Hi, I have been experiencing random black screen of death about once a day, some times once in a few days, for the past month, the screen would just went black, no message no anything. I didn't pay much attention to it until today because I thought it might be a hardware issue.
What happened today was that the black screen now did not freeze the computer, instead it flashes randomly for few times in a row and it continued for few minutes.The first time it happened, I restarted the computer and waited on the Windows login screen to see if it'll flash, and it did. I then unplugged the Internet connection and the flashes appear to have stopped, but I cannot say for certain if the unplugging stopped it or the flashes just stopped by itself. The flashes are so random I cannot do much to test for it, so I'm here now looking for good folks to help sweeping my system thoroughly.
I've followed the 4-step instruction and here are the logs:
1. MBAM (for some reason the history for the scan log appears to be empty, I was unable to export a text file so I'm posting the XML file it generated after the scan instead)
<?xml version="1.0" encoding="UTF-16" ?>
- <mbam-log>
- <header>
<date>2014/11/01 20:12:50 +0800</date>
<logfile>mbam-log-2014-11-01 (20-12-49).xml</logfile>
<isadmin>yes</isadmin>
</header>
- <engine>
<version>2.00.3.1025</version>
<malware-database>v2014.11.01.03</malware-database>
<rootkit-database>v2014.10.22.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
- <system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x64</arch>
<username>Dean</username>
<filesys>NTFS</filesys>
</system>
- <summary>
<type>threat</type>
<result>completed</result>
<objects>431748</objects>
<time>1657</time>
<processes>0</processes>
<modules>0</modules>
<keys>85</keys>
<values>13</values>
<datas>0</datas>
<folders>29</folders>
<files>446</files>
<sectors>0</sectors>
</summary>
- <options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
- <items>
- <key>
<path>HKLM\SOFTWARE\CLASSES\APPID\{1DD31B76-C57E-49ba-94BC-BF53F0C82CD4}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>5b3c4aec3c40ca6c2c27279d5aa89070</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{1DD31B76-C57E-49BA-94BC-BF53F0C82CD4}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>5b3c4aec3c40ca6c2c27279d5aa89070</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DD31B76-C57E-49BA-94BC-BF53F0C82CD4}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>5b3c4aec3c40ca6c2c27279d5aa89070</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11CC93E4-0BE6-4f8f-82AA-D577FB955B05}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{F9BC0421-BB5C-447d-8547-BB45AFA80A4D}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{4D89001B-5B5B-4E76-A1F5-638E49DB7A58}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FA677CC1-D6FA-4B55-825D-6C493F56ED84}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FE575A61-09BD-4F3A-B8B5-B55B813B44EC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4D89001B-5B5B-4E76-A1F5-638E49DB7A58}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FA677CC1-D6FA-4B55-825D-6C493F56ED84}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FE575A61-09BD-4F3A-B8B5-B55B813B44EC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F9BC0421-BB5C-447d-8547-BB45AFA80A4D}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FBEDBA6C-44A2-43b9-BD49-20EB6E0C4E86}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.SnavHttpProtocol.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.SnavHttpProtocol</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.SnavHttpProtocol</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.SnavHttpProtocol.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.JsObject.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.JsObject</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.JsObject</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.JsObject.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11CC93E4-0BE6-4F8F-82AA-D577FB955B05}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{91878E42-FC03-4785-B513-1F9E613D1027}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{D02E3AB9-7796-40CB-BDFC-20D834FE1F75}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FCB380C4-D350-44BE-8791-50216F4747AC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FCB380C4-D350-44BE-8791-50216F4747AC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{D02E3AB9-7796-40CB-BDFC-20D834FE1F75}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\ASBarBroker.BDBroker.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\ASBarBroker.BDBroker</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\ASBarBroker.BDBroker</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\ASBarBroker.BDBroker.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\GenCrawl.GenCrawler</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\GenCrawl.GenCrawler</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>8d0ae65063196fc76b58e9c020e29868</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>8d0ae65063196fc76b58e9c020e29868</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{669751ED-D558-49AE-B01A-3B374CC7910E}</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>781f251188f491a5e36adaf8f80a3cc4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{669751ED-D558-49AE-B01A-3B374CC7910E}</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>781f251188f491a5e36adaf8f80a3cc4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>aaed80b6b6c6de58b80aefba62a00df3</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>aaed80b6b6c6de58b80aefba62a00df3</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>385f3bfb9be144f29d27656d07fb25db</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\thunder</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>801773c3760677bfc38a0bc2bf44f010</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\DataMngr</path>
<vendor>PUP.Optional.DataMangr.A</vendor>
<action>success</action>
<hash>99fe0c2a2953a492dc76b88cd72cf808</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\InstallIQ</path>
<vendor>PUP.Optional.InstallBrain.A</vendor>
<action>success</action>
