), ,[cb2642ddb5d5c0767e2b18ea53b337c9]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extensions.I), ,[1dd4ba65078391a58e1b808227dfb54b]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (rmysearch.aflt", "dvd_14_16_ff");
user_pref("extens), ,[b140f12e672361d5b1f87f83f90df808]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extension), ,[a051c659b1d935015950c042bd494bb5]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (search.aflt", "dvd_14_16_ff");
user_pref("extens), ,[b1408a958ffb42f4a20762a03dc9ae52]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (ions.irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", ), ,[f9f87ba498f2a78f4c5d966ccb3bf907]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (");
user_pref("extensions.irmysearch.instlRef", "14), ,[37ba30ef91f91e18d1d8e1216a9c0ff1]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (s.irmysearch.aflt", "dvd_14_16_ff");
user_pref("exten), ,[ee0376a9a6e49b9b3673b2507f87db25]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (irmysearch.aflt", "dvd_14_16_ff");
user_pref("extensions.irmysearch.instlRef", "140305_b");
user_pref("extensions.irmysearch.cr", "1501068693");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGy), ,[4ea36db21a701b1b8f1a22e0a165fc04]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtG), ,[cf22a8770288d75f1e8b36cc2adce21e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=")

, ,[856cfc2337532c0a8b1f917149bd728e]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...GyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=");
user_pref), ,[955c0916c3c758de07a311f1ef1706fa]
PUP.Optional.MySearchDial.A, C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js, Good: (), Bad: (yC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q");
user_pref("extensions.mysearchdial.hmpg", true);
user_pref("extensions.mysearchdial.hmpgUrl", "http://start.mysearchdial.com/?f=1&...tBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1), ,[5c9587986e1c0630b6f461a1050117e9]

Physical Sectors: 0
(No malicious items detected)

(end)

AbbbY Sen · Feb 19, 2015

2. DDS LOG

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16521
Run by Abhishek at 3:26:31 on 2015-02-19
Microsoft Windows 7 Home Basic 6.1.7601.1.1252.91.1033.18.3994.2387 [GMT 5.5:30]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Program Files (x86)\AVG\AVG9\avgchsva.exe
C:\Program Files (x86)\AVG\AVG9\avgrsa.exe
C:\Windows\system32\lsm.exe
C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files\Common Files\Raxco\Shared\PDEngine.exe
C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
C:\Program Files (x86)\AVG\AVG9\avgnsa.exe
C:\Windows\System32\svchost.exe -k HPZ12
c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe
C:\Program Files (x86)\Reliance 3G\AssistantServices.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://google.com/
uSearch Bar = www.google.com
uSearch Page = www.google.com
uDefault_Page_URL = about:blank
mStart Page = www.google.com
uSearchAssistant = www.google.com
mWinlogon: Userinit = userinit.exe,
BHO: Octh Class: {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll
BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
BHO: DVDVideoSoft IE Extension: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
TB: Grab Pro: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll
TB: Grab Pro: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll
EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
uRun: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
uRun: [AdobeBridge] <no file>
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
mRun: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
mRun: [ZTE ADSL] <no file>
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: NameServer = 192.168.43.1
TCP: Interfaces\{0D0298A9-D9C7-417D-BF20-4F8575998C3C} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{186F4458-A646-491E-A56A-A392A2A90FFD} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{202D625C-22F4-45B3-A6DD-D165812E516D} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{54B278AD-0869-47C5-8762-5B4A5A2CC3D1} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{C2030630-5384-4CFE-8991-2427231D740A} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560} : DHCPNameServer = 192.168.43.1
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\14E64627F696461405 : DHCPNameServer = 192.168.43.1
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\261616072756 : DHCPNameServer = 192.168.137.1
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\36F6E6E656364796669702D656 : DHCPNameServer = 192.168.158.1
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\D4F647F60285 : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\E4F4B4941402C457D6961602532303F583632343 : DHCPNameServer = 192.168.137.1
TCP: Interfaces\{F2BAF72A-44BF-412C-8A40-958F21FD8101} : DHCPNameServer = 192.168.42.129
TCP: Interfaces\{FB774812-E560-4976-AF2F-38CB29511624} : DHCPNameServer = 192.168.1.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
LSA: Notification Packages = scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
mASetup: {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec /fu {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} /qn
x64-mStart Page = www.google.com
x64-BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
x64-BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll
x64-BHO: DVDVideoSoft IE Extension: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
x64-IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
x64-IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>
x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Notify: igfxcui - igfxdev.dll
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=%5EBVK%5EYYYYYY%5EYY%5EIN&gct=hp&apn_ptnrs=%5EBVK&apn_dtid=%5EYYYYYY%5EYY%5EIN&apn_dbr=ff_35.0&apn_uid=3601C8C7-9D42-402F-8104-E4BDAE5FF83C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx
FF - prefs.js: keyword.URL - google.com
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Abhishek\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll
FF - ExtSQL: !HIDDEN! 2013-08-05 22:58; smartwebprinting@hp.com; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
---- FIREFOX POLICIES ----
.
FF - user.js: extensions.irmysearch.instlRef - 140305_b
FF - user.js: extensions.irmysearch.cr - 1501068693
FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
.
FF - user.js: extensions.mysearchdial.hmpgUrl - hxxp://start.mysearchdial.com/?f=1&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
FF - user.js: extensions.mysearchdial.dfltSrch - true
FF - user.js: extensions.mysearchdial.srchPrvdr - Mysearchdial
FF - user.js: extensions.mysearchdial.dnsErr - true
FF - user.js: extensions.mysearchdial_i.newTab - false
FF - user.js: extensions.mysearchdial.newTabUrl - hxxp://start.mysearchdial.com/?f=2&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
FF - user.js: extensions.mysearchdial.tlbrSrchUrl - hxxp://start.mysearchdial.com/?f=3&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=&q=
FF - user.js: extensions.mysearchdial.id - E006E61833AA566F
FF - user.js: extensions.mysearchdial.instlDay - 16174
FF - user.js: extensions.mysearchdial.vrsn - 1.8.29.0
FF - user.js: extensions.mysearchdial.vrsni - 1.8.29.0
FF - user.js: extensions.mysearchdial_i.vrsnTs - 1.8.29.023:41:0
FF - user.js: extensions.mysearchdial.prtnrId - mysearchdial
FF - user.js: extensions.mysearchdial.prdct - mysearchdial
FF - user.js: extensions.mysearchdial.aflt - dvd_14_16_ff
FF - user.js: extensions.mysearchdial_i.smplGrp - none
FF - user.js: extensions.mysearchdial.tlbrId - base
