Jump to content
Sign in to follow this  
Samson

CMD is Blinking

Recommended Posts

Hi,
I've downloaded some software, but later i found out it is some type of malware.. For the last two days, cmd is flashing less than a second for every minute or two.. I tried scanning my system and it didn't help me.. My friend suggested to try with smadav, it scanned and it says, that some keys (in registry) are missing.. But i didn't do anything with registry.. And something called "The proxomitron" error is popping sometimes.. Help me with this please..

Share this post


Link to post
Share on other sites

I'm new to smadav, this an antivirus or a malware scanner?

 

Please download the Malwarebytes Anti-Malware setup file to your Desktop.

 

OR from this location https://www.bleepingcomputer.com/download/malwarebytes-anti-malware/

  • Open mbam-setup.x.x.xxxx.exe (x represents the version #) and follow the prompts to install the programme.
  • On the Dashboard click on Update Now
  • Go to the Setting Tab
  • Under Setting go to Detection and Protection
  • Under PUP and PUM make sure both are set to show Treat Detections as Malware
  • Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked
  • Then on the Dashboard click on Scan
  • Make sure to select THREAT SCAN
  • Then click on Scan
  • Note: You may see the following message, "Could not load DDA driver". Click Yes, allow your PC to reboot and continue afterwards.
  • If threats are detected, click Remove Selected. If you are prompted to reboot, click Yes.
  • Upon completion of the scan (or after the reboot), click the History tab.
  • Click Application Logs, followed by the first Scan Log.
  • Click Export, followed by Copy to Clipboard. Paste the log in your next reply.

     

~~~

 

-AdwCleaner-by Xplode

 

Click on this link to download : ADWCleaner

Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.

 

Do not click on any links in the top Advertisment.

 

 

adwcleaner_download.png

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[s1].txt as well.
~~~~~~~~~~~~~~~~~~~~

Share this post


Link to post
Share on other sites

Hi Juliet,

Thank you for the response. I've done every steps you said. I tried to attach them, but it says, its too long for the post. What should i do?