<hash>4e496fc74f2dac8a4dc5b3a83bc8d729</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\thunder</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>d0c770c6651741f596b74c81c73c669a</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr</path>
<vendor>PUP.Optional.DataMngr.A</vendor>
<action>success</action>
<hash>0e89181ea3d93ff7dc280473b054fd03</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp</path>
<vendor>PUP.Optional.DVDVideoSoftTB.A</vendor>
<action>success</action>
<hash>cec9d6608bf1dc5a9832c16b857ea759</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings</path>
<vendor>PUP.Optional.BProtector.A</vendor>
<action>success</action>
<hash>8611ca6c79030f271e2f5b1f51b336ca</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{18689D3E-CF06-482F-AEB1-0880F859F0AA}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{5165BFF4-4E35-446F-B00E-EA4185B64F76}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{332C1DFF-B83D-40E3-968F-F85E20BF0CFB}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{456A8A65-6E0E-464B-80C6-A16E6528FADF}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{332C1DFF-B83D-40E3-968F-F85E20BF0CFB}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{456A8A65-6E0E-464B-80C6-A16E6528FADF}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{5165BFF4-4E35-446F-B00E-EA4185B64F76}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\Fun.OnlineInstallCtrl.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\Fun.OnlineInstallCtrl</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Fun.OnlineInstallCtrl</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Fun.OnlineInstallCtrl.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{18689D3E-CF06-482F-AEB1-0880F859F0AA}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1CF25200-FD42-45F6-ABBD-6C0C9C89B77A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{43BE7926-9B51-46FD-98DD-8DCCFB231113}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{43BE7926-9B51-46FD-98DD-8DCCFB231113}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{43BE7926-9B51-46FD-98DD-8DCCFB231113}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A817E7A2-43FA-11D0-9E44-00AA00B6770A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{A817E7A2-43FA-11D0-9E44-00AA00B6770A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>delete-on-reboot</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A817E7A2-43FA-11D0-9E44-00AA00B6770A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>delete-on-reboot</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CC88AD54-054C-4B38-9AB3-D932E4039187}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{961ABF2E-D191-4542-90DC-C3406555FC62}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{CE55D900-9EE4-4666-A1A1-1F6D59E32277}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CE55D900-9EE4-4666-A1A1-1F6D59E32277}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{961ABF2E-D191-4542-90DC-C3406555FC62}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS</path>
<valuename>C:\USERS\DEAN\APPDATA\ROAMING\GENERAL DOWNLOADER\EXTENSIONS\GENCRAWL.DLL</valuename>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<valuedata>1</valuedata>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED</path>
<valuename>{669751ED-D558-49AE-B01A-3B374CC7910E}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>781f251188f491a5e36adaf8f80a3cc4</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path>
<valuename>{D4027C7F-154A-4066-A1AD-4243D8127440}</valuename>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata>|鬯f@#BC?t@ID</valuedata>
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR</path>
<valuename>{D4027C7F-154A-4066-A1AD-4243D8127440}</valuename>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata />
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS</path>
<valuename>{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>385f3bfb9be144f29d27656d07fb25db</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED</path>
<valuename>{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>385f3bfb9be144f29d27656d07fb25db</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<valuename />
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata />
<hash>960155e182fa49ed44d69256fd058e72</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>06917eb8a2da0f27e5df22b0b2506799</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<valuename />
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata />
<hash>edaafa3c93e90333ed2d6b7d738f31cf</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>494e3501601ca591f5cf26ac659d11ef</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{A57E074F-56D8-4A33-8112-AAC9693AA909}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>0c8bb680d2aa4de91f6b6f63d131758b</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED</path>
<valuename>{A57E074F-56D8-4A33-8112-AAC9693AA909}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>0c8bb680d2aa4de91f6b6f63d131758b</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{669751ED-D558-49AE-B01A-3B374CC7910E}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>a7f0f93d4a3260d6a4a9874bff03ff01</hash>
</value>
- <folder>
<path>C:\Users\Dean\funshion</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\backup</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\Baiduflash</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\Baiduflash\subflash</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\flash</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\flashNew</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\flashStamp</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\playhome</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\popwind</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\textlink</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\control</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\download</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\funshiontools</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\historyTorrent</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\ini</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\screensave</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\Seed</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\serv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\Shortcut</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\update</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\user_Info</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\OpenCandy</path>