FF - user.js: extensions.mysearchdial.instlRef - 140305_b
FF - user.js: extensions.mysearchdial.dfltLng -
FF - user.js: extensions.mysearchdial.appId - {CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
FF - user.js: extensions.mysearchdial.excTlbr - false
FF - user.js: extensions.mysearchdial.cr - 1501068693
FF - user.js: extensions.mysearchdial.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
FF - user.js: extensions.mysearchdial.AL - 2
.
============= SERVICES / DRIVERS ===============
.
R0 amdkmpfd;AMD PCI Root Bus Lower Filter;C:\Windows\System32\drivers\amdkmpfd.sys [2012-1-18 31360]
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2012-11-10 16152]
R1 AvgLdx64;AVG Free AVI Loader Driver x64;C:\Windows\System32\drivers\avgldx64.sys [2013-11-7 282976]
R1 AvgMfx64;AVG Free On-access Scanner Minifilter Driver x64;C:\Windows\System32\drivers\avgmfx64.sys [2013-11-7 35664]
R1 AvgTdiA;AVG Free Network Redirector x64;C:\Windows\System32\drivers\avgtdia.sys [2013-11-7 317520]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-1-18 235520]
R2 APNMCP;Ask Update Service;C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-12-19 177560]
R2 avg9wd;AVG Free WatchDog;C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe [2013-11-9 308136]
R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2013-11-4 92160]
R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]
R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2012-9-24 31040]
R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-3-5 35200]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-5-3 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2011-12-9 607456]
R2 Intel(R) ME Service;Intel(R) ME Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-5-3 128280]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-5-3 161560]
R2 Motorola Device Manager;Motorola Device Manager Service;C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2013-11-15 137528]
R2 PDFSFilter;PDFSFilter;C:\Windows\System32\drivers\PDFsFilter.sys [2012-8-23 83224]
R2 PST Service;PST Service;C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2013-1-28 65657]
R2 UDisk Monitor;UDisk Monitor;C:\Program Files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe [2014-11-10 402944]
R2 UI Assistant Service;UI Assistant Service;C:\Program Files (x86)\Reliance 3G\AssistantServices.exe [2013-4-21 270672]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-5-3 363800]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;C:\Windows\System32\drivers\bcbtums.sys [2012-5-3 134696]
R3 btwampfl;btwampfl Bluetooth filter driver;C:\Windows\System32\drivers\btwampfl.sys [2012-5-3 620584]
R3 BTWDPAN;Bluetooth Personal Area Network;C:\Windows\System32\drivers\btwdpan.sys [2012-5-3 89640]
R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2012-5-3 39976]
R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\System32\drivers\clwvd.sys [2010-7-28 31088]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2011-12-6 331264]
R3 intelkmd;intelkmd;C:\Windows\System32\drivers\igdpmd64.sys [2012-2-28 14741632]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2012-11-10 355096]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2012-11-10 786200]
R3 motandroidusb;Mot ADB Interface Driver;C:\Windows\System32\drivers\motoandroid.sys [2013-3-26 32768]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-5-3 565352]
R3 SmbDrv;SmbDrv;C:\Windows\System32\drivers\Smb_driver.sys [2013-2-2 21264]
S2 CLKMSVC10_38F51D56;CyberLink Product - 2013/02/02 20:23:46;C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2012-2-8 244720]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 cmnsusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2053s;C:\Windows\System32\drivers\cmnsusbser.sys [2012-10-16 126080]
S3 easytether;easytether;C:\Windows\System32\drivers\easytthr.sys [2012-10-13 20752]
S3 epmntdrv;epmntdrv;C:\Windows\System32\epmntdrv.sys [2014-4-8 17480]
S3 EuGdiDrv;EuGdiDrv;C:\Windows\System32\EuGdiDrv.sys [2014-4-8 9800]
S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-12-17 265808]
S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2013-3-20 14448]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-3-25 111616]
S3 massfilter;Mass Storage Filter Driver;C:\Windows\System32\drivers\massfilter.sys [2013-4-21 11776]
S3 motccgp;Motorola USB Composite Device Driver;C:\Windows\System32\drivers\motccgp.sys [2013-3-19 23552]
S3 mtkmbim;Micromax Modem Mobile Broadband NDIS 6.20 Miniport Driver;C:\Windows\System32\drivers\mtkmbim7_x64.sys [2012-10-30 208896]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2014-4-8 19456]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;C:\Windows\System32\drivers\RtsP2Stor.sys [2012-5-3 258664]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-14 292864]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-14 1485312]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-14 740864]
S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-4-8 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2014-4-8 30208]
S3 wdf_usb;wdf_usb;C:\Windows\System32\drivers\usb2ser.sys [2015-1-30 81408]
S3 zteusbser;ZTE USB Device for Legacy Serial Communication;C:\Windows\System32\drivers\ztemtusbser.sys [2014-11-10 118784]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-23 57184]
.
=============== File Associations ===============
.
FileExt: .js: jsfile="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1"
ShellExec: dreamweaver.exe: Open="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\dreamweaver.exe", "%1"
ShellExec: Opera.exe: open="C:\Program Files (x86)\Opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2015-02-18 21:10:18 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2015-02-18 21:10:07 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
2015-02-18 21:10:07 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys
2015-02-18 21:10:07 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys
2015-02-18 21:10:07 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-17 17:42:10 -------- d-----w- C:\ProgramData\ImTOO
2015-02-16 17:56:01 -------- d-----w- C:\Users\Abhishek\AppData\Local\{59B78BC5-7AF6-4D02-A9BB-5777896082BC}
2015-02-07 20:55:37 -------- d-----w- C:\Users\Abhishek\AppData\Local\AskPartnerNetwork
2015-02-07 20:55:35 -------- d-----w- C:\ProgramData\AskPartnerNetwork
2015-02-07 20:55:35 -------- d-----w- C:\Program Files (x86)\AskPartnerNetwork
2015-02-07 20:10:02 -------- d-----w- C:\ProgramData\APN
2015-02-06 18:19:54 -------- d-----w- C:\Users\Abhishek\AppData\Roaming\IDT
2015-02-04 19:01:05 -------- d-----w- C:\Users\Abhishek\AppData\Local\{42225203-BE3E-4A56-929E-ED6199AE3987}
2015-02-01 21:46:25 -------- d-----w- C:\Users\Abhishek\.jmc
2015-02-01 21:46:17 -------- d-----w- C:\Users\Abhishek\.eclipse
2015-02-01 21:19:15 5070512 ----a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe
2015-01-31 20:21:08 -------- d-----w- C:\ProgramData\Playrix Entertainment
2015-01-31 19:37:00 -------- d-----w- C:\ProgramData\BlueStacks
2015-01-30 11:03:52 81408 ----a-w- C:\Windows\System32\drivers\usb2ser.sys
2015-01-30 11:03:52 1919968 ----a-w- C:\Windows\System32\WdfCoinstaller01005.dll
2015-01-30 11:03:51 -------- d-----w- C:\Program Files (x86)\MMX377G 3G USB Manager
.
==================== Find3M ====================
.
2015-02-06 20:05:01 71344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-06 20:05:01 701616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2015-01-19 18:38:29 108968 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
.
============= FINISH: 3:28:12.45 ===============