Share this post


Link to post
Share on other sites
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 09-12-2016
Scan Time: 09:23
Logfile:
Administrator: Yes
Version: 2.2.1.1043
Malware Database: v2016.12.09.06
Rootkit Database: v2016.11.20.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows 10
CPU: x64
File System: NTFS
User: Sam
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 437405
Time Elapsed: 1 hr, 8 min, 0 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 5
Trojan.Dropper, C:\Windows\fhelper.exe, 220, Delete-on-Reboot, [77d3e7fe4159d264eb24646b6e958977]
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe, 1868, Delete-on-Reboot, [ee5cd213bae0f5412bbe654ead53837d]
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\WMPNetworkAcSvc.exe, 3708, Delete-on-Reboot, [4307b1348a103600e475c6e7956be11f]
PUP.Optional.WindowsSecurity.PrxySvrRST, C:\ProgramData\Windows Security\winsecurity.exe, 3752, Delete-on-Reboot, [1535e5000892fc3a23adf5975da57c84]
Trojan.Agent.PrxySvrRST, C:\ProgramData\Microsoft\Network\Dsq\network\sysnetwk.exe, 4200, Delete-on-Reboot, [dc6e28bd663447efa466f2bbdd23956b]
Modules: 2
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\Interface.dll, Delete-on-Reboot, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\MPLSettings.dll, Delete-on-Reboot, [07438461fc9e3204061964eb9e6518e8],
Registry Keys: 131
Trojan.Dropper, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\fhelper, Quarantined, [77d3e7fe4159d264eb24646b6e958977],
Rootkit.Agent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\cherimoya, Quarantined, [1e2cfee7d9c13600ba5eaa356c9508f8],
PUP.Optional.Komodia, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zdwfp, Quarantined, [0545885d7a20d95dced249752fd27888],
PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, Quarantined, [51f97372d4c603330f1571ec33cf60a0],
PUP.Optional.Komodia, HKLM\SOFTWARE\CLASSES\APPID\{25B1494D-230A-42CF-BBF6-EC73868D13DC}, Quarantined, [2525fbea3466c0766ca54c1101017e82],
PUP.Optional.Wajam, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, Quarantined, [34161dc86337cb6b56ce2835da2820e0],
PUP.Optional.Komodia, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{25B1494D-230A-42CF-BBF6-EC73868D13DC}, Quarantined, [69e1a243abefe0568190114c42c0c13f],
PUP.Optional.Wajam, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9, Quarantined, [53f79154009a3df936eec59849b96898],
PUP.Optional.Komodia, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{25B1494D-230A-42CF-BBF6-EC73868D13DC}, Quarantined, [91b9e203990137ff1af7abb25ca66e92],
Adware.Kajajugt, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\CLASSES\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\CLASSES\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\CLASSES\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
Adware.Kajajugt, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}, Quarantined, [ea60ab3a1d7d7cba77b6421b55ad629e],
PUP.Optional.InstallMonster, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C379EAD1-CB34-4B09-AF6B-7E587F8BCD80}, Quarantined, [95b56481366424129556e438af51ee12],
PUP.Optional.InstallMonster, HKLM\SOFTWARE\CLASSES\rlqf6yh38gx6.DynamicNS, Quarantined, [95b56481366424129556e438af51ee12],
PUP.Optional.InstallMonster, HKLM\SOFTWARE\WOW6432NODE\CLASSES\rlqf6yh38gx6.DynamicNS, Quarantined, [95b56481366424129556e438af51ee12],
PUP.Optional.InstallMonster, HKLM\SOFTWARE\CLASSES\WOW6432NODE\rlqf6yh38gx6.DynamicNS, Quarantined, [95b56481366424129556e438af51ee12],
PUP.Optional.InstallMonster, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C379EAD1-CB34-4B09-AF6B-7E587F8BCD80}, Quarantined, [95b56481366424129556e438af51ee12],
PUP.Optional.WinNetSvc, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WMPNetworkAcSvc, Quarantined, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.WindowsSecurity.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsSecurity, Quarantined, [1535e5000892fc3a23adf5975da57c84],
PUP.Optional.MalwareProtection, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MalwareProtectionLive, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.SmartPCPrivacyCleanerPro, HKLM\SOFTWARE\SmartPCFixer, Quarantined, [6cde16cf2d6d0432625bfc97cb35b050],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataContainer, Quarantined, [e2681cc9891104325e62195b0bf8d729],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataContainer.1, Quarantined, [9baf964f3c5e8caa823eea8af112cd33],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataController, Quarantined, [0e3c489deeac2214ba06c8ac877c59a7],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataController.1, Quarantined, [76d4568f1684d75f893790e4a75c3ec2],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataTable, Quarantined, [1e2c6d78f7a3cf67427e96de9d66a25e],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataTable.1, Quarantined, [d6746085d0ca280ef6cad4a0758e8878],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataTableFields, Quarantined, [cb7f43a25f3bba7c6f51b9bbaf54c937],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataTableFields.1, Quarantined, [d57539acfaa03afc754b5024fa09ab55],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataTableHolder, Quarantined, [12383fa65545a294744ca2d24eb547b9],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.DataTableHolder.1, Quarantined, [87c3ba2b5f3b33038c34086c47bcba46],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.LSPLogic, Quarantined, [c882f5f0693149ed13ad581cc73ca060],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.LSPLogic.1, Quarantined, [65e5578edcbe0135e5dbb3c145bed32d],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.ReadOnlyManager, Quarantined, [a0aa6283603a0432328e344042c134cc],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.ReadOnlyManager.1, Quarantined, [77d311d4b7e38ea8a51b4f253dc61de3],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.WFPController, Quarantined, [87c3d114f1a9c175754b076ddf24f709],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\zdengineLib.WFPController.1, Quarantined, [e466a63fc0da2016d4ecacc87390d927],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\APPID\zdengine.EXE, Quarantined, [87c318cd712985b1724d1e56e41f52ae],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\zdengine.EXE, Quarantined, [c08a786db1e99f976758c5afbf4421df],
PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9EB5AB5C-E6F2-4055-98BE-C451D82B427D}, Delete-on-Reboot, [58f209dce7b3e6505366e14a2bd59e62],
PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Fakthertuverge Controls, Delete-on-Reboot, [68e2677e306a2511b9e438ef2fd1c63a],
PUP.Optional.Navegaki.PrxySvrRST, HKLM\SOFTWARE\RELTEK, Quarantined, [90ba28bd6535231358f482ef020104fc],
PUP.Optional.SmartPCPrivacyCleanerPro, HKLM\SOFTWARE\SMARTPCFIXER\Param, Quarantined, [c783e500d7c366d0a5bab3e25aa601ff],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\mtQuoteex, Quarantined, [cf7b1ec7f4a60333772457959f6407f9],
PUP.Optional.SmartPCPrivacyCleanerPro, HKLM\SOFTWARE\WOW6432NODE\SmartPCFixer, Quarantined, [78d21acb267423130cb1d9bacd3358a8],
PUP.Optional.Trotux, HKLM\SOFTWARE\WOW6432NODE\trotuxSoftware, Quarantined, [63e78b5a396180b61e5101f822df659b],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataContainer, Quarantined, [8fbb786d4f4bb680d5ebe0942dd633cd],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataContainer.1, Quarantined, [80cadf061b7f94a20bb57ef6e02337c9],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataController, Quarantined, [ab9f33b2f7a3fe389927096b7f844fb1],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataController.1, Quarantined, [f654ffe6e3b7b5813d83ef85b05351af],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataTable, Quarantined, [de6c7372dac0f0462799730147bc1ee2],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataTable.1, Quarantined, [7fcb65805149a5912b9594e0ce3554ac],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataTableFields, Quarantined, [54f6ac3994063bfb2997e292f112768a],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataTableFields.1, Quarantined, [dc6e08dda9f15adc754b353f06fdd927],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataTableHolder, Quarantined, [f85295505f3b6bcbebd5561e4fb4827e],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.DataTableHolder.1, Quarantined, [23277d68f9a138fea818670d06fdc739],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.LSPLogic, Quarantined, [f852f3f223777bbbbd0393e158ab15eb],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.LSPLogic.1, Quarantined, [b9917d68ebaff046546c2153be45a65a],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.ReadOnlyManager, Quarantined, [db6f7c692f6b81b5269ac7adcc37867a],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.ReadOnlyManager.1, Quarantined, [fa50c025188263d3338dd3a1f70cf40c],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.WFPController, Quarantined, [a6a4edf83c5ebd792a96373d8f74d12f],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\zdengineLib.WFPController.1, Quarantined, [3d0d3fa61c7ef442d4ec195be32049b7],
PUP.Optional.Komodia.WnskRST, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\zdengine.EXE, Quarantined, [400aeafba7f30234c5fab3c180836c94],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH, Quarantined, [34169253fd9d270fe8d63445e02355ab],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Quoteex_RASAPI32, Quarantined, [b496dd0832688da9752dc4b95aa9df21],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Quoteex_RASMANCS, Quarantined, [480204e1c2d83402e4be2459be4560a0],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\Quoteex.exe, Quarantined, [63e7aa3b7f1b1f17bee5a4d943c0aa56],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\OTHERSEARCH, Quarantined, [80caf3f21684ec4ad85c50caa15f5ba5],
PUP.Optional.SmartPCPrivacyCleanerPro, HKLM\SOFTWARE\WOW6432NODE\SMARTPCFIXER\Param, Quarantined, [27235491edad0e282639a4f1c23ecb35],
PUP.Optional.PennyBee, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT\NETWORK\zdengine, Quarantined, [c4865f861a801422495f166336cd07f9],
Rootkit.Komodia.PUA, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SAFEBOOT\NETWORK\zdwfp, Quarantined, [84c65b8a12888bab280f3a456f945ca4],
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CHNGTSvc, Quarantined, [fa5024c1980265d10ec729dd9a66a15f],
PUP.Optional.Komodia.WnskRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zdengine, Quarantined, [1436875e1288251112afadc7a45f13ed],
PUP.Optional.ConvertAd.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SYFUBIXE, Quarantined, [400ad70ee2b8b185fe73bcb8ac571ee2],
PUP.Optional.Linkury.ACMB1, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Application Hosting, Quarantined, [a9a1aa3ba8f28fa7cdd7abd0f60d8e72],
PUP.Optional.ProntSpooler, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\ProntSpooler, Quarantined, [94b69c49dcbeb185b846d5a7cf3413ed],
PUP.Optional.SafeGuard.ChrPRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\XBOX, Quarantined, [dd6d796c1387b4824725fc95748ed32d],
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\mtQuoteex, Quarantined, [4cfe36af57433600d8c9a9d49c6736ca],
PUP.Optional.Tuto4PC, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\wewewe, Quarantined, [1c2e95503d5d11256f57b4d45da37888],
PUP.Optional.YTAdBlocker, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}, Quarantined, [1436e104cecc191d99a85d46966ac937],
PUP.Optional.Linkury, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{IELNKSRCH}, Quarantined, [c585eef73862b38319a4225762a1728e],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\TYPELIB\{63492C58-6CD7-4FF7-8495-06A6869643EE}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{0FF03983-EAA6-4628-8E7C-387B2D4F8EF2}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{3A71C84A-1CC4-4201-B037-C81CE118D66F}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{432599E9-40CF-41E3-951A-E1E81B7B1D29}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{7D215707-3E74-4E0E-A078-2C95E1CDE233}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{9295785F-8C01-4ED3-9322-8BE5C17CA141}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{B98E44C8-7BB7-4A4A-B8D2-60874CA109B2}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{C656BCEB-6B19-4992-9975-D53CEA283356}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{D5AC4B9C-8EE4-48AD-A77E-1560AD886A0B}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{D6914FD3-FD8E-45AD-8993-901E7B2759FD}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{E0106905-0EDD-4F56-BDB5-890A1F6E8F47}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{E26E880F-176C-4007-B2A7-B8F27621EC51}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{E776B534-9402-4049-87C3-089EC0F54BAF}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{FCFBBE24-2ADA-4D6E-A381-DEC6E3EAEE21}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0FF03983-EAA6-4628-8E7C-387B2D4F8EF2}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3A71C84A-1CC4-4201-B037-C81CE118D66F}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{432599E9-40CF-41E3-951A-E1E81B7B1D29}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7D215707-3E74-4E0E-A078-2C95E1CDE233}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9295785F-8C01-4ED3-9322-8BE5C17CA141}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B98E44C8-7BB7-4A4A-B8D2-60874CA109B2}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C656BCEB-6B19-4992-9975-D53CEA283356}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D5AC4B9C-8EE4-48AD-A77E-1560AD886A0B}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D6914FD3-FD8E-45AD-8993-901E7B2759FD}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E0106905-0EDD-4F56-BDB5-890A1F6E8F47}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E26E880F-176C-4007-B2A7-B8F27621EC51}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E776B534-9402-4049-87C3-089EC0F54BAF}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FCFBBE24-2ADA-4D6E-A381-DEC6E3EAEE21}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0FF03983-EAA6-4628-8E7C-387B2D4F8EF2}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{3A71C84A-1CC4-4201-B037-C81CE118D66F}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{432599E9-40CF-41E3-951A-E1E81B7B1D29}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7D215707-3E74-4E0E-A078-2C95E1CDE233}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9295785F-8C01-4ED3-9322-8BE5C17CA141}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B98E44C8-7BB7-4A4A-B8D2-60874CA109B2}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C656BCEB-6B19-4992-9975-D53CEA283356}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{D5AC4B9C-8EE4-48AD-A77E-1560AD886A0B}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{D6914FD3-FD8E-45AD-8993-901E7B2759FD}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E0106905-0EDD-4F56-BDB5-890A1F6E8F47}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E26E880F-176C-4007-B2A7-B8F27621EC51}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E776B534-9402-4049-87C3-089EC0F54BAF}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FCFBBE24-2ADA-4D6E-A381-DEC6E3EAEE21}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{63492C58-6CD7-4FF7-8495-06A6869643EE}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{63492C58-6CD7-4FF7-8495-06A6869643EE}, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