<vendor>PUP.Optional.OpenCandy</vendor>
<action>success</action>
<hash>ebace6505527e254f24e7e7ad1315ca4</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\OpenCandy\6D46CF88221F40C0BBF3510FA3B5820A</path>
<vendor>PUP.Optional.OpenCandy</vendor>
<action>success</action>
<hash>ebace6505527e254f24e7e7ad1315ca4</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\OpenCandy\OpenCandy_6D46CF88221F40C0BBF3510FA3B5820A</path>
<vendor>PUP.Optional.OpenCandy</vendor>
<action>success</action>
<hash>ebace6505527e254f24e7e7ad1315ca4</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com</path>
<vendor>PUP.Optional.Generalcrawler.A</vendor>
<action>success</action>
<hash>5f38a393a2daf5414ccdbd5459aaea16</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com\chrome</path>
<vendor>PUP.Optional.Generalcrawler.A</vendor>
<action>success</action>
<hash>5f38a393a2daf5414ccdbd5459aaea16</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com\chrome\content</path>
<vendor>PUP.Optional.Generalcrawler.A</vendor>
<action>success</action>
<hash>5f38a393a2daf5414ccdbd5459aaea16</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\LocalLow\Claro LTD\claro</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>cec93204ceae8da9ab7123fca36034cc</hash>
</folder>
- <file>
<path>C:\Program Files (x86)\QvodPlayer\AddIn\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}\QvodAddr.dll</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</file>
- <file>
<path>C:\Program Files (x86)\QvodPlayer\AddIn\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}\ASBarBroker.exe</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\General Downloader\Extensions\GenCrawl.dll</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Local\Temp\bRXCBP9E.exe.part</path>
<vendor>PUP.Optional.Amonetize</vendor>
<action>success</action>
<hash>72253006a7d542f4577bb424ae5341bf</hash>
</file>
- <file>
<path>C:\Users\Dean\Downloads\HC2Setup64.exe</path>
<vendor>PUP.Optional.Somoto</vendor>
<action>success</action>
<hash>395e3bfb36469d994a11acafeb1a29d7</hash>
</file>
- <file>
<path>C:\Users\Dean\Downloads\coretemp.exe</path>
<vendor>PUP.Optional.SafeInstall.A</vendor>
<action>success</action>
<hash>801771c5ef8d40f6e5c88dd6b05125db</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>7e198fa71c603bfbb1a2919c7c87e21e</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 01-11-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>871036006a12c670b69dad8059aa768a</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 19-10-13 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>0295072f7dffe5514f047ab3f013d52b</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 27-09-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>f7a0cd694d2f3df998bbcd60907354ac</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 27-09-14 BCK 2\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>f89f56e08bf13df9f45f012ca1620af6</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 29-07-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>ecab9c9a760674c2a7ac32fbdd2621df</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 31-10-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>098ec2740e6ec2741a39e64759aa3ec2</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>197e3ff777056acc89ca86a7df24a858</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default EM\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>3b5c0333dca042f4d57ed35a16ed20e0</hash>
</file>
- <file>
<path>C:\Windows\SysWOW64\funshion.ini</path>
<vendor>PUP.Funshion</vendor>
<action>success</action>
<hash>a4f31521bcc090a6a3881854e71cc53b</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion.ini</path>
<vendor>PUP.Funshion</vendor>
<action>success</action>
<hash>3c5bf640a2daf34380af84e8946fd12f</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\bbinfo.txt</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\DEAN-PC_info.ini</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\favorites.fav</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\history.txt</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\install.ini</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\platFormGuid.txt</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\webbklist.bk</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flash\DC996574_2866_7E4D_83BF_B1977BBD144B.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140731142502-12402711.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140804105603-17223208.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140806144253-13271890.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140806180023-6717479.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140807190820-14644163.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140808170329-9089210.date1408779442.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140812175515-8841190.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140812182553-2296930.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140814170049-1007431.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140814173409-19363459.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140818180245-7291340.date1408779442.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140818182150-3713804.date1408779442.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140401112727-7474578.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140408145934-14534394.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140410142601-8436620.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140411144446-17950903.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140416172315-15604325.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140416172435-18046878.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140416172844-2914019.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417155233-4862420.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417163058-18991205.