AbbbY Sen · Feb 19, 2015

3. Attach.txt Log

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Basic
Boot Device: \Device\HarddiskVolume1
Install Date: 12-10-2012 16:00:27
System Uptime: 19-02-2015 03:22:04 (0 hours ago)
.
Motherboard: Hewlett-Packard | | 183E
Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz | U3E1 | 2400/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 206 GiB total, 16.624 GiB free.
D: is FIXED (NTFS) - 200 GiB total, 5.527 GiB free.
E: is CDROM ()
F: is Removable
G: is FIXED (NTFS) - 19 GiB total, 2.198 GiB free.
H: is CDROM ()
I: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: PortableVBoxDRV
Device ID: ROOT\LEGACY_VBOXDRV\0000
Manufacturer:
Name: PortableVBoxDRV
PNP Device ID: ROOT\LEGACY_VBOXDRV\0000
Service: VBoxDRV
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: PortableVBoxUSBMon
Device ID: ROOT\LEGACY_VBOXUSBMON\0000
Manufacturer:
Name: PortableVBoxUSBMon
PNP Device ID: ROOT\LEGACY_VBOXUSBMON\0000
Service: VBoxUSBMon
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: EasyTether Network Adapter
Device ID: ROOT\*EASYTETHER\0000
Manufacturer: Mobile Stream
Name: EasyTether Network Adapter
PNP Device ID: ROOT\*EASYTETHER\0000
Service: easytether
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
64 Bit HP CIO Components Installer
7-Zip 9.20 (x64 edition)
Adobe Dreamweaver CS6
Adobe Flash Player 16 ActiveX
Adobe Flash Player 16 NPAPI
Adobe Flash Professional CS6
Adobe Illustrator CC
Adobe PageMaker 7.0
Adobe Photoshop CS6
Adobe Reader X (10.1.0) MUI
Adobe Shockwave Player 11.6
AMD APP SDK Runtime
AMD Catalyst Install Manager
Angry Birds Rio
Any Video Converter Professional 5.0.8
AVG Free 9.0
Bejeweled 3
Bitnami WordPress Module
BitTorrent
Blackhawk Striker 2
BlueJ
Broadcom 802.11 Wireless LAN Adapter
Broadcom Bluetooth Software
BufferChm
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
Catalyst Control Center Profiles Mobile
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Chuzzle Deluxe
Composer - Php Dependency Manager
Corel Graphics - Windows Shell Extension
CorelDRAW Graphics Suite X5
CorelDRAW Graphics Suite X5 - Capture
CorelDRAW Graphics Suite X5 - Common
CorelDRAW Graphics Suite X5 - Connect
CorelDRAW Graphics Suite X5 - Custom Data
CorelDRAW Graphics Suite X5 - Draw
CorelDRAW Graphics Suite X5 - EN
CorelDRAW Graphics Suite X5 - Filters
CorelDRAW Graphics Suite X5 - FontNav
CorelDRAW Graphics Suite X5 - IPM
CorelDRAW Graphics Suite X5 - PHOTO-PAINT
CorelDRAW Graphics Suite X5 - Photozoom Plugin
CorelDRAW Graphics Suite X5 - Redist
CorelDRAW Graphics Suite X5 - Setup Files
CorelDRAW Graphics Suite X5 - VBA
CorelDRAW Graphics Suite X5 - VideoBrowser
CorelDRAW Graphics Suite X5 - VSTA
CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit
CorelDRAW Graphics Suite X5 - WT
CorelDRAW(R) Graphics Suite X5
Cradle of Rome 2
CyberLink PowerDVD
CyberLink YouCam
D1600
D3DX10
Dev-C++ 5 beta 9 release (4.9.9.2)
DeviceDiscovery
DJ_SF_06_D1600_SW_Min
Dora's World Adventure
EaseUS Partition Master 9.3.0
EasyBCD 2.2
EasyTether
EPUB File Reader
ESU for Microsoft Windows 7 SP1
Evernote v. 4.5.2
Facebook Video Calling 3.1.0.521
Farm Frenzy
Farmscapes
FATE
FIFA 12 (c) EA version 1
Final Drive Fury
Flashtool
Free YouTube Download version 3.2.49.1111
FreeTVDownloader
GlassFish Server Open Source Edition 4.0
Google Chrome
Google Update Helper
GPBaseService2
Hewlett-Packard ACLM.NET v1.2.2.3
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
Hoyle Card Games
HP 3D DriveGuard
HP Auto
HP Client Services
HP CoolSense
HP Customer Experience Enhancements
HP Customer Participation Program 13.0
HP Deskjet D1600 Printer Driver Software 13.0 Rel .6
HP Documentation
HP Games
HP Imaging Device Functions 13.0
HP Launch Box
HP On Screen Display
HP Power Manager
HP Quick Launch
HP Recovery Manager
HP Security Assistant
HP Setup
HP Setup Manager
HP Smart Web Printing 4.5
HP Software Framework
HP Solution Center 13.0
HP Support Assistant
HPPhotoGadget
HPProductAssistant
HPSSupply
hpWLPGInstaller
IDT Audio
ImTOO Video Converter Ultimate 6
Intel(R) Control Center
Intel(R) Display Audio Driver
Intel(R) Management Engine Components
Intel(R) Rapid Storage Technology
Intel(R) USB 3.0 eXtensible Host Controller Driver
Intel® Trusted Connect Service Client
Java 7 Update 45 (64-bit)
Java Auto Updater
Java SE Development Kit 7 Update 45 (64-bit)
Jewel Match 3
Jewel Quest Mysteries: The Seventh Gate Collector's Edition
John Deere Drive Green
Junk Mail filter update
Letters from Nowhere 2
LinuxLive USB Creator
Luxor HD
Mah Jong Medley
Malwarebytes Anti-Malware version 2.0.4.1028
MarketResearch
Mesh Runtime
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Office 64-bit Components 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared 64-bit MUI (English) 2007
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
Microsoft Visual Studio Tools for Applications 2.0 - ENU
Microsoft Visual Studio Tools for Applications 2.0 Runtime
Microsoft_VC80_CRT_x86
Microsoft_VC90_CRT_x86
MMX377G 3G USB Manager v06.100413.377G
Motorola Device Manager
Motorola Device Software Update
Motorola Mobile Drivers Installation 6.3.0
Mozilla Firefox 35.0 (x86 en-US)
Mozilla Maintenance Service
MSVC90_x64
MSVC90_x86
MSVCRT
MSVCRT_amd64
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB2758694)
NetBeans IDE 8.0
Nokia Connectivity Cable Driver
Nokia PC Suite
Notepad++
opensource
Opera Stable 27.0.1689.69
Orbit Downloader
PC Connectivity Solution
PDF Settings CC
PDF Settings CS6
Penguins!
PerfectDisk Professional Business
Photomatix Pro version 4.2.4
Plants vs. Zombies - Game of the Year
PlayReady PC Runtime x86
Poker Superstars III
Polar Bowler
Polar Golfer
PowerISO
PX Profile Update
Python 2.7.3 (64-bit)
RapidTyping
Realtek Ethernet Controller Driver
Realtek PCIE Card Reader
Reliance 3G
Reliance Netconnect
RocketDock 1.3.5
RollerCoaster Tycoon 3: Platinum
RSDLite