Registry Values: 17
PUP.Optional.MalwareProtection, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|MalwareProtectionLive, C:\Users\Samson\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe, Quarantined, [ee5cd213bae0f5412bbe654ead53837d]
PUP.Optional.Feeder, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Feeder, C:\Users\Samson\AppData\Local\Feeder\Feeder.exe, Quarantined, [6fdb4f96c5d53006fd235327847c40c0]
PUP.Optional.Feeder, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Mojorojoup, C:\Users\Samson\AppData\Local\Feeder\Feederup.exe, Quarantined, [6fdb4f96c5d53006fd235327847c40c0]
PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9EB5AB5C-E6F2-4055-98BE-C451D82B427D}|Path, \Fakthertuverge Controls, Delete-on-Reboot, [58f209dce7b3e6505366e14a2bd59e62]
PUP.Optional.Navegaki.PrxySvrRST, HKLM\SOFTWARE\RELTEK|channel, clikmelnin20, Quarantined, [90ba28bd6535231358f482ef020104fc]
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|DisplayName, Search the web, Quarantined, [34169253fd9d270fe8d63445e02355ab]
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms},'>http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}, Quarantined, [460418cd554545f106c70c6fc63d9868]
PUP.Optional.OtherSearch, HKLM\SOFTWARE\WOW6432NODE\OTHERSEARCH|affid, 1123, Quarantined, [80caf3f21684ec4ad85c50caa15f5ba5]
PUP.Optional.ConvertAd.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\syfubixe|ImagePath, C:\Program Files (x86)\4C4C4544-1481101380-4E10-8048-B6C04F353632\knsa7534.tmpfs, Quarantined, [400ad70ee2b8b185fe73bcb8ac571ee2]
PUP.Optional.WindowsSecurity.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINDOWSSECURITY|ImagePath, C:\ProgramData\Windows Security\winsecurity.exe, Quarantined, [78d2b62fb5e51b1bce04a7e5a45e7a86]
PUP.Optional.WinNetSvc, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WMPNETWORKACSVC|ImagePath, "C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\WMPNetworkAcSvc.exe", Quarantined, [f55595503c5ed462a2cd61ba06fa7e82]
PUP.Optional.SafeGuard.ChrPRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\XBOX|ImagePath, C:\Program Files\XBox\XBLive.exe, Quarantined, [dd6d796c1387b4824725fc95748ed32d]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\ENVIRONMENT|SNF, C:\ProgramData\Quoteexs\snp.sc, Quarantined, [eb5fecf916841f17f163205a80839d63]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\ENVIRONMENT|SNP, http://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D?publisher=APSFWakeNet&co=IN&userid=7cd87557-3089-45d6-3a2d-794cc015e7aa&searchtype=sc&installDate=29-11-2016&barcodeid=51198003&channelid=3&av=windows, Quarantined, [5cee38ad6c2e61d5e76e0278c83be11f]
PUP.Optional.Linkury, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|DisplayName, Search the web, Quarantined, [c585eef73862b38319a4225762a1728e]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms},'>http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}, Quarantined, [34164e972f6b6ec86a6107741de613ed]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms},'>http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}, Quarantined, [93b7ce17c7d33ff7bc10bdbeb74c15eb]
Registry Data: 8
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {ielnksrch}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({ielnksrch}),Replaced,[ab9f9e475b3fd462eac75e7036cdc33d]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms},'>http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}),Replaced,[eb5f578e53476bcba811bb1327dc37c9]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms},'>http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}),Replaced,[43074e974a50e84eb80124aab053f709]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SearchAssistant, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms},'>http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}),Replaced,[60ea4a9b9307af879326f9d53cc7a45c]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms},'>http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}, Good: (www.google.com), Bad: (http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWT3E5Zn-mPUBV4QlqY4HytaFDiXeXrqTasf4h2S9DUAJpOS-gwXzFb79cyZy3c60rabFr9YaI4BiCC48TCRW5iHPaKg,,&q={searchTerms}),Replaced,[a5a57c69b2e8e155a911c6083fc48a76]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{06a0ac31-98f8-4de3-a221-c8bc977f1566}|NameServer, 104.197.191.4, Good: (), Bad: (104.197.191.4),Replaced,[2a20e2038e0c979f14c271d02fd4e719]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{26b11a49-585f-4b43-a90c-9af3c3d7b25b}|NameServer, 104.197.191.4, Good: (), Bad: (104.197.191.4),Replaced,[d3779e471c7e92a4eaec360bb54ea858]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{f34ac72a-7200-4cc9-bbbe-0e6ba8e92a67}|NameServer, 104.197.191.4, Good: (), Bad: (104.197.191.4),Replaced,[1931f3f2485295a153830f324bb81ce4]
Folders: 604
PUP.Optional.Feeder, C:\Users\Samson\AppData\Local\Feeder, Quarantined, [6fdb4f96c5d53006fd235327847c40c0],
Adware.Tuto4PC, C:\Users\Samson\AppData\Local\Temp\9G42Q2QTRZ, Quarantined, [1e2ccd18bdddca6c5ccc4d464cb458a8],
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc, Delete-on-Reboot, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\X64, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\X86, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.WindowsSecurity.PrxySvrRST, C:\ProgramData\Windows Security, Delete-on-Reboot, [1535e5000892fc3a23adf5975da57c84],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive, Delete-on-Reboot, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\quarantine, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.VBates, C:\Users\Samson\AppData\LocalLow\Company\Product\1.0, Quarantined, [11392fb6f8a2053172b04a069d66c13f],
PUP.Optional.VBates, C:\Users\Samson\AppData\LocalLow\Company\Product, Quarantined, [11392fb6f8a2053172b04a069d66c13f],
PUP.Optional.Linkury, C:\Windows\Temp\Smartbar, Quarantined, [da70a73e6a300531c9f35722bf4453ad],
PUP.Optional.XBLive.ChrPRST, C:\ProgramData\Microsoft\XBLive\Egg, Quarantined, [8fbb22c3fe9cdb5b71a8dca0689b14ec],
PUP.Optional.XBLive.ChrPRST, C:\ProgramData\Microsoft\XBLive, Quarantined, [8fbb22c3fe9cdb5b71a8dca0689b14ec],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.Linkury, C:\ProgramData\NetworkPacketManitor, Quarantined, [90ba6184bbdfe35305bb2840c73938c8],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Avatars, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Caps, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Application Cache, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_a.thoughtleadr.com_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_ccm.net_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_legendas.tv_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_rapidgator.net_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_www.business2community.com_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_www.karaoketexty.cz_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_www.remintrex.com_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\data_reduction_proxy_leveldb, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension Rules, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension State, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\akpelnjfckgfiplcikojhomllgombffc, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\akpelnjfckgfiplcikojhomllgombffc\2.6_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\akpelnjfckgfiplcikojhomllgombffc\2.6_0\_metadata, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ar, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\bg, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ca, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\cs, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\da, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\de, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\el, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_GB, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_US, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es_419, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\et, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\eu, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fil, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\he, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hu, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\id, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\it, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ja, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ko, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lt, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lv, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ms, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\nl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\no, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_BR, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_PT, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ro, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ru, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sk, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sv, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\th, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\tr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\uk, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\vi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_CN, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_TW, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_metadata, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ar, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\bg, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ca, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\cs, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\da, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\de, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\el, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\en, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\es, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fil, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\he, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hu, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\id, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\it, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ja, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ko, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lt, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lv, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\nl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\no, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_BR, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_PT, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ro, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ru, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sk, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sv, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\th, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\tr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\uk, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\vi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_CN, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_TW, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_metadata, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\bnebomooiloblcgoffldpopcffbfjfdi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\bnebomooiloblcgoffldpopcffbfjfdi\1.42_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\bnebomooiloblcgoffldpopcffbfjfdi\1.42_0\_metadata, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\boecmjlgnkaemicnkhobifonddiclkcc, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\boecmjlgnkaemicnkhobifonddiclkcc\1.1_0, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\boecmjlgnkaemicnkhobifonddiclkcc\1.1_0\_metadata, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\gl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\nl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\af, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\am, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ar, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\az, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\bg, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\bn, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ca, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\cs, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\da, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\de, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\el, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\en_GB, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\en_US, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\es, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\es_419, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\et, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\eu, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fa, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fil, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fr_CA, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\gu, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hi, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hu, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hy, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\id, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\is, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\it, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\iw, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ja, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ka, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\km, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\kn, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ko, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\lo, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\lt, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\lv, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ml, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\mn, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\mr, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ms, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ne, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\no, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\pl, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\pt_BR, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\pt_PT, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ro, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ru, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
Edited by Samson