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417181126-10871476.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417185915-15117124.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140418115958-9481470.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140418180536-2653749.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140418181006-18880798.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140421174708-10383322.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140422180549-19274453.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140422185209-19592471.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140523164434-3623812.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140612123135-11206207.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140616183346-18465996.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140620110512-6930248.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140620110931-14991707.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140709173753-6785873.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140711174959-11432810.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\346852.date1408824191.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\41889965.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\430110.date1408824191.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\637466.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140423180344-5773593.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140425174343-18412785.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140428181110-281391.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140429134232-2707507.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140429191549-18109325.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140430095219-4571698.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140504182129-3518968.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140507103524-5678536.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140508174200-16841988.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140508174759-19946500.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140509165018-1592429.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140515105703-10640640.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140515110839-14582836.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140516192624-4442582.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140519135501-8148148.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
What happened today was that the black screen now did not freeze the computer, instead it flashes randomly for few times in a row and it continued for few minutes.The first time it happened, I restarted the computer and waited on the Windows login screen to see if it'll flash, and it did. I then unplugged the Internet connection and the flashes appear to have stopped, but I cannot say for certain if the unplugging stopped it or the flashes just stopped by itself. The flashes are so random I cannot do much to test for it, so I'm here now looking for good folks to help sweeping my system thoroughly.
I've followed the 4-step instruction and here are the logs:
1. MBAM (for some reason the history for the scan log appears to be empty, I was unable to export a text file so I'm posting the XML file it generated after the scan instead)
<?xml version="1.0" encoding="UTF-16" ?>
- <mbam-log>
- <header>
<date>2014/11/01 20:12:50 +0800</date>
<logfile>mbam-log-2014-11-01 (20-12-49).xml</logfile>
<isadmin>yes</isadmin>
</header>
- <engine>
<version>2.00.3.1025</version>
<malware-database>v2014.11.01.03</malware-database>
<rootkit-database>v2014.10.22.01</rootkit-database>
<license>trial</license>
<file-protection>enabled</file-protection>
<web-protection>enabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
- <system>
<osversion>Windows 7 Service Pack 1</osversion>
<arch>x64</arch>
<username>Dean</username>
<filesys>NTFS</filesys>
</system>
- <summary>
<type>threat</type>
<result>completed</result>
<objects>431748</objects>
<time>1657</time>
<processes>0</processes>
<modules>0</modules>
<keys>85</keys>
<values>13</values>
<datas>0</datas>
<folders>29</folders>
<files>446</files>
<sectors>0</sectors>
</summary>
- <options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
- <items>
- <key>
<path>HKLM\SOFTWARE\CLASSES\APPID\{1DD31B76-C57E-49ba-94BC-BF53F0C82CD4}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>5b3c4aec3c40ca6c2c27279d5aa89070</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{1DD31B76-C57E-49BA-94BC-BF53F0C82CD4}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>5b3c4aec3c40ca6c2c27279d5aa89070</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1DD31B76-C57E-49BA-94BC-BF53F0C82CD4}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>5b3c4aec3c40ca6c2c27279d5aa89070</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11CC93E4-0BE6-4f8f-82AA-D577FB955B05}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{F9BC0421-BB5C-447d-8547-BB45AFA80A4D}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{4D89001B-5B5B-4E76-A1F5-638E49DB7A58}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FA677CC1-D6FA-4B55-825D-6C493F56ED84}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FE575A61-09BD-4F3A-B8B5-B55B813B44EC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4D89001B-5B5B-4E76-A1F5-638E49DB7A58}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FA677CC1-D6FA-4B55-825D-6C493F56ED84}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FE575A61-09BD-4F3A-B8B5-B55B813B44EC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F9BC0421-BB5C-447d-8547-BB45AFA80A4D}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\B24CFFE5-662A-405B-A05A-D3F9E12FEC38.Addr.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FBEDBA6C-44A2-43b9-BD49-20EB6E0C4E86}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.SnavHttpProtocol.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.SnavHttpProtocol</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.SnavHttpProtocol</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.SnavHttpProtocol.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.JsObject.