AbbbY Sen · Feb 19, 2015

Search App by Ask
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2817641) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2878236) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2817565) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2878237) 32-Bit Edition
Shop for HP Supplies
Skype™ 6.11
SmartWebPrinting
SolutionCenter
Sony Mobile Update Service
Status
swMSM
Synaptics Pointing Device Driver
The Treasures of Mystery Island: The Ghost Ship
Toolbox
Torchlight
TrayApp
TypingMaster Pro
Uninstall BSNL Wireless Connection Manager
UnLock Root 3.1
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update Installer for WildTangent Games App
Virtual DJ Pro Full - Atomix Productions
Virtual Villagers 4 - The Tree of Life
Visual Basic for Applications (R) Core
Visual Basic for Applications (R) Core - English
Visual C++ 8.0 Runtime Setup Package (x64)
VLC media player
WebReg
WildTangent Games App (HP Games)
Win32DiskImager version 0.9.5
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (12/06/2010 4.0.0000.00000)
Windows Driver Package - MediaTek Inc. (usbser) Ports (01/05/2012 2.0000.0.1)
Windows Driver Package - MediaTek Inc. (usbser) Ports (09/01/2011 2.0.1136.0)
Windows Driver Package - MediaTek Inc. (usbser) Ports (12/24/2011 2.0000.0.0)
Windows Driver Package - MediaTek Inc. Net (07/14/2011 1.1129.00)
Windows Driver Package - Microsoft (WUDFRd) WPD (02/22/2006 5.2.5326.4762)
Windows Driver Package - Nokia Modem (02/25/2011 4.7)
Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9)
Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinRAR 5.00 (64-bit)
WinRAR archiver
Wondershare Photo Recovery (build 3.0.0)
XAMPP
ZTE EV-DO
ZTE Wireless Terminal
Zuma's Revenge
.
==== Event Viewer Messages From Past Week ========
.
19-02-2015 03:23:15, Error: Microsoft-Windows-SharedAccess_NAT [34001] - The ICS_IPV6 failed to configure IPv6 stack.
19-02-2015 03:23:15, Error: Microsoft-Windows-SharedAccess_NAT [30013] - The DHCP allocator has disabled itself on IP address 192.168.43.59, since the IP address is outside the 192.168.137.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
19-02-2015 03:23:06, Error: Service Control Manager [7000] - The PortableVBoxUSBMon service failed to start due to the following error: The system cannot find the path specified.
19-02-2015 03:23:06, Error: Service Control Manager [7000] - The PortableVBoxDRV service failed to start due to the following error: The system cannot find the path specified.
19-02-2015 03:21:36, Error: Service Control Manager [7031] - The Motorola Device Manager Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.
19-02-2015 02:32:12, Error: Service Control Manager [7001] - The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:56, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:51, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
19-02-2015 02:30:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
19-02-2015 02:30:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
19-02-2015 02:30:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
19-02-2015 02:30:31, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
19-02-2015 02:30:24, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
19-02-2015 02:30:12, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AvgLdx64 AvgMfx64 AvgTdiA DfsC discache NetBIOS NetBT nsiproxy Psched rdbss SCDEmu spldr tdx vwififlt Wanarpv6 WfpLwf
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The PST Service service depends on the Workstation service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The Network Connections service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
19-02-2015 02:30:12, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
18-02-2015 22:31:13, Error: Microsoft-Windows-SharedAccess_NAT [31004] - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
18-02-2015 22:26:41, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the btwdins service.
18-02-2015 02:38:12, Error: Service Control Manager [7000] - The Motorola Device Manager Service service failed to start due to the following error: The pipe has been ended.
18-02-2015 01:49:25, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\System32\bcmihvsrv64.dll Error Code: 21
18-02-2015 01:49:08, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AvgLdx64 AvgMfx64 discache SCDEmu spldr Wanarpv6
.
==== End Of File ===========================

AbbbY Sen · Feb 19, 2015

Comment no. 6 and 7 got repeated. Please ignore those.

Broni · Feb 19, 2015

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

Close all the running programs
Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
Otherwise just double-click on RogueKiller.exe
Pre-scan will start. Let it finish.
Click on SCAN button.
Wait until the Status box shows Scan Finished
Click on Delete.
Wait until the Status box shows Deleting Finished.
Click on Report and copy/paste the content of the Notepad into your next reply.
RKreport.txt could also be found on your desktop.
If more than one log is produced post all logs.
If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

Create new restore point before proceeding with the next step....
How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

Download

Malwarebytes Anti-Rootkit (MBAR) to your desktop.

Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
Double click on downloaded file. OK self extracting prompt.
MBAR will start. Click "Next" to continue.
Click in the following screen "Update" to obtain the latest malware definitions.
Once the update is complete select "Next" and click "Scan".
When the scan is finished and no malware has been found select "Exit".
If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
- "mbar-log-{date} (xx-xx-xx).txt"
- "system-log.txt"

NOTE. If you see This version requires you to completely exit the Anti Malware application message right click on the Malwarebytes Anti-Malware icon in the system tray and click on Exit.