Share this post


Link to post
Share on other sites

Files: 2746
Trojan.Dropper, C:\Windows\fhelper.exe, Delete-on-Reboot, [77d3e7fe4159d264eb24646b6e958977],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe, Delete-on-Reboot, [ee5cd213bae0f5412bbe654ead53837d],
Rootkit.Agent, C:\Windows\System32\drivers\cherimoya.sys, Delete-on-Reboot, [1e2cfee7d9c13600ba5eaa356c9508f8],
PUP.Optional.Komodia, C:\Windows\System32\drivers\zdwfp64.sys, Delete-on-Reboot, [0545885d7a20d95dced249752fd27888],
RiskWare.GameHack, C:\Program Files (x86)\Call of Duty Advanced Warfare\steam_api64.dll, Quarantined, [67e36283e6b458de3b7ee32f837dd729],
PUP.Optional.Komodia, C:\Program Files (x86)\OtherSearch\zdengine.dll, Quarantined, [103aa441c8d2132314c317a9778a8a76],
PUP.Optional.Komodia, C:\Program Files (x86)\OtherSearch\zdengine64.dll, Quarantined, [d37718cd940689ad4f881da36a97da26],
PUP.Optional.Komodia, C:\Program Files (x86)\OtherSearch\zdwfp.sys, Quarantined, [a1a9db0a7a2056e0851b902ec938a858],
PUP.Optional.Komodia, C:\Program Files (x86)\OtherSearch\zdwfp64.sys, Quarantined, [014929bcf5a59e98d1cfd1ed04fd2ed2],
CrackTool.Agent, C:\Windows\System32\steam_api.dll, Quarantined, [c7836e7731693bfbd06341d5df21817f],
PUP.Optional.Komodia, C:\Windows\System32\zdengine64.dll, Quarantined, [5eec8362f5a5b97d6374b60a2bd6c937],
PUP.Optional.Elex, C:\Windows\SysWOW64\SendRequest Error, Quarantined, [19315293eab053e32d0cca9a21dfb54b],
PUP.Optional.Komodia, C:\Windows\SysWOW64\zdengine.VIR, Quarantined, [69e151940397b97d12c56c5403fe0ef2],
Trojan.KorAd, C:\Users\Samson\AppData\Local\Temp\KZ7ZData.7z, Quarantined, [3a10ab3a2b6f66d004318f7e02fe53ad],
PUP.Optional.ConvertAd, C:\Users\Samson\AppData\Local\Temp\nsm62D9.tmp, Quarantined, [dc6ef2f37327df57433614b4a85b51af],
PUP.Optional.BundleInstaller, C:\Users\Samson\AppData\Local\Temp\F3F8.tmp.exe, Quarantined, [68e2fbea2278221468e452649769d52b],
PUP.Optional.BundleInstaller, C:\Users\Samson\AppData\Local\Temp\37DA.tmp.exe, Quarantined, [61e9ba2bc9d160d6dd6f9521748c2cd4],
PUP.Optional.BundleInstaller, C:\Users\Samson\AppData\Local\Temp\59C6.tmp.exe, Quarantined, [82c8806565350c2a19333383000031cf],
PUP.Optional.PCMatic, C:\Users\Samson\Downloads\pcmatic-setup-0002.exe, Quarantined, [cf7bb72e237787af260e1c947789b14f],
PUP.Optional.MorePowerfulCleaner, C:\Users\Samson\AppData\Local\MalwareProtectionLive\quarantine\ic-0.117b3315e97624-2d3f9e40-44dc-4183-ab14-b74c42843a01.exe, Quarantined, [ff4bedf89208f244fb64ca1313f0827e],
PUP.Optional.MorePowerfulCleaner, C:\Users\Samson\AppData\Local\MalwareProtectionLive\quarantine\ic-0.80bda0b2e13d2-dfc31c70-363e-40d5-b5c0-074ed70f6c1e.exe, Quarantined, [2822fbea712979bd2c33776629da6799],
RiskWare.CHP, C:\Windows\hrewnf.exe, Quarantined, [e06ab1348d0db581bbbebaf0d13242be],
Trojan.Dropper, C:\Windows\plotpix.exe, Quarantined, [d971a5402c6e79bdce41ce0137cc15eb],
RiskWare.CHP, C:\Windows\slp.exe, Quarantined, [37137471a2f8ce687009595118eb2bd5],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\QvoNix.dll, Quarantined, [a4a6ffe663374ee86b91e55458a86b95],
PUP.Optional.Elex, C:\Users\Samson\AppData\Roaming\Ghasetion\Pagasp.dll, Quarantined, [ea608065d8c22511b713085730d00ef2],
PUP.Optional.Elex, C:\Windows\System32\Tasks\Fakthertuverge Controls, Quarantined, [d575a24344563ff7af43e94135cbdd23],
PUP.Optional.Kuaizip, C:\Windows\System32\drivers\KuaiZipDrive2.sys, Quarantined, [8dbd35b0d4c667cf2abd9cbe3fc19769],
PUP.Optional.Feeder, C:\Users\Samson\AppData\Local\Feeder\Feeder.exe, Quarantined, [6fdb4f96c5d53006fd235327847c40c0],
PUP.Optional.Feeder, C:\Users\Samson\AppData\Local\Feeder\Feederup.exe, Quarantined, [6fdb4f96c5d53006fd235327847c40c0],
PUP.Optional.Feeder, C:\Users\Samson\AppData\Local\Feeder\Interop.SHDocVw.dll, Quarantined, [6fdb4f96c5d53006fd235327847c40c0],
PUP.Optional.Feeder, C:\Users\Samson\AppData\Local\Feeder\NDde.dll, Quarantined, [6fdb4f96c5d53006fd235327847c40c0],
Adware.Tuto4PC, C:\Users\Samson\AppData\Local\Temp\9G42Q2QTRZ\caster.exe.config.config, Quarantined, [1e2ccd18bdddca6c5ccc4d464cb458a8],
Adware.Tuto4PC, C:\Users\Samson\AppData\Local\Temp\9G42Q2QTRZ\asasa.exe, Quarantined, [1e2ccd18bdddca6c5ccc4d464cb458a8],
Adware.Tuto4PC, C:\Users\Samson\AppData\Local\Temp\9G42Q2QTRZ\asasa.exe.config.config, Quarantined, [1e2ccd18bdddca6c5ccc4d464cb458a8],
Adware.Tuto4PC, C:\Users\Samson\AppData\Local\Temp\9G42Q2QTRZ\cast.config, Quarantined, [1e2ccd18bdddca6c5ccc4d464cb458a8],
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\config.ini, Quarantined, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\Interface.dll, Delete-on-Reboot, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\st.con, Quarantined, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\st.log, Quarantined, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.WinNetSvc, C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc\WMPNetworkAcSvc.exe, Delete-on-Reboot, [4307b1348a103600e475c6e7956be11f],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\set.exe.config, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\Config.json, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\System.Data.SQLite.dll, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\System.Data.SQLite.Linq.dll, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\System.Data.SQLite.xml, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\X64\SQLite.Interop.dll, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.LogicHandler, C:\ProgramData\Logic Handler\X86\SQLite.Interop.dll, Quarantined, [fb4f5d88a4f6e650cf2abbcfbe44a957],
PUP.Optional.WindowsSecurity.PrxySvrRST, C:\ProgramData\Windows Security\winsecurity.exe, Delete-on-Reboot, [1535e5000892fc3a23adf5975da57c84],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\1.tmp.exe, Quarantined, [143639ac53475dd970c287c52dd6748c],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\2.tmp.exe, Quarantined, [83c75c89e5b5af87e74bb795ab58857b],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\3.tmp.exe, Quarantined, [480242a3e0ba7db981b12b215ca726da],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\4.tmp.exe, Quarantined, [81c928bd15854aec062ce765f60da25e],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\5.tmp.exe, Quarantined, [1f2beff6e5b5e84ec07271db60a3857b],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\6.tmp.exe, Quarantined, [c28853925a4063d37cb6410b3ec5ab55],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\7.tmp.exe, Quarantined, [6edc63823c5eee4800324a0213f03cc4],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\8.tmp.exe, Quarantined, [b3977d6827731c1aaf83e26a9d667b85],
Trojan.Agent.E, C:\Users\Samson\AppData\Local\Temp\9.tmp.exe, Quarantined, [c08a469fd7c3ef4772c0c08caf5460a0],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe.config, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\certificates, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\certificates_filter, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\domains, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\DotNetCheck.exe, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\DotNetCheck.exe.config, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\extensions, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\extensions_filter, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\log.txt, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\MPLSettings.dll, Delete-on-Reboot, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\uninstall.exe, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Local\MalwareProtectionLive\userinfo.dat, Quarantined, [07438461fc9e3204061964eb9e6518e8],
PUP.Optional.MalwareProtection, C:\Users\Samson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Malware Protection Live.lnk, Quarantined, [e367cb1ac1d99d9971af321dc043dd23],
PUP.Optional.VBates, C:\Users\Samson\AppData\LocalLow\Company\Product\1.0\localStorageIE.txt, Quarantined, [11392fb6f8a2053172b04a069d66c13f],
PUP.Optional.VBates, C:\Users\Samson\AppData\LocalLow\Company\Product\1.0\localStorageIE_backup.txt, Quarantined, [11392fb6f8a2053172b04a069d66c13f],
PUP.Optional.Komodia, C:\Windows\Temp\ziengine.ini.log, Quarantined, [0743578ebcdecf6709b0adc7996a916f],
PUP.Optional.Komodia, C:\Windows\Temp\zdengine.log, Quarantined, [59f1f0f5eeac2d0908b2d59f1fe47a86],
PUP.Optional.Komodia.WnskRST, C:\Windows\System32\zdengineOff.ini, Quarantined, [6ddd3ea7cdcdde58a31bed87b54e0bf5],
PUP.Optional.Komodia.WnskRST, C:\Windows\SysWOW64\zdengineOff.ini, Quarantined, [56f4db0a465471c5a915cca8a36001ff],
PUP.Optional.Linkury, C:\Users\Samson\AppData\Roaming\md.xml, Quarantined, [66e48560bbdf80b649709dd87f8434cc],
PUP.Optional.Linkury, C:\Users\Samson\AppData\Roaming\noah.dat, Quarantined, [7ecc1cc9fc9e1b1b9525b1c4b44f18e8],
PUP.Optional.Linkury, C:\Users\Samson\AppData\Roaming\uninstall_temp.ico, Quarantined, [d476a63f1585f24417a40f66f2118977],
PUP.Optional.Linkury, C:\Windows\Temp\Smartbar\Groovetom.ico, Quarantined, [da70a73e6a300531c9f35722bf4453ad],
PUP.Optional.Linkury.ACMB1, C:\Windows\SysWOW64\findit.xml, Quarantined, [66e4ba2b41592d092f22e7932bd87f81],
PUP.Optional.XBLive.ChrPRST, C:\ProgramData\Microsoft\XBLive\Egg\{5xcbdodz0ecf4f6581384491245f93ce161207}.config, Quarantined, [8fbb22c3fe9cdb5b71a8dca0689b14ec],
PUP.Optional.Linkury.Gen, C:\Users\Samson\AppData\Roaming\GreenDonstrong.tst, Quarantined, [1832d411603a8caa2838d80f6e951be5],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\dlog.txt, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\freebl3.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\libnspr4.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\libplc4.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\libplds4.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\nss3.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\nssckbi.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\nssdbm3.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\nssutil3.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\s.xml, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\slite.exe, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\smime3.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\softokn3.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\sqlite3.dll, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\uninstall.exe, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\zdengine.tlb, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.OtherSearch, C:\Program Files (x86)\OtherSearch\ziengine.ini, Quarantined, [e169c61fc6d490a60e30c362b848b44c],
PUP.Optional.Linkury, C:\ProgramData\NetworkPacketManitor\Config.xml, Quarantined, [90ba6184bbdfe35305bb2840c73938c8],
PUP.Optional.Linkury, C:\ProgramData\NetworkPacketManitor\Nettrans.exe.config, Quarantined, [90ba6184bbdfe35305bb2840c73938c8],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\First Run, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Certificate Revocation Lists, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\en-US-6-1.bdic, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\en-US-7-0.bdic, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\en-US-7-1.bdic, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Local State, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\nacl_validation_cache.bin, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Bloom, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Bloom Prefix Set, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Channel IDs, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Channel IDs-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Cookies, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Cookies-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Csd Whitelist, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Download, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Download Whitelist, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Extension Blacklist, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing IP Blacklist, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Module Whitelist, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing Resource Blacklist, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing UwS List, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Safe Browsing UwS List Prefix Set, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\Avatars\avatar_generic.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\manifest.fingerprint, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\manifest.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\34bb6ad6c3df9c03eea8a499ff7891486c9d5e5cac92d01f7bfd1bce19db48ef.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\41b2dc2e89e63ce4af1ba7bb29bf68c6dee6f9f1cc047e30dffae3b3ba259263.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\5614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\68f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\7461b4a09cfb3d41d75159575b2e7649a445a8d27709b0cc564a6482b7eb41a3.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\a577ac9ced7548dd8f025b67a241089df86e0f476ec203c2ecbedb185f282638.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\ac3b9aed7fa9674757159e6d7d575672f9d98100941e9bdeffeca1313b75782d.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a5.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\cdb5179b7fc1c046feea31136a3f8f002e6182faf8896fecc8b2f5b5ab604900.