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\AddressSearch.JsObject</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.JsObject</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\AddressSearch.JsObject.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{11CC93E4-0BE6-4F8F-82AA-D577FB955B05}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{91878E42-FC03-4785-B513-1F9E613D1027}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{D02E3AB9-7796-40CB-BDFC-20D834FE1F75}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{FCB380C4-D350-44BE-8791-50216F4747AC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FCB380C4-D350-44BE-8791-50216F4747AC}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{D02E3AB9-7796-40CB-BDFC-20D834FE1F75}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\ASBarBroker.BDBroker.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\ASBarBroker.BDBroker</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\ASBarBroker.BDBroker</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\ASBarBroker.BDBroker.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\GenCrawl.GenCrawler</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\GenCrawl.GenCrawler</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CA4520F3-AE13-4FB1-A513-58E23991C86D}</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>8d0ae65063196fc76b58e9c020e29868</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{000F18F2-09EB-4A59-82B2-5AE4184C39C3}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>8d0ae65063196fc76b58e9c020e29868</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{669751ED-D558-49AE-B01A-3B374CC7910E}</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>781f251188f491a5e36adaf8f80a3cc4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{669751ED-D558-49AE-B01A-3B374CC7910E}</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>781f251188f491a5e36adaf8f80a3cc4</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>aaed80b6b6c6de58b80aefba62a00df3</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>aaed80b6b6c6de58b80aefba62a00df3</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>385f3bfb9be144f29d27656d07fb25db</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\thunder</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>801773c3760677bfc38a0bc2bf44f010</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\DataMngr</path>
<vendor>PUP.Optional.DataMangr.A</vendor>
<action>success</action>
<hash>99fe0c2a2953a492dc76b88cd72cf808</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\InstallIQ</path>
<vendor>PUP.Optional.InstallBrain.A</vendor>
<action>success</action>
<hash>4e496fc74f2dac8a4dc5b3a83bc8d729</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\thunder</path>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<hash>d0c770c6651741f596b74c81c73c669a</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DataMngr</path>
<vendor>PUP.Optional.DataMngr.A</vendor>
<action>success</action>
<hash>0e89181ea3d93ff7dc280473b054fd03</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nikpibnbobmbdbheedjfogjlikpgpnhp</path>
<vendor>PUP.Optional.DVDVideoSoftTB.A</vendor>
<action>success</action>
<hash>cec9d6608bf1dc5a9832c16b857ea759</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings</path>
<vendor>PUP.Optional.BProtector.A</vendor>
<action>success</action>
<hash>8611ca6c79030f271e2f5b1f51b336ca</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{18689D3E-CF06-482F-AEB1-0880F859F0AA}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{5165BFF4-4E35-446F-B00E-EA4185B64F76}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{332C1DFF-B83D-40E3-968F-F85E20BF0CFB}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{456A8A65-6E0E-464B-80C6-A16E6528FADF}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{332C1DFF-B83D-40E3-968F-F85E20BF0CFB}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{456A8A65-6E0E-464B-80C6-A16E6528FADF}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{5165BFF4-4E35-446F-B00E-EA4185B64F76}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\Fun.OnlineInstallCtrl.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\Fun.OnlineInstallCtrl</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Fun.OnlineInstallCtrl</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\Fun.OnlineInstallCtrl.1</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{18689D3E-CF06-482F-AEB1-0880F859F0AA}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1CF25200-FD42-45F6-ABBD-6C0C9C89B77A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{43BE7926-9B51-46FD-98DD-8DCCFB231113}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{43BE7926-9B51-46FD-98DD-8DCCFB231113}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{43BE7926-9B51-46FD-98DD-8DCCFB231113}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A817E7A2-43FA-11D0-9E44-00AA00B6770A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{A817E7A2-43FA-11D0-9E44-00AA00B6770A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>delete-on-reboot</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A817E7A2-43FA-11D0-9E44-00AA00B6770A}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>delete-on-reboot</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CC88AD54-054C-4B38-9AB3-D932E4039187}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{961ABF2E-D191-4542-90DC-C3406555FC62}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{CE55D900-9EE4-4666-A1A1-1F6D59E32277}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CE55D900-9EE4-4666-A1A1-1F6D59E32277}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <key>
<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{961ABF2E-D191-4542-90DC-C3406555FC62}</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</key>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS</path>
<valuename>C:\USERS\DEAN\APPDATA\ROAMING\GENERAL DOWNLOADER\EXTENSIONS\GENCRAWL.DLL</valuename>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<valuedata>1</valuedata>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED</path>
<valuename>{669751ED-D558-49AE-B01A-3B374CC7910E}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>781f251188f491a5e36adaf8f80a3cc4</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER</path>