AbbbY Sen · Feb 21, 2015

RogueKiller Log:

RogueKiller V10.4.1.0 [Feb 19 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Abhishek [Administrator]
Mode : Delete -- Date : 02/21/2015 19:24:30

¤¤¤ Processes : 1 ¤¤¤
[PUP] (SVC) APNMCP -- "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe"[7] -> Stopped

¤¤¤ Registry : 16 ¤¤¤
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (C:\Program Files (x86)\AVG\AVG9\avgssiea.dll) -> Not selected
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} -> Not selected
[PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll) -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (C:\Program Files (x86)\AVG\AVG9\avgssiea.dll) -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll) -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214} -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (C:\Program Files (x86)\AVG\AVG9\avgssiea.dll) -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} (C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll) -> Not selected
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | ApnTBMon : "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\APNMCP ("C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe") -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\APNMCP ("C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe") -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\APNMCP ("C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe") -> Not selected
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Not selected
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Not selected

¤¤¤ Tasks : 7 ¤¤¤
[Suspicious.Path] FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000Core.job -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/c /nocrashserver) -> Deleted
[Suspicious.Path] FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000UA.job -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/ua /installsource scheduler) -> Deleted
[Suspicious.Path] FoxTab.job -- C:\Users\Abhishek\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE (/Check) -> Deleted
[Rogue.Korean?Suspicious.Path] schedule!3036567561.job -- C:\ProgramData\BetterSoft\OptimizerPro\OptimizerPro.exe (/schedule /profile "c:\programdata\bettersoft\optimizerpro\3036567561.ini") -> Deleted
[Suspicious.Path] \\FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000Core -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/c /nocrashserver) -> Deleted
[Suspicious.Path] \\FacebookUpdateTaskUserS-1-5-21-674437956-1809715338-1024526891-1000UA -- C:\Users\Abhishek\AppData\Local\Facebook\Update\FacebookUpdate.exe (/ua /installsource scheduler) -> Deleted
[Suspicious.Path] \\FoxTab -- C:\Users\Abhishek\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE (/Check) -> Deleted

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

¤¤¤ Web browsers : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] 49aoobau.default : user_pref("browser.startup.homepage", "http://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=^BVK^YYYYYY^YY^IN&gct=hp&apn_ptnrs=^BVK&apn_dtid=^YYYYYY^YY^IN&apn_dbr=ff_35.0&apn_uid=3601C8C7-9D42-402F-8104-E4BDAE5FF83C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx"); -> Not selected

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA MK5076GSX +++++
--- User ---
[MBR] 3fe06065b9e3d6077aad13e7e4d8c2ce
[BSP] 6ae08d026f75abb109f65dbe9d310187 : Linux MBR Code
Partition table:
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Motorola MB526 USB Device +++++
Error reading User MBR! ([2] The system cannot find the file specified. )
Error reading LL1 MBR! ([48f] The device is not connected. )
Error reading LL2 MBR! ([32] The request is not supported. )

============================================
RKreport_SCN_02212015_192311.log

AbbbY Sen · Feb 21, 2015

MBAR Log

Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
main: v2015.02.22.02
rootkit: v2015.02.20.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16659
Abhishek :: ABHISHEK-HP [administrator]

22-02-2015 07:59:15
mbar-log-2015-02-22 (07-59-15).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged.
Objects scanned: 374403
Time elapsed: 36 minute(s), 43 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

AbbbY Sen · Feb 21, 2015

System-Log:

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.1.1004

(c) Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 11.0.9600.16659

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, G:\ DRIVE_FIXED
CPU speed: 2.394000 GHz
Memory total: 4188389376, free: 1037459456

Downloaded database version: v2015.02.21.04
Downloaded database version: v2015.02.20.01
Downloaded database version: v2014.12.06.01
Downloaded database version: v2015.02.21.05
Downloaded database version: v2015.02.21.06
Downloaded database version: v2015.02.21.07
Downloaded database version: v2015.02.21.08
Downloaded database version: v2015.02.21.09
Downloaded database version: v2015.02.21.10
Downloaded database version: v2015.02.22.01
Downloaded database version: v2015.02.22.02
=======================================
Initializing...
------------ Kernel report ------------
02/22/2015 07:58:59
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\System32\Drivers\spix.sys
\SystemRoot\System32\Drivers\WMILIB.SYS
\SystemRoot\System32\Drivers\SCSIPORT.SYS
\SystemRoot\system32\drivers\ACPI.sys
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\vdrvroot.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\compbatt.sys
\SystemRoot\system32\drivers\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\iaStor.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\amdxata.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\System32\Drivers\msrpc.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\System32\Drivers\cng.sys
\SystemRoot\System32\drivers\pcw.sys
\SystemRoot\System32\Drivers\Fs_Rec.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\Drivers\ksecpkg.sys
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\system32\drivers\wd.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\drivers\rdyboost.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\drivers\iusb3hcs.sys
\SystemRoot\System32\drivers\hwpolicy.sys
\SystemRoot\system32\drivers\hpdskflt.sys
\SystemRoot\System32\DRIVERS\fvevol.sys
\SystemRoot\system32\drivers\disk.sys
\SystemRoot\system32\drivers\CLASSPNP.SYS
\SystemRoot\system32\DRIVERS\amdkmpfd.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\system32\drivers\rdprefmp.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\System32\Drivers\avgtdia.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\system32\DRIVERS\wfplwf.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\vwififlt.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\termdd.sys
\SystemRoot\System32\Drivers\SCDEmu.SYS
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\system32\drivers\mssmbios.sys
\SystemRoot\System32\drivers\discache.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\drivers\blbdrive.sys
\SystemRoot\System32\Drivers\avgmfx64.sys
\SystemRoot\System32\Drivers\avgldx64.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\drivers\CmBatt.sys
\SystemRoot\system32\DRIVERS\atikmpag.sys
\SystemRoot\system32\DRIVERS\atikmdag.sys
\SystemRoot\system32\DRIVERS\igdpmd64.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\dxgmms1.sys
\SystemRoot\system32\DRIVERS\iusb3xhc.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\HECIx64.sys
\SystemRoot\system32\drivers\usbehci.sys
\SystemRoot\system32\drivers\USBPORT.SYS
\SystemRoot\system32\drivers\HDAudBus.sys
\SystemRoot\system32\DRIVERS\bcmwl664.sys
\SystemRoot\system32\DRIVERS\vwifibus.sys
\SystemRoot\system32\DRIVERS\Rt64win7.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\SynTP.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\Smb_driver.sys
\SystemRoot\System32\Drivers\au96ev3j.SYS
\SystemRoot\system32\DRIVERS\Accelerometer.sys
\SystemRoot\system32\drivers\wmiacpi.sys
\SystemRoot\system32\drivers\intelppm.sys
\SystemRoot\system32\drivers\CompositeBus.sys
\SystemRoot\system32\DRIVERS\clwvd.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\DRIVERS\AgileVpn.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\drivers\swenum.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\DRIVERS\iusb3hub.sys
\SystemRoot\system32\DRIVERS\stwrt64.sys
\SystemRoot\system32\DRIVERS\portcls.sys
\SystemRoot\system32\DRIVERS\drmk.sys
\SystemRoot\system32\DRIVERS\IntcDAud.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\System32\Drivers\motoandroid.sys
\SystemRoot\system32\drivers\bcbtums.sys
\??\C:\Windows\system32\drivers\btwampfl.sys
\??\C:\Windows\system32\drivers\HIDPARSE.SYS
\SystemRoot\System32\Drivers\BTHUSB.sys
\SystemRoot\System32\Drivers\bthport.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_iaStor.sys
\SystemRoot\System32\Drivers\dump_dumpfve.sys
\SystemRoot\System32\Drivers\usbvideo.sys
\SystemRoot\system32\DRIVERS\rfcomm.sys
\SystemRoot\system32\DRIVERS\BthEnum.sys
\SystemRoot\system32\DRIVERS\bthmodem.sys
\SystemRoot\system32\drivers\modem.sys
\SystemRoot\system32\DRIVERS\btwavdt.sys
\SystemRoot\system32\drivers\btwaudio.sys
\SystemRoot\system32\DRIVERS\btwl2cap.sys
\SystemRoot\system32\DRIVERS\btwdpan.sys
\SystemRoot\system32\drivers\btwrchid.sys
\SystemRoot\system32\drivers\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\PDFsFilter.sys
\SystemRoot\System32\Drivers\DefragFS.SYS
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\??\C:\Windows\system32\Drivers\rikvm_38F51D56.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\System32\drivers\ipnat.sys
\SystemRoot\system32\drivers\WudfPf.sys
\SystemRoot\system32\DRIVERS\WUDFRd.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\Windows\System32\ntdll.dll
\Windows\System32\smss.exe
\Windows\System32\apisetschema.dll
----------- End -----------

Broni · Feb 21, 2015

Please download ComboFix from Here, Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Never rename Combofix unless instructed.
Close any open browsers.
Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Close any open browsers.
WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
If the connection is not there use restore point you created prior to running Combofix.
Double click on combofix.exe & follow the prompts.