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\CertificateTransparency\171\_platform_specific\all\sths\ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb.sth, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Affiliation Database, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Affiliation Database-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Bookmarks, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Cookies, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Cookies-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Current Session, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Current Tabs, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Custom Dictionary.txt.backup, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\DownloadMetadata, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension Cookies, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension Cookies-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Favicons, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Favicons-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Google Profile Picture.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Google Profile.ico, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\History, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\History Provider Cache, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\History-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Last Session, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Last Tabs, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Login Data, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Login Data-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Network Action Predictor, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Network Persistent State, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Origin Bound Certs, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Origin Bound Certs-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Preferences, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\QuotaManager, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\QuotaManager-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\README, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Secure Preferences, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Secure Preferencesgoobackup, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Shortcuts, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Shortcuts-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Top Sites, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Top Sites-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\TransportSecurity, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Visited Links, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Web Data, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Web Data-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\WebRTCIdentityStore, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\WebRTCIdentityStore-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Custom Dictionary.txt, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Network Action Predictor-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Application Cache\Index, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Application Cache\Index-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\Databases.db, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\Databases.db-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_a.thoughtleadr.com_0\3, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_ccm.net_0\7, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_legendas.tv_0\4, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_rapidgator.net_0\6, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_www.business2community.com_0\2, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_www.karaoketexty.cz_0\1, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\databases\http_www.remintrex.com_0\5, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\data_reduction_proxy_leveldb\CURRENT, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\data_reduction_proxy_leveldb\LOCK, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\data_reduction_proxy_leveldb\LOG, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\data_reduction_proxy_leveldb\MANIFEST-000001, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension Rules\CURRENT, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension Rules\LOCK, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension Rules\LOG, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension Rules\MANIFEST-000001, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension State\CURRENT, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension State\LOCK, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension State\LOG, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extension State\MANIFEST-000001, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\akpelnjfckgfiplcikojhomllgombffc\2.6_0\icon_128.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\akpelnjfckgfiplcikojhomllgombffc\2.6_0\manifest.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\akpelnjfckgfiplcikojhomllgombffc\2.6_0\_metadata\verified_contents.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\128.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\manifest.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ar\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\bg\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ca\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\cs\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\da\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\de\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\el\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_GB\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\en_US\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\es_419\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\et\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\eu\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fil\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\fr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\he\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\hu\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\id\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\it\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ja\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ko\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lt\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\lv\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ms\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\nl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\no\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_BR\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\pt_PT\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ro\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\ru\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sk\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\sv\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\th\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\tr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\uk\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\vi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_CN\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_locales\zh_TW\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\_metadata\verified_contents.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\128.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\manifest.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ar\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\bg\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ca\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\cs\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\da\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\de\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\el\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\en\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\es\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fil\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\fr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\he\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\hu\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\id\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\it\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ja\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ko\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lt\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\lv\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\nl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\no\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_BR\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\pt_PT\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ro\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\ru\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sk\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\sv\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\th\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\tr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\uk\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\vi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_CN\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_locales\zh_TW\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\_metadata\verified_contents.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\bnebomooiloblcgoffldpopcffbfjfdi\1.42_0\icon_128.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\bnebomooiloblcgoffldpopcffbfjfdi\1.42_0\manifest.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\bnebomooiloblcgoffldpopcffbfjfdi\1.42_0\_metadata\verified_contents.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\boecmjlgnkaemicnkhobifonddiclkcc\1.1_0\manifest.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\boecmjlgnkaemicnkhobifonddiclkcc\1.1_0\mt.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\boecmjlgnkaemicnkhobifonddiclkcc\1.1_0\_metadata\verified_contents.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\128.png, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\contentscript_bin_prod.js, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\dasherSettingSchema.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\eventpage_bin_prod.js, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\manifest.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\page_embed_script.js, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\gl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\nl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\af\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\am\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ar\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\az\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\bg\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\bn\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ca\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\cs\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\da\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\de\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\el\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\en_GB\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\en_US\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\es\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\es_419\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\et\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\eu\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fa\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fil\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\fr_CA\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\gu\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hi\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hu\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\hy\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\id\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\is\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\it\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\iw\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ja\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ka\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\km\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\kn\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ko\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\lo\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\lt\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\lv\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ml\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\mn\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\mr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ms\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ne\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\no\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\pl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\pt_BR\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\pt_PT\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ro\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ru\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\si\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\sk\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\sl\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\sr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\sv\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\sw\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\ta\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\te\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\th\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\tr\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\_locales\uk\messages.json, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\S