<valuename>{D4027C7F-154A-4066-A1AD-4243D8127440}</valuename>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata>|鬯f@#BC?t@ID</valuedata>
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR</path>
<valuename>{D4027C7F-154A-4066-A1AD-4243D8127440}</valuename>
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata />
<hash>e5b260d6cab246f0f525c028be4401ff</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS</path>
<valuename>{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>385f3bfb9be144f29d27656d07fb25db</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED</path>
<valuename>{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>385f3bfb9be144f29d27656d07fb25db</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<valuename />
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata />
<hash>960155e182fa49ed44d69256fd058e72</hash>
</value>
- <value>
<path>HKU\S-1-5-21-2371761838-3269241468-585396966-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>06917eb8a2da0f27e5df22b0b2506799</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{D4027C7F-154A-4066-A1AD-4243D8127440}</path>
<valuename />
<vendor>PUP.Optional.FrostwireTB.A</vendor>
<action>success</action>
<valuedata />
<hash>edaafa3c93e90333ed2d6b7d738f31cf</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>494e3501601ca591f5cf26ac659d11ef</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{A57E074F-56D8-4A33-8112-AAC9693AA909}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>0c8bb680d2aa4de91f6b6f63d131758b</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED</path>
<valuename>{A57E074F-56D8-4A33-8112-AAC9693AA909}</valuename>
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>0c8bb680d2aa4de91f6b6f63d131758b</hash>
</value>
- <value>
<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{669751ED-D558-49AE-B01A-3B374CC7910E}</path>
<valuename />
<vendor>Trojan.Agent</vendor>
<action>success</action>
<valuedata />
<hash>a7f0f93d4a3260d6a4a9874bff03ff01</hash>
</value>
- <folder>
<path>C:\Users\Dean\funshion</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\backup</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\Baiduflash</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\Baiduflash\subflash</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\flash</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\flashNew</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\flashStamp</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\playhome</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\popwind</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\cache\textlink</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\control</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\download</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\funshiontools</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\historyTorrent</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\ini</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\screensave</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\Seed</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\serv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\Shortcut</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\update</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\funshion\user_Info</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\OpenCandy</path>
<vendor>PUP.Optional.OpenCandy</vendor>
<action>success</action>
<hash>ebace6505527e254f24e7e7ad1315ca4</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\OpenCandy\6D46CF88221F40C0BBF3510FA3B5820A</path>
<vendor>PUP.Optional.OpenCandy</vendor>
<action>success</action>
<hash>ebace6505527e254f24e7e7ad1315ca4</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\OpenCandy\OpenCandy_6D46CF88221F40C0BBF3510FA3B5820A</path>
<vendor>PUP.Optional.OpenCandy</vendor>
<action>success</action>
<hash>ebace6505527e254f24e7e7ad1315ca4</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com</path>
<vendor>PUP.Optional.Generalcrawler.A</vendor>
<action>success</action>
<hash>5f38a393a2daf5414ccdbd5459aaea16</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com\chrome</path>
<vendor>PUP.Optional.Generalcrawler.A</vendor>
<action>success</action>
<hash>5f38a393a2daf5414ccdbd5459aaea16</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com\chrome\content</path>
<vendor>PUP.Optional.Generalcrawler.A</vendor>
<action>success</action>
<hash>5f38a393a2daf5414ccdbd5459aaea16</hash>
</folder>
- <folder>
<path>C:\Users\Dean\AppData\LocalLow\Claro LTD\claro</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>cec93204ceae8da9ab7123fca36034cc</hash>
</folder>
- <file>
<path>C:\Program Files (x86)\QvodPlayer\AddIn\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}\QvodAddr.dll</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>1b7c46f0542889ad1d3503c1e31f2cd4</hash>
</file>
- <file>
<path>C:\Program Files (x86)\QvodPlayer\AddIn\{B24CFFE5-662A-405B-A05A-D3F9E12FEC38}\ASBarBroker.exe</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>95021e187efe48eeff522e96669cb749</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\General Downloader\Extensions\GenCrawl.dll</path>
<vendor>Trojan.Downloader</vendor>
<action>success</action>
<hash>098e8ea897e562d43ee301c4b74be31d</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Local\Temp\bRXCBP9E.exe.part</path>
<vendor>PUP.Optional.Amonetize</vendor>
<action>success</action>
<hash>72253006a7d542f4577bb424ae5341bf</hash>
</file>
- <file>
<path>C:\Users\Dean\Downloads\HC2Setup64.exe</path>
<vendor>PUP.Optional.Somoto</vendor>
<action>success</action>
<hash>395e3bfb36469d994a11acafeb1a29d7</hash>
</file>
- <file>
<path>C:\Users\Dean\Downloads\coretemp.exe</path>
<vendor>PUP.Optional.SafeInstall.A</vendor>
<action>success</action>