NOTE1. If Combofix asks you to install Recovery Console, please allow it.
NOTE 2. If Combofix asks you to update the program, always do so.

When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt"

**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
Use AppRemover to uninstall it: https://www.techspot.com/downloads/5514-appremover.html
We can reinstall it when we're done with CF.
**Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
**Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.

Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try the following...

Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.
Download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

Restart computer in safe mode

Double-click on the Rkill desktop icon to run the tool.
If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.

When the scan is done Notepad will open with rKill.txt log.
NOTE. rKill.txt log will also be present on your desktop.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.

AbbbY Sen · Feb 21, 2015

Done!
IRP handler 0 of \Driver\USBSTOR points to an unknown module
Unhooking enabled.

Scan started
Database versions:
main: v2015.02.22.02
rootkit: v2015.02.20.01

<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xfffffa8009e2f060
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\00000087\
Lower Device Object: 0xfffffa8009c6b9e0
Lower Device Driver Name: \Driver\USBSTOR\
Driver name found: USBSTOR
Initialization returned 0x0
Load Function returned 0x0
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xfffffa8006583790
Upper Device Driver Name: \Driver\Disk\
Lower Device Name: \Device\Ide\IAAStorageDevice-1\
Lower Device Object: 0xfffffa8006582050
Lower Device Driver Name: \Driver\iaStor\
Driver name found: iaStor
Initialization returned 0x0
Load Function returned 0x0
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8006583790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa800645fb90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8006583790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa800645eb10, DeviceName: Unknown, DriverName: \Driver\hpdskflt\
DevicePointer: 0xfffffa8006582050, DeviceName: \Device\Ide\IAAStorageDevice-1\, DriverName: \Driver\iaStor\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\
Upper DeviceData: 0xfffff8a015f21570, 0xfffffa8006583790, 0xfffffa8006027790
Lower DeviceData: 0xfffff8a01857c180, 0xfffffa8006582050, 0xfffffa80058e1660
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
File user open failed: C:\WINDOWS\SYSTEM32\drivers\sptd.sys (0x00000020)
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 794AE9E5

Partition information:

Partition 0 type is Primary (0x7)
Partition is ACTIVE.
Partition starts at LBA: 2048 Numsec = 407552
Partition file system is NTFS
Partition is bootable

Partition 1 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 409600 Numsec = 431224820

Partition 2 type is Extended with LBA (0xf)
Partition is NOT ACTIVE.
Partition starts at LBA: 431634430 Numsec = 504334338

Partition 3 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 935968768 Numsec = 40800256

Disk Size: 500107862016 bytes
Sector size: 512 bytes

Done!
Physical Sector Size: 0
Drive: 1, DevicePointer: 0xfffffa8009e2f060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8009c67b90, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8009e2f060, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\
DevicePointer: 0xfffffa8009c6b9e0, DeviceName: \Device\00000087\, DriverName: \Driver\USBSTOR\
------------ End ----------
Scan finished
=======================================

Removal queue found; removal started
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-I.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-2048-I.mbam...
Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam...
Removal finished

Broni · Feb 21, 2015

We posted at the same time.
Please read my previous reply.

AbbbY Sen · Feb 21, 2015

I have AVG, so do I need to uninstall it or just uncheck the Resident Shield option to disable the real time protection

AbbbY Sen · Feb 21, 2015

ComboFix Log

ComboFix 15-02-16.01 - Abhishek 22-02-2015 9:29.1.4 - x64
Microsoft Windows 7 Home Basic 6.1.7601.1.1252.91.1033.18.3994.1920 [GMT 5.5:30]
Running from: c:\users\Abhishek\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msdownld.tmp
c:\windows\SysWow64\DEBUG.log
.
.
((((((((((((((((((((((((( Files Created from 2015-01-22 to 2015-02-22 )))))))))))))))))))))))))))))))
.
.
2015-02-22 04:08 . 2015-02-22 04:08 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-02-22 02:28 . 2015-02-22 03:06 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-02-21 13:46 . 2015-02-21 13:46 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-02-21 13:46 . 2015-02-21 13:46 -------- d-----w- c:\programdata\RogueKiller
2015-02-18 21:10 . 2015-02-22 02:28 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-18 21:10 . 2015-02-21 14:00 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-02-18 21:10 . 2015-02-18 21:10 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2015-02-18 21:10 . 2014-11-21 00:44 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-02-18 21:10 . 2014-11-21 00:44 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-02-17 17:42 . 2015-02-17 17:42 -------- d-----w- c:\programdata\ImTOO
2015-02-07 20:55 . 2015-02-07 20:55 -------- d-----w- c:\users\Abhishek\AppData\Local\AskPartnerNetwork
2015-02-07 20:55 . 2015-02-07 20:55 -------- d-----w- c:\programdata\AskPartnerNetwork
2015-02-07 20:55 . 2015-02-07 20:55 -------- d-----w- c:\program files (x86)\AskPartnerNetwork
2015-02-07 20:10 . 2015-02-07 20:10 -------- d-----w- c:\programdata\APN
2015-02-06 18:19 . 2015-02-06 18:19 -------- d-----w- c:\users\Abhishek\AppData\Roaming\IDT
2015-02-01 21:46 . 2015-02-01 21:46 -------- d-----w- c:\users\Abhishek\.jmc
2015-02-01 21:46 . 2015-02-01 21:46 -------- d-----w- c:\users\Abhishek\.eclipse
2015-02-01 21:19 . 2015-02-06 20:04 5070512 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2015-01-31 20:21 . 2015-01-31 20:21 -------- d-----w- c:\programdata\Playrix Entertainment
2015-01-31 19:37 . 2015-01-31 19:37 -------- d-----w- c:\programdata\BlueStacks
2015-01-30 11:03 . 2013-02-21 09:47 81408 ----a-w- c:\windows\system32\drivers\usb2ser.sys
2015-01-30 11:03 . 2013-02-21 09:47 1919968 ----a-w- c:\windows\system32\WdfCoinstaller01005.dll
2015-01-30 11:03 . 2015-01-30 11:03 -------- d-----w- c:\program files (x86)\MMX377G 3G USB Manager
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-06 20:05 . 2012-02-04 23:12 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-06 20:05 . 2012-02-04 23:12 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-01-19 18:38 . 2015-01-19 18:38 312744 ----a-w- c:\windows\system32\javaws.exe
2015-01-19 18:38 . 2015-01-19 18:38 189352 ----a-w- c:\windows\system32\javaw.exe
2015-01-19 18:38 . 2015-01-19 18:38 189352 ----a-w- c:\windows\system32\java.exe
2015-01-19 18:38 . 2015-01-19 18:38 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-11-11 08:37 323752 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"PC Suite Tray"="c:\program files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" [2012-06-26 1516632]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-01-18 343168]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-11-10 291608]
"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960]
"HP CoolSense"="c:\program files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" [2012-11-05 1343904]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"AVG9_TRAY"="c:\progra~2\AVG\AVG9\avgtray.exe" [2014-12-10 2079792]
"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2013-12-16 337432]
"EaseUS EPM tray"="c:\program files (x86)\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe" [2013-03-29 2081792]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2014-12-19 1949080]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2011-12-6 1338656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_Dlls"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
.
R2 APNMCP;Ask Update Service;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
R2 CLKMSVC10_38F51D56;CyberLink Product - 2013/02/02 20:23;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 VBoxDRV;PortableVBoxDRV;k:\virtualbox\Portable-VirtualBox\app64\drivers\VBoxDrv\VBoxDrv.sys;k:\virtualbox\Portable-VirtualBox\app64\drivers\VBoxDrv\VBoxDrv.sys [x]
R2 VBoxUSBMon;PortableVBoxUSBMon;k:\virtualbox\Portable-VirtualBox\app64\drivers\USB\filter\VBoxUSBMon.sys;k:\virtualbox\Portable-VirtualBox\app64\drivers\USB\filter\VBoxUSBMon.sys [x]
R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys;c:\windows\SYSNATIVE\DRIVERS\motfilt.sys [x]
R3 cmnsusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2053s;c:\windows\system32\DRIVERS\cmnsusbser.sys;c:\windows\SYSNATIVE\DRIVERS\cmnsusbser.sys [x]
R3 easytether;easytether;c:\windows\system32\DRIVERS\easytthr.sys;c:\windows\SYSNATIVE\DRIVERS\easytthr.sys [x]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys;c:\windows\SYSNATIVE\epmntdrv.sys [x]
R3 esgiguard;esgiguard;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys;c:\windows\SYSNATIVE\EuGdiDrv.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x]
R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys;c:\windows\SYSNATIVE\DRIVERS\motccgp.sys [x]
R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys;c:\windows\SYSNATIVE\DRIVERS\motccgpfl.sys [x]
R3 MotDev;Motorola Inc. USB Device;c:\windows\system32\DRIVERS\motodrv.sys;c:\windows\SYSNATIVE\DRIVERS\motodrv.sys [x]
R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys;c:\windows\SYSNATIVE\DRIVERS\Motousbnet.sys [x]
R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys;c:\windows\SYSNATIVE\DRIVERS\motusbdevice.sys [x]
R3 mtkmbim;Micromax Modem Mobile Broadband NDIS 6.20 Miniport Driver;c:\windows\system32\DRIVERS\mtkmbim7_x64.sys;c:\windows\SYSNATIVE\DRIVERS\mtkmbim7_x64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 u302bus;HSPADataCard WMC Bus Driver (WDM);c:\windows\system32\DRIVERS\u302bus.sys;c:\windows\SYSNATIVE\DRIVERS\u302bus.sys [x]
R3 u302mdfl;HSPADataCard Modem Filter;c:\windows\system32\DRIVERS\u302mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\u302mdfl.sys [x]
R3 u302mdm;HSPADataCard Modem Driver;c:\windows\system32\DRIVERS\u302mdm.sys;c:\windows\SYSNATIVE\DRIVERS\u302mdm.sys [x]
R3 u302mgmt;HSPADataCard USB Device Management Drivers (WDM);c:\windows\system32\DRIVERS\u302mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\u302mgmt.sys [x]
R3 wdf_usb;wdf_usb;c:\windows\system32\DRIVERS\usb2ser.sys;c:\windows\SYSNATIVE\DRIVERS\usb2ser.sys [x]
R3 zteusbser;ZTE USB Device for Legacy Serial Communication;c:\windows\system32\DRIVERS\ztemtusbser.sys;c:\windows\SYSNATIVE\DRIVERS\ztemtusbser.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmpfd.sys;c:\windows\SYSNATIVE\DRIVERS\amdkmpfd.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\drivers\iusb3hcs.sys;c:\windows\SYSNATIVE\drivers\iusb3hcs.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S1 AvgLdx64;AVG Free AVI Loader Driver x64;c:\windows\System32\Drivers\avgldx64.sys;c:\windows\SYSNATIVE\Drivers\avgldx64.sys [x]
S1 AvgMfx64;AVG Free On-access Scanner Minifilter Driver x64;c:\windows\System32\Drivers\avgmfx64.sys;c:\windows\SYSNATIVE\Drivers\avgmfx64.sys [x]
S1 AvgTdiA;AVG Free Network Redirector x64;c:\windows\System32\Drivers\avgtdia.sys;c:\windows\SYSNATIVE\Drivers\avgtdia.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 avg9wd;AVG Free WatchDog;c:\program files (x86)\AVG\AVG9\avgwdsvc.exe;c:\program files (x86)\AVG\AVG9\avgwdsvc.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 Motorola Device Manager;Motorola Device Manager Service;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [x]
S2 PDFSFilter;PDFSFilter;c:\windows\system32\DRIVERS\PDFsFilter.sys;c:\windows\SYSNATIVE\DRIVERS\PDFsFilter.sys [x]
S2 PST Service;PST Service;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [x]
S2 UDisk Monitor;UDisk Monitor;c:\program files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe;c:\program files\ZTE Wireless Terminal\bin\MonServiceUDisk.exe [x]
S2 UI Assistant Service;UI Assistant Service;c:\program files (x86)\Reliance 3G\AssistantServices.exe;c:\program files (x86)\Reliance 3G\AssistantServices.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys;c:\windows\SYSNATIVE\drivers\bcbtums.sys [x]
S3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
S3 BTWDPAN;Bluetooth Personal Area Network;c:\windows\system32\DRIVERS\btwdpan.sys;c:\windows\SYSNATIVE\DRIVERS\btwdpan.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 motandroidusb;Mot ADB Interface Driver;c:\windows\system32\Drivers\motoandroid.sys;c:\windows\SYSNATIVE\Drivers\motoandroid.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SmbDrv;SmbDrv;c:\windows\system32\DRIVERS\Smb_driver.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver.sys [x]