Edited by Samson

Share this post


Link to post
Share on other sites
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.4shared.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.4shared.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.91mobiles.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.abbreviations.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.abbreviations.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.abcdwap.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.abcdwap.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.abof.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.abof.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.adcomp.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.adcomp.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.aiomp3.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.aiomp3.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.allocine.fr_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.amazon.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.amazon.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.americanswan.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.americanswan.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.amulbaby.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.amulbaby.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.android.gs_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.android.gs_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.animeram.io_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.animeram.io_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.apkmirror.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.apkmirror.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.apkxmod.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.armani.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.armani.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.audubon.org_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.audubon.org_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.azlyrics.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.azlyrics.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.babyoye.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.babyoye.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.boredpanda.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.boredpanda.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.britishairways.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.budgetyourtrip.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.budgetyourtrip.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.business2community.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.business2community.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ca2016.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ca2016.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cagukan.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cagukan.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.canadajobs.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.canadajobs.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.carmeliahaven.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.casio.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.casio.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.casioindiashop.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.casioindiashop.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.celebjihad.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.celebjihad.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cic.gc.ca_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cic.gc.ca_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cisco.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cisco.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.clashofclans-tools.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_tamilyogi.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_thetruthspy.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_trace.bharatiyamobile.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_tuscantraveler.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_vidmad.tv_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_webcache.googleusercontent.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.91mobiles.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.allocine.fr_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.apkxmod.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.britishairways.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.coinaphoto.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.coinaphoto.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.computerhope.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.computerhope.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.consmumbai.esteri.it_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.consmumbai.esteri.it_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cookingandme.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cookingandme.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.couponraja.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.couponraja.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cricketcountry.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cyberfreewishes.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cyberfreewishes.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dailymotion.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dailymotion.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.damnnet.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.damnnet.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dandeli.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dandeli.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.datsbrand.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.datsbrand.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.deakin.edu.au_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\https_11b563cb1.webengage.co_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\https_11b563cb1.webengage.co_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\https_11b564323.webengage.co_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\https_11b564323.webengage.co_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\https_58adcbc9.webengage.co_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dell.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dell.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.delldriver.net_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.delldriver.net_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.desiretrees.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.desiretrees.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dll-found.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dll-found.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dlldump.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dlldump.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dllfiles.org_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dllfiles.org_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dominos.co.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.driveridentifier.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.driveridentifier.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.driverscape.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.driverscape.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.driversepson.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.driversepson.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ebay.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ebay.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.elrocknomuere.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.elrocknomuere.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.emirates.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.emp4.link_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.emp4.link_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.epicurious.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.epicurious.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.epson.co.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.epson.co.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.escapistmagazine.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.escapistmagazine.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.europeanbestdestinations.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.europeanbestdestinations.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fandango.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fbdown.net_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fbdown.net_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.festina.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.festina.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.financialexpress.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.financialexpress.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.firstcry.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.firstcry.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.firstpost.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.firstpost.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.flipkart.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fodors.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fodors.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.foodnetwork.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.foodnetwork.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.foreignpolicyjournal.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.foreignpolicyjournal.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fragrancenet.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fragrancenet.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.freejobalert.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.freejobalert.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.freeworld4u.net_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gamespot.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gamespot.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.geforce.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.geforce.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gefs-online.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gefs-online.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gloverzz.net_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gloverzz.net_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.godtube.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.godtube.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.goodhousekeeping.co.uk_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.goplay.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.goplay.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.grtjewels.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.grtjewels.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gsmarena.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gsmarena.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gullei.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.gullei.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.hacktoolsonline.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.hacktoolsonline.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.healthcaremagic.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.herocoupon.co.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.herocoupon.co.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.holidayiq.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.holidayiq.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.hongkiat.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.hongkiat.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.howtogeek.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.howtogeek.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ibtimes.co.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ibtimes.co.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ibtimes.co.uk_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.idmserialkeycrack.net_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.idmserialkeycrack.net_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.imagebon.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.imagebon.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.imdb.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.imdb.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.independent.co.uk_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.independent.co.uk_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.indgovtjobs.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.indgovtjobs.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.indiaglitz.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.indiatimes.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.indiatimes.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.inspiremore.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.inspiremore.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.iroot.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.iroot.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.israbox.co_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.israbox.co_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.itvarnews.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.itvarnews.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ixigo.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.clashofclans-tools.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.cricketcountry.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.deakin.edu.au_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.dominos.co.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.emirates.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.fandango.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.flipkart.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.freeworld4u.net_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.goodhousekeeping.co.uk_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.healthcaremagic.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ibtimes.co.uk_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.jabong.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.jabong.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.jeuxvideo.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.jeuxvideo.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.joinindianarmy.nic.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.joinindianarmy.nic.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.kapkids.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.kapkids.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.karaoketexty.cz_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.karaoketexty.cz_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.kgun9.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.koovs.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.koovs.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.kraftcanada.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.kraftcanada.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.laptopdriverdownload.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.laptopdriverdownload.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.latestinphotos.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.latestinphotos.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lenskart.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lenskart.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.letssingit.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lg.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lg.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lifebuzz.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lifebuzz.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lifehack.org_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lifehack.org_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lifestylefood.com.au_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lifestylefood.com.au_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.limeroad.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.limeroad.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.littlethings.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.livemint.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.livemint.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.love-melody.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.love-melody.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lufthansa.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lufthansa.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lyricsinbox.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lyricsinbox.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lyricsol.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.lyricsol.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mapsgalaxy.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mapsofworld.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mapsofworld.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.marksandspencer.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.marksandspencer.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.maroon5.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.maroon5.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.meals.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.meals.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mediafire.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mediafire.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.medicaldaily.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mens-den.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mens-den.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mensxp.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mensxp.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.metrolyrics.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.metrolyrics.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mindset-habits.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mindset-habits.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.miniclip.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.miniclip.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.misstral.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mltr-universe.dk_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mltr-universe.dk_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mobilenumbertracker.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mobilenumbertracker.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.montecarlo.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.montecarlo.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.motorola.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.motorola.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.movie4k.to_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.movie4k.to_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.moviecrow.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.movieinsider.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.movieinsider.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mygola.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.mygola.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.myntra.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.myntra.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.myrecipes.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.myrecipes.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.nationsonline.org_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.nationsonline.org_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.naukri.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ndtv.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ndtv.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.nextgenupdate.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.nextgenupdate.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.notebookcheck.net_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.notebookcheck.net_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.nuclit.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.nuclit.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.online-convert.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.online-convert.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.opendll.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.opensubtitles.org_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.opensubtitles.org_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.paadalvarigal.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.paadalvarigal.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.paatuvarigal.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.paatuvarigal.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.parents.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.parents.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.paydayloansg.info_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.paydayloansg.info_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pcadvisor.co.uk_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pcgamer.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pcgamer.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pcworld.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pcworld.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.picturecorrect.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.picturecorrect.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pradhanmantriyojana.in_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pradhanmantriyojana.in_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pref.com_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.pref.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.programinndir.net_0.localstorage, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.ixigo.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.kgun9.com_0.localstorage-journal, Quarantined, [85c53ea7c3d757df9ffda2d9d32dbb45],
PUP.Optional.Elex, C:\Users\Samson\AppData\Local\Aticolyvqage\ChromeDefaultData\Local Storage\http_www.letssingit.com_0.localstorage-journal, Quarantined,
Edited by Samson