<hash>801771c5ef8d40f6e5c88dd6b05125db</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>7e198fa71c603bfbb1a2919c7c87e21e</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 01-11-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>871036006a12c670b69dad8059aa768a</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 19-10-13 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>0295072f7dffe5514f047ab3f013d52b</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 27-09-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>f7a0cd694d2f3df998bbcd60907354ac</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 27-09-14 BCK 2\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>f89f56e08bf13df9f45f012ca1620af6</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 29-07-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>ecab9c9a760674c2a7ac32fbdd2621df</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default 31-10-14 BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>098ec2740e6ec2741a39e64759aa3ec2</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default BCK\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>197e3ff777056acc89ca86a7df24a858</hash>
</file>
- <file>
<path>C:\Users\Dean\AppData\Roaming\Mozilla\Firefox\Profiles\vb4o6mpk.default EM\searchplugins\claro.xml</path>
<vendor>PUP.Optional.Claro.A</vendor>
<action>success</action>
<hash>3b5c0333dca042f4d57ed35a16ed20e0</hash>
</file>
- <file>
<path>C:\Windows\SysWOW64\funshion.ini</path>
<vendor>PUP.Funshion</vendor>
<action>success</action>
<hash>a4f31521bcc090a6a3881854e71cc53b</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion.ini</path>
<vendor>PUP.Funshion</vendor>
<action>success</action>
<hash>3c5bf640a2daf34380af84e8946fd12f</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\bbinfo.txt</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\DEAN-PC_info.ini</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\favorites.fav</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\history.txt</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\install.ini</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\platFormGuid.txt</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\webbklist.bk</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flash\DC996574_2866_7E4D_83BF_B1977BBD144B.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140731142502-12402711.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140804105603-17223208.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140806144253-13271890.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140806180023-6717479.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140807190820-14644163.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140808170329-9089210.date1408779442.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140812175515-8841190.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140812182553-2296930.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140814170049-1007431.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140814173409-19363459.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140818180245-7291340.date1408779442.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140818182150-3713804.date1408779442.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140401112727-7474578.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140408145934-14534394.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140410142601-8436620.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140411144446-17950903.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140416172315-15604325.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140416172435-18046878.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140416172844-2914019.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417155233-4862420.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417163058-18991205.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417181126-10871476.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140417185915-15117124.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140418115958-9481470.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140418180536-2653749.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140418181006-18880798.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140421174708-10383322.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140422180549-19274453.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140422185209-19592471.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140523164434-3623812.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140612123135-11206207.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140616183346-18465996.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140620110512-6930248.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140620110931-14991707.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140709173753-6785873.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140711174959-11432810.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\346852.date1408824191.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\41889965.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\430110.date1408824191.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\637466.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140423180344-5773593.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140425174343-18412785.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140428181110-281391.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140429134232-2707507.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140429191549-18109325.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140430095219-4571698.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140504182129-3518968.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140507103524-5678536.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140508174200-16841988.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140508174759-19946500.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140509165018-1592429.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140515105703-10640640.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140515110839-14582836.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140516192624-4442582.date1408521644.swf</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>
- <file>
<path>C:\Users\Dean\funshion\cache\flashNew\20140519135501-8148148.date1408521644.flv</path>
<vendor>PUP.Optional.Funshion</vendor>
<action>success</action>
<hash>a1f6092d275539fda763817636cc37c9</hash>
</file>