AbbbY Sen · Feb 21, 2015

.
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - CLKMDRV10_38F51D56
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-02-20 18:42 1084744 ----a-w- c:\program files (x86)\Google\Chrome\Application\40.0.2214.115\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-02-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-02-04 20:05]
.
2015-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-16 21:05]
.
2015-02-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-16 21:05]
.
2015-02-22 c:\windows\Tasks\HPCeeScheduleForAbhishek.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 12:43]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-11-07 12:38 357376 ----a-w- c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-03-20 472992]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-02-02 1425408]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-28 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-28 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-02-28 439576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\avgrssta.dll
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.com/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = www.google.com
IE: &Download by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
TCP: DhcpNameServer = 192.168.43.1
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}: DhcpNameServer = 192.168.43.1
TCP: Interfaces\{CD6A6AC2-01C7-4274-8119-C88CF2EFD560}\261616072756: DhcpNameServer = 192.168.137.1
FF - ProfilePath - c:\users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=%5EBVK%5EYYYYYY%5EYY%5EIN&gct=hp&apn_ptnrs=%5EBVK&apn_dtid=%5EYYYYYY%5EYY%5EIN&apn_dbr=ff_35.0&apn_uid=3601C8C7-9D42-402F-8104-E4BDAE5FF83C&itbv=12.23.0.200&doi=2015-02-07&psv=&pt=crx
FF - prefs.js: keyword.URL - google.com
FF - ExtSQL: !HIDDEN! 2013-08-05 22:58; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - user.js: extensions.irmysearch.instlRef - 140305_b
FF - user.js: extensions.irmysearch.cr - 1501068693
FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
FF - user.js: extensions.mysearchdial.hmpgUrl - hxxp://start.mysearchdial.com/?f=1&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
FF - user.js: extensions.mysearchdial.dfltSrch - true
FF - user.js: extensions.mysearchdial.srchPrvdr - Mysearchdial
FF - user.js: extensions.mysearchdial.dnsErr - true
FF - user.js: extensions.mysearchdial_i.newTab - false
FF - user.js: extensions.mysearchdial.newTabUrl - hxxp://start.mysearchdial.com/?f=2&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=
FF - user.js: extensions.mysearchdial.tlbrSrchUrl - hxxp://start.mysearchdial.com/?f=3&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=&q=
FF - user.js: extensions.mysearchdial.id - E006E61833AA566F
FF - user.js: extensions.mysearchdial.instlDay - 16174
FF - user.js: extensions.mysearchdial.vrsn - 1.8.29.0
FF - user.js: extensions.mysearchdial.vrsni - 1.8.29.0
FF - user.js: extensions.mysearchdial_i.vrsnTs - 1.8.29.023:41:0
FF - user.js: extensions.mysearchdial.prtnrId - mysearchdial
FF - user.js: extensions.mysearchdial.prdct - mysearchdial
FF - user.js: extensions.mysearchdial.aflt - dvd_14_16_ff
FF - user.js: extensions.mysearchdial_i.smplGrp - none
FF - user.js: extensions.mysearchdial.tlbrId - base
FF - user.js: extensions.mysearchdial.instlRef - 140305_b
FF - user.js: extensions.mysearchdial.dfltLng -
FF - user.js: extensions.mysearchdial.appId - {CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
FF - user.js: extensions.mysearchdial.excTlbr - false
FF - user.js: extensions.mysearchdial.cr - 1501068693
FF - user.js: extensions.mysearchdial.cd - 2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q
FF - user.js: extensions.mysearchdial.AL - 2
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-ZTE ADSL - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM_Wow6432Node-ActiveSetup-{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-1ClickDownload - c:\program files (x86)\1clickmoviedownloader.com\uninst.exe
AddRemove-WTA-060835f8-ba92-4f29-9820-bd28e24b395e - c:\program files (x86)\HP Games\Poker Superstars III\uninstall\uninstaller.exe
AddRemove-WTA-1085ed20-1abd-4e54-a0f4-7570989ba599 - c:\program files (x86)\HP Games\Final Drive Fury\uninstall\uninstaller.exe
AddRemove-WTA-1e4e0e9c-a1b7-486d-b4eb-d49b3fc18d6f - c:\program files (x86)\HP Games\RollerCoaster Tycoon 3 Platinum\uninstall\uninstaller.exe
AddRemove-WTA-27234381-983b-441e-aa9a-13f99db15696 - c:\program files (x86)\HP Games\Hoyle Card Games\uninstall\uninstaller.exe
AddRemove-WTA-34c2fe5e-40d1-4ff7-bc22-79b1f4c5e83a - c:\program files (x86)\HP Games\Jewel Match 3\uninstall\uninstaller.exe
AddRemove-WTA-3b9f1261-6b9f-422c-82f8-4482de1ae6a2 - c:\program files (x86)\HP Games\John Deere Drive Green\uninstall\uninstaller.exe
AddRemove-WTA-40c4a6de-9217-4500-91be-19d6725e32e9 - c:\program files (x86)\HP Games\Torchlight\uninstall\uninstaller.exe
AddRemove-WTA-4a2b4983-ca70-4830-839d-ff22f8aa9d8a - c:\program files (x86)\HP Games\Farm Frenzy\uninstall\uninstaller.exe
AddRemove-WTA-52e83f26-e526-46d8-96f2-53fc102bcfff - c:\program files (x86)\HP Games\Zumas Revenge\uninstall\uninstaller.exe
AddRemove-WTA-67acca33-0fe7-44ce-aeef-70cf346b8ad3 - c:\program files (x86)\HP Games\Farmscapes\uninstall\uninstaller.exe
AddRemove-WTA-7061d022-6abf-4eeb-95b9-11b3d12ef3b6 - c:\program files (x86)\HP Games\Luxor HD\uninstall\uninstaller.exe
AddRemove-WTA-7783c07f-e883-420d-99d1-49585d840017 - c:\program files (x86)\HP Games\Chuzzle Deluxe\uninstall\uninstaller.exe
AddRemove-WTA-acc9783c-4d84-4ad5-aab7-6f94d51cc53c - c:\program files (x86)\HP Games\Bejeweled 3\uninstall\uninstaller.exe
AddRemove-WTA-adae3110-355b-4a45-b9a2-0870be9f7d68 - c:\program files (x86)\HP Games\Letters from Nowhere 2\uninstall\uninstaller.exe
AddRemove-WTA-aed7e19b-d302-45cb-8f0b-a4bef4ea16a7 - c:\program files (x86)\HP Games\Jewel Quest Mysteries The Seventh Gate Collectors Edition\uninstall\uninstaller.exe
AddRemove-WTA-af29f08a-46ff-4d2d-a302-1d2acacbdf44 - c:\program files (x86)\HP Games\Penguins!\uninstall\uninstaller.exe
AddRemove-WTA-b46d3243-a1be-4c71-ac1e-d389fcb1cca3 - c:\program files (x86)\HP Games\Virtual Villagers 4 - The Tree of Life\uninstall\uninstaller.exe
AddRemove-WTA-c667e7ab-917d-4676-8e96-51bfc889843b - c:\program files (x86)\HP Games\Polar Bowler\uninstall\uninstaller.exe
AddRemove-WTA-cfd140b8-e211-4146-8add-39df43b30d93 - c:\program files (x86)\HP Games\FATE\uninstall\uninstaller.exe
AddRemove-WTA-d562800f-b69f-435c-9d5b-f36b49eaccf5 - c:\program files (x86)\HP Games\Blackhawk Striker 2\uninstall\uninstaller.exe
AddRemove-WTA-d670400e-0995-46a8-96fe-7435a3c05791 - c:\program files (x86)\HP Games\Cradle of Rome 2\uninstall\uninstaller.exe
AddRemove-WTA-dfd07a4a-2b42-426a-ac02-79d6d4d5d8e2 - c:\program files (x86)\HP Games\Plants vs Zombies - Game of the Year\uninstall\uninstaller.exe
AddRemove-WTA-e586ec1c-31fa-4abc-934c-4ef01131056a - c:\program files (x86)\HP Games\The Treasures of Mystery Island The Ghost Ship\uninstall\uninstaller.exe
AddRemove-WTA-f3cc5135-34be-4ae0-8e90-ea090e326e62 - c:\program files (x86)\HP Games\Doras World Adventure\uninstall\uninstaller.exe
AddRemove-WTA-f55d017e-e492-494a-8d5d-12bd0349d7b7 - c:\program files (x86)\HP Games\Polar Golfer\uninstall\uninstaller.exe
AddRemove-WTA-fccb90b4-1dc1-467f-b32e-57f3da3abe2a - c:\program files (x86)\HP Games\Mah Jong Medley\uninstall\uninstaller.exe
AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*c*èT]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*c*èT\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*D*J*M*a*z*þ[|\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*m*p*yÞ`j\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#ß*÷*]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#ß*÷*\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#±÷*]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*!#±÷*\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%¥*+*]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*%¥*+*\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%R%^%]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%R%^%\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%X%^%]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*<%X%^%\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*R%a"S%]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*R%a"S%\OpenWithList]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*5?fõ*€#]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*5?fõ*€#\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*c*èT]
"0"=hex:44,3a,5c,56,69,64,65,6f,5c,44,61,69,6c,79,6d,6f,74,69,6f,6e,20,2d,20,
54,68,69,72,74,65,65,6e,20,53,65,6e,73,65,73,20,2d,20,49,6e,74,6f,20,54,68,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_USERS\S-1-5-21-674437956-1809715338-1024526891-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*5?fõ*€#]
"0"=hex:47,3a,5c,68,69,6e,64,69,5c,64,6f,6f,62,61,5f,64,6f,6f,62,61,5f,72,65,
68,74,61,5f,68,6f,6f,6e,5f,73,69,6c,6b,5f,72,6f,75,74,65,5f,62,65,73,74,5f,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

AbbbY Sen · Feb 21, 2015

.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0017\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-02-22 09:42:50
ComboFix-quarantined-files.txt 2015-02-22 04:12
.
Pre-Run: 19,121,692,672 bytes free
Post-Run: 21,109,313,536 bytes free
.
- - End Of File - - 82B341FD6E35685994EE25A42E45C9FA

Broni · Feb 21, 2015

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please copy and paste it to your reply.

AbbbY Sen · Feb 22, 2015

After running AdwCleaner while rebooting a blue screen appeared with some error.
AdwCleaner Log
# AdwCleaner v4.111 - Logfile created 22/02/2015 at 10:31:13
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows 7 Home Basic Service Pack 1 (x64)
# Username : Abhishek - ABHISHEK-HP
# Running from : C:\Users\Abhishek\Desktop\adwcleaner_4.111.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : APNMCP

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\BetterSoft
Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\ProgramData\RightClick
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Program Files (x86)\AskPartnerNetwork
Folder Deleted : C:\Program Files (x86)\DAEMON Tools Toolbar
Folder Deleted : C:\Program Files (x86)\orbitdownloader
Folder Deleted : C:\Windows\SysWOW64\SearchProtect
Folder Deleted : C:\Users\Abhishek\AppData\Local\AskPartnerNetwork
Folder Deleted : C:\Users\Abhishek\AppData\Local\Bundled software uninstaller
Folder Deleted : C:\Users\Abhishek\AppData\Local\Zoom_Downloader
Folder Deleted : C:\Users\Abhishek\AppData\Local\CrashRpt
Folder Deleted : C:\Users\Abhishek\AppData\LocalLow\HPAppData
Folder Deleted : C:\Users\Abhishek\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Abhishek\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\Abhishek\AppData\Roaming\FoxTab
Folder Deleted : C:\Users\Abhishek\AppData\Roaming\GrabPro
Folder Deleted : C:\Users\Abhishek\AppData\Roaming\SendSpace
Folder Deleted : C:\Users\Abhishek\AppData\Roaming\RHEng
Folder Deleted : C:\Users\Abhishek\AppData\Roaming\ProgSense
File Deleted : C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\searchplugins\ask-search.xml
File Deleted : C:\Users\Abhishek\AppData\Roaming\Mozilla\Firefox\Profiles\49aoobau.default\user.js
File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ifohbjbgfchkkfhphahclmkpgejiplfo_0.localstorage
File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage-journal
File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_services.hearstmags.com_0.localstorage
File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.ak.facebook.com_0.localstorage
File Deleted : C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.ak.facebook.com_0.localstorage-journal

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Download by Orbit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Grab video by Orbit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Do&wnload selected by Orbit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Down&load all by Orbit
Key Deleted : HKLM\SOFTWARE\Classes\AppID\AutocompletePro.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKCU\Software\594dedeb13aea17
Key Deleted : HKLM\SOFTWARE\594dedeb13aea17
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3F1D494B-0CEF-4468-96C9-386E2E4DEC90}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7854F00C-DC77-477E-A10E-603F48442D3B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0880527-DC28-4EBB-BA27-D22102F22A9F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BCDDE143-FAE3-4C57-B22B-C4E8678CFDC0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{57EEFDF4-1C92-E3C8-FD0C-37B528AB41BC}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\Complitly
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\Orbit
Key Deleted : HKCU\Software\ProgSense
Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\dt soft\daemon tools toolbar
Key Deleted : HKLM\SOFTWARE\Orbit
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\SP Global
Key Deleted : HKLM\SOFTWARE\SProtector
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit_is1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.16521