Share this post


Link to post
Share on other sites
These are the things i got from Malwarebyte.. I've found almost 3k+ affected files..
The following are from the advcleaner..

AdwCleaner [C0]:
# AdwCleaner v6.040 - Logfile created 09/12/2016 at 11:23:53
# Updated on 02/12/2016 by Malwarebytes
# Database : 2016-12-09.1 [Local]
# Operating System : Windows 10 Home (X64)
# Username : Sam - LAPTOP-DL6LJGA8
# Running from : C:\Users\Samson\Downloads\AdwCleaner.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support
***** [ Services ] *****
***** [ Folders ] *****
[#] Folder deleted on reboot: C:\Users\Samson\AppData\Local\Microsoft\Performance\Monitor
[-] Folder deleted: C:\Users\Samson\AppData\Roaming\GameLauncher
[-] Folder deleted: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\chklaanhfefbnpoihckbnefhakgolnmc

***** [ Files ] *****
[-] File deleted: C:\END
[-] File deleted: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\chrome-extension_fdckocnfhibclnnkifmjbbogcfkbijki_0.localstorage
[-] File deleted: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Local Storage\chrome-extension_fdckocnfhibclnnkifmjbbogcfkbijki_0.localstorage

***** [ DLL ] *****
***** [ WMI ] *****
***** [ Shortcuts ] *****
***** [ Scheduled Tasks ] *****
***** [ Registry ] *****
[-] Key deleted: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
[-] Key deleted: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{176F706B-5175-479C-A3DF-32420F6FB01A}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{38BE2BE8-EB8E-41D1-9D94-3B1697094D47}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{53C267B2-B01D-410F-A4DD-A32962EE55F4}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{8804A543-42D3-4D71-9685-B0243D5526F3}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{A0F322D5-6A13-4CAB-84CF-FABB5690618E}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{AC3E336C-B524-47F0-9AA2-5F67AA056086}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{F577A1BA-D82D-4BB2-8430-B767285D081D}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}
[-] Key deleted: HKU\.DEFAULT\Software\jhtrsq
[-] Key deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\b1.org
[-] Key deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\DriverTuner
[-] Key deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\DriverTuner_Init
[-] Key deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\Installer
[-] Key deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\MICROSOFT\OTUT
[-] Key deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\SNDA
[-] Key deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\GreenTree Applications
[#] Key deleted on reboot: HKU\S-1-5-18\Software\jhtrsq
[#] Key deleted on reboot: HKCU\Software\b1.org
[#] Key deleted on reboot: HKCU\Software\DriverTuner
[#] Key deleted on reboot: HKCU\Software\DriverTuner_Init
[#] Key deleted on reboot: HKCU\Software\Installer
[#] Key deleted on reboot: HKCU\Software\MICROSOFT\OTUT
[#] Key deleted on reboot: HKCU\Software\SNDA
[#] Key deleted on reboot: HKCU\Software\GreenTree Applications
[-] Key deleted: HKLM\SOFTWARE\b1.org
[-] Key deleted: HKLM\SOFTWARE\SkypeUpdateEx
[-] Key deleted: HKLM\SOFTWARE\jhtrsq
[-] Key deleted: HKLM\SOFTWARE\WMPNetworkAcSvc
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
[#] Key deleted on reboot: [x64] HKCU\Software\b1.org
[#] Key deleted on reboot: [x64] HKCU\Software\DriverTuner
[#] Key deleted on reboot: [x64] HKCU\Software\DriverTuner_Init
[#] Key deleted on reboot: [x64] HKCU\Software\Installer
[#] Key deleted on reboot: [x64] HKCU\Software\MICROSOFT\OTUT
[#] Key deleted on reboot: [x64] HKCU\Software\SNDA
[#] Key deleted on reboot: [x64] HKCU\Software\GreenTree Applications
[-] Key deleted: [x64] HKLM\SOFTWARE\b1.org
[-] Key deleted: [x64] HKLM\SOFTWARE\jhtrsq
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bestpriceninja.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\nps.pastaleads.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pastaleads.com
[-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\azlyrics.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\computer-repair-free.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\foxi69.tlscdn.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\jobs.trovit.co.in
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\lyricsinbox.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\metrolyrics.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pc-fix.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\revo-uninstaller.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.azlyrics.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\tlscdn.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovilavoro.it
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovit.co.in
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\vlc-media-player.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.azlyrics.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\azlyrics.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\computer-repair-free.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\foxi69.tlscdn.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\jobs.trovit.co.in
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\lyricsinbox.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\metrolyrics.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pc-fix.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\revo-uninstaller.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.azlyrics.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\tlscdn.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovilavoro.it
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovit.co.in
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\vlc-media-player.en.softonic.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.azlyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bestpriceninja.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\nps.pastaleads.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pastaleads.com
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\azlyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\computer-repair-free.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\foxi69.tlscdn.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\jobs.trovit.co.in
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\lyricsinbox.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\metrolyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pc-fix.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\revo-uninstaller.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.azlyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\tlscdn.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovilavoro.it
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovit.co.in
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\vlc-media-player.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.azlyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\azlyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\computer-repair-free.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\foxi69.tlscdn.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\jobs.trovit.co.in
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\lyricsinbox.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\metrolyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pc-fix.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\revo-uninstaller.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.azlyrics.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\tlscdn.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovilavoro.it
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovit.co.in
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\vlc-media-player.en.softonic.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.azlyrics.com
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [MalwareProtectionLive]
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [gplyra]
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [DiskPower]
[-] Value deleted: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [svchost0]
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [app]
[-] Key deleted: HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\KuaiZip2ShlExt
[-] Key deleted: HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\KuaiZip2ShlExt