-\\ Mozilla Firefox v36.0 (x86 en-US)

[49aoobau.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.default.homepage.check", false);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.default.search.check", false);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("browser.search.order.1", "Mysearchdial");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.search.ask.com/?tpid=BTRSP-C&o=APN11818&pf=V7&trgb=FF&p2=%5EBVK%5EYYYYYY%5EYY%5EIN&gct=hp&apn_ptnrs=%5EBVK&apn_dtid=%5EYYYYYY%5EYY%5EIN&apn_dbr=ff_35.[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.aflt", "dvd_14_16_ff");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtCzz[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.cr", "1501068693");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.irmysearch.instlRef", "140305_b");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.AL", 2);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.aflt", "dvd_14_16_ff");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1yCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtEtDzytByCtDtG0FtC[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.cntry", "IN");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.cr", "1501068693");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dfltLng", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.hdrMd5", "43052913943B13646AF3E4A9372C9E30");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.hmpg", true);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEt[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.id", "E006E61833AA566F");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.instlDay", "16174");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.instlRef", "140305_b");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd103&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0CyCyCtAtN1L2XzutBtFtBtFyDtFtCtDyBtDtN1L1Czu1L1C1H1[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.29.023:41:0");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCy[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"95\",\"lastVrsn\":\"95\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.sg", "none");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1Czut[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.vrsn", "1.8.29.0");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial.vrsni", "1.8.29.0");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false);
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.29.023:41:0");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("extensions.xpiState", "{\"app-profile\":{\"toolbar_BTRSP-C@apn.ask.com\":{\"d\":\"C:\\\\Users\\\\Abhishek\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\49aoobau.default\\\\exte[...]
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
[49aoobau.default\prefs.js] - Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v40.0.2214.115

[C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=IN&userid=a2be68fb-d24a-77b5-cc5c-8978f5199cc8&searchtype=ds&q={searchTerms}&installDate=26/10/2013
[C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3321459&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPB4CB1863-D05C-4A32-BB88-6E475F0C44D5&q={searchTerms}&SSPV=
[C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=

-\\ Opera v27.0.1689.69

[C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=IN&userid=a2be68fb-d24a-77b5-cc5c-8978f5199cc8&searchtype=ds&q={searchTerms}&installDate=26/10/2013
[C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?ctid=CT3321459&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPB4CB1863-D05C-4A32-BB88-6E475F0C44D5&q={searchTerms}&SSPV=
[C:\Users\Abhishek\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_16_ff&cd=2XzuyEtN2Y1L1Qzu0EtDtDyC0EyCtCzztAtA0A0AyDyCyC0FtN0D0Tzu0SzztAyEtN1L2XzutBtFtBtDtFtCtFtDtN1L1CzutCyEtDtAtDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyE0AzyyByDyC0B0FtGyCyByD0EtGyDzztAtAtGtC0D0C0AtGtDtB0AyE0FyBtD0Dzz0AtCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0DyEtDzytByCtDtG0FtCzzzztGtCyE0E0DtG0E0Bzz0AtGyD0F0EtAyD0BtC0E0DyC0Czz2Q&cr=1501068693&ir=

*************************

AdwCleaner[R0].txt - [18230 bytes] - [22/02/2015 10:29:10]
AdwCleaner[S0].txt - [19550 bytes] - [22/02/2015 10:31:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19610 bytes] ##########

AbbbY Sen · Feb 22, 2015

JRT Log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 7 Home Basic x64
Ran by Abhishek on 22-02-2015 at 10:49:49.90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{00367BEF-E39E-412E-A70D-38D54F7A2461}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{02B6C5F1-2B6B-484A-9134-C80A89FBCBAD}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{0AA24769-D8DF-4D0B-A6AB-A249AC0953D8}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{102182B8-5267-4AE1-9EFD-B3ED1F3431DC}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{11F19B2C-A3FC-43C0-9F98-8D026501B679}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{124E4430-8CE6-45F6-9702-E78EAF6DDACC}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{16F0F94C-0029-49CD-9B19-1AE2E2A37262}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{1F6152FB-5688-4522-97D3-93E5F3AF5B99}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{20C1F64C-2F94-4AAD-B223-69E3EDFEE494}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{2399B451-856D-4565-8452-C0EFAFB6906B}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{26BBC5F9-922D-4441-8ACB-9DEFAE0F8664}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3079C850-C37C-4C8E-BEC5-FABA07CB5EAA}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3174FA39-4763-4004-A6FD-FE605B5C152B}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3235A5BE-392F-4D29-B260-F7D64FFF0E7A}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3E5E3204-1BC0-4CEE-87B4-C9B84E3CE228}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3F21DDEC-583F-4769-AEE9-226B887FA48D}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{3F6C6874-7233-429F-80C1-0C624391EF7F}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{42225203-BE3E-4A56-929E-ED6199AE3987}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{4320979A-CC4C-427C-9A71-76C14F9DD081}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{44514F5B-069D-4B05-A7D4-E1C8E69986D9}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{45CE1E7D-F9F5-49A5-AADA-42D0472E9DC6}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{4C272B57-1958-4A2E-84EB-459B9FC3C944}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{540AA9B5-030A-46C1-BA89-5C91042B75A4}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{59B78BC5-7AF6-4D02-A9BB-5777896082BC}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{5C4AF01B-9802-4685-A531-49CC8469544F}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{630975E0-2CA1-4827-A56C-45D3320C42A9}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{67FA97A6-DDC7-42A1-8FC6-32FAC72EE22C}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{70346582-5ED2-4819-AB3E-DD1F357C57BF}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{7A684CED-5BA3-478C-8A38-79A114E3D8F2}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{84648073-663C-42E9-B326-5022B626FD04}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{994290CA-C589-4238-AC79-5E3B296B908E}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{9C41FCA2-E6FE-4E7A-B491-16C009E73FF0}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{A0D7DBA2-3CBC-44DC-A908-7064041EC882}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{A4F6AF34-B8F5-49FA-A790-BA65CA5DD1DB}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{A867BAA3-892A-40B8-84C2-8F5A6E1E3400}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{B68D8257-63B8-4C3F-A918-8A4027AC3FF0}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{B7514D9D-C05E-4629-B547-4A535491C37E}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{BA6F89BD-AB94-46D5-AE0A-2BA7FF0682B4}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{C477ADAE-BCC8-48F6-88E4-81545694EA16}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{C8C18E10-6E86-4D42-8DD5-8016E3631387}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{CB6002B1-24D9-4E2E-B7E8-57E73E314CAB}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{CE92592A-064B-4BED-8540-6F3A01251FF2}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{D0EDE3AA-DE27-4F67-8FE6-0A431F077B65}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{D2F6C27C-21FF-4671-80E9-A679F06A1615}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DAF1FE13-EE47-4C8B-A496-F55719D525E2}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DC00040A-4D1A-4748-9EAC-92EF6AF45B43}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DF05EB6E-3DCA-4719-8192-6D8D0AFAA764}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{DF331FEA-8A66-43FD-8C26-BF0232A541FF}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E004F249-42DD-4B4A-834A-98581394BFB2}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E270CBF7-1BB9-4365-BEB1-0EBB63CAA43F}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E576AD9A-0492-4F59-9933-ACAC61041062}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{E89B5060-305D-44C7-84C4-FCAB420B2011}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{ECB9594E-582F-4E13-93C8-5237BE6564B1}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{F89055C3-BD15-4314-83D9-E94E3B22D4D4}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{F9466029-FEBD-45CA-BD31-12E581EF8674}
Successfully deleted: [Empty Folder] C:\Users\Abhishek\appdata\local\{FA680A11-89F5-45D9-A716-AEB8B8C4938C}

~~~ FireFox

Successfully deleted the following from C:\Users\Abhishek\AppData\Roaming\mozilla\firefox\profiles\49aoobau.default\prefs.js

user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-
user_pref("extensions.xpiState", "{\"app-profile\":{\"toolbar_BTRSP-C@apn.ask.com\":{\"d\":\"C:\\\\Users\\\\Abhishek\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\
Emptied folder: C:\Users\Abhishek\AppData\Roaming\mozilla\firefox\profiles\49aoobau.default\minidumps [81 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22-02-2015 at 10:53:12.45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Solved Laptop infected with msupdate71/dwm.exe

Posts: 31 +0

Posts: 56,041 +516

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 56,041 +516

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 56,041 +516

Posts: 31 +0

Posts: 56,041 +516

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 31 +0

Posts: 56,041 +516

Posts: 31 +0

Posts: 31 +0

Similar threads