***** [ Web browsers ] *****
[-] [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] [search Provider] Deleted: winrar-64bit.en.softonic.com
[-] [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] [search Provider] Deleted: daemon-search.com
[-] [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1\Web data] [search Provider] Deleted: mystartsearch.com
[-] [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1] [homepage] Deleted: hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKpX5iIkVPVMjsikznmq6_GHl8rIxFPVbc6oJF8g25IRByWVHutay-2l5feaLC6DEVQcJzOVmkzWZAobEHBHTp85V174SxshVZ41MIxl7q0jloO1ot4QK17__iWLUpx1wtt9js68Q,,
[-] [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData] [startup_urls] Deleted: hxxp://www.trotux.com/?z=6676c3bde8f0b0aa5258172g5z8mcw7qat2c4w1g2m&from=isr&uid=TOSHIBAXMQ01ABD100_X5M8SQZ3SXXX5M8SQZ3S&type=hp
[-] [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData] [extension] Deleted: chklaanhfefbnpoihckbnefhakgolnmc

*************************
:: "Tracing" keys deleted
:: Winsock settings cleared
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [24588 Bytes] - [09/12/2016 11:23:53]
C:\AdwCleaner\AdwCleaner[s0].txt - [24678 Bytes] - [09/12/2016 10:40:31]
C:\AdwCleaner\AdwCleaner[s1].txt - [24492 Bytes] - [09/12/2016 11:20:14]
C:\AdwCleaner\AdwCleaner[s2].txt - [23641 Bytes] - [09/12/2016 11:22:23]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [24884 Bytes] ##########
It got stuck twice or thrice.. This is the last thing that work perfectly and restarts, and the file popup itself..
The following are the other files i found in that C:\AdwCleaner\ folder

AdwCleaner [s0] :
# AdwCleaner v6.040 - Logfile created 09/12/2016 at 10:40:31
# Updated on 02/12/2016 by Malwarebytes
# Database : 2016-12-09.1 [server]
# Operating System : Windows 10 Home (X64)
# Username : Sam - LAPTOP-DL6LJGA8
# Running from : C:\Users\Samson\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
***** [ Services ] *****
Service Found: cherimoya
Service Found: zdengine
Service Found: zdwfp
Service Found: WindowsSecurity
Service Found: CHNGTSvc
Service Found: WMPNetworkAcSvc
Service Found: XBox

***** [ Folders ] *****
Folder Found: C:\Users\Samson\AppData\Local\4C4C4544-1481123135-4E10-8048-B6C04F353632
Folder Found: C:\Users\Samson\AppData\Local\MalwareProtectionLive
Folder Found: C:\Users\Samson\AppData\Local\Microsoft\Performance\Monitor
Folder Found: C:\Users\Samson\AppData\Roaming\Kuaizip
Folder Found: C:\Users\Samson\AppData\Roaming\Softlink
Folder Found: C:\Users\Samson\AppData\Roaming\WMPNetworkAcSvc
Folder Found: C:\ProgramData\Windows Security
Folder Found: C:\ProgramData\Quoteex
Folder Found: C:\ProgramData\quoteex
Folder Found: C:\ProgramData\ytd video downloader
Folder Found: C:\ProgramData\Application Data\Windows Security
Folder Found: C:\ProgramData\Application Data\Quoteex
Folder Found: C:\ProgramData\Application Data\quoteex
Folder Found: C:\ProgramData\Application Data\ytd video downloader
Folder Found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\B1 Free Archiver
Folder Found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Found: C:\Program Files (x86)\B1 Free Archiver
Folder Found: C:\Program Files (x86)\GreenTree Applications
Folder Found: C:\Program Files (x86)\DPower
Folder Found: C:\uninst
Folder Found: C:\Program Files (x86)\DPower
Folder Found: C:\Users\Samson\AppData\Roaming\GameLauncher
Folder Found: C:\ProgramData\Windows Security
Folder Found: C:\ProgramData\Microsoft\Network\Dsq
Folder Found: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\chklaanhfefbnpoihckbnefhakgolnmc

***** [ Files ] *****
File Found: C:\WINDOWS\SysNative\drivers\cherimoya.sys
File Found: C:\WINDOWS\SysNative\drivers\zdwfp64.sys
File Found: C:\END
File Found: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\chrome-extension_fdckocnfhibclnnkifmjbbogcfkbijki_0.localstorage
File Found: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Local Storage\chrome-extension_fdckocnfhibclnnkifmjbbogcfkbijki_0.localstorage

***** [ DLL ] *****
No malicious DLLs found.

***** [ WMI ] *****
No malicious keys found.

***** [ Shortcuts ] *****
No infected shortcut found.

***** [ Scheduled Tasks ] *****
No malicious task found.

***** [ Registry ] *****
Key Found: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
Key Found: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
Key Found: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
Key Found: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
Key Found: HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{176F706B-5175-479C-A3DF-32420F6FB01A}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{38BE2BE8-EB8E-41D1-9D94-3B1697094D47}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{53C267B2-B01D-410F-A4DD-A32962EE55F4}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{8804A543-42D3-4D71-9685-B0243D5526F3}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{A0F322D5-6A13-4CAB-84CF-FABB5690618E}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{AC3E336C-B524-47F0-9AA2-5F67AA056086}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{F577A1BA-D82D-4BB2-8430-B767285D081D}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}
Key Found: HKLM\SOFTWARE\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}
Key Found: HKLM\SOFTWARE\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}
Key Found: HKLM\SOFTWARE\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}
Key Found: HKLM\SOFTWARE\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}
Key Found: HKLM\SOFTWARE\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}
Key Found: HKU\.DEFAULT\Software\jhtrsq
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\b1.org
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\DriverTuner
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\DriverTuner_Init
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\Installer
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\MICROSOFT\OTUT
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\SNDA
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\GreenTree Applications
Key Found: HKU\S-1-5-18\Software\jhtrsq
Key Found: HKCU\Software\b1.org
Key Found: HKCU\Software\DriverTuner
Key Found: HKCU\Software\DriverTuner_Init
Key Found: HKCU\Software\Installer
Key Found: HKCU\Software\MICROSOFT\OTUT
Key Found: HKCU\Software\SNDA
Key Found: HKCU\Software\GreenTree Applications
Key Found: HKLM\SOFTWARE\b1.org
Key Found: HKLM\SOFTWARE\SkypeUpdateEx
Key Found: HKLM\SOFTWARE\jhtrsq
Key Found: HKLM\SOFTWARE\WMPNetworkAcSvc
Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Found: [x64] HKCU\Software\b1.org
Key Found: [x64] HKCU\Software\DriverTuner
Key Found: [x64] HKCU\Software\DriverTuner_Init
Key Found: [x64] HKCU\Software\Installer
Key Found: [x64] HKCU\Software\MICROSOFT\OTUT
Key Found: [x64] HKCU\Software\SNDA
Key Found: [x64] HKCU\Software\GreenTree Applications
Key Found: [x64] HKLM\SOFTWARE\b1.org
Key Found: [x64] HKLM\SOFTWARE\jhtrsq
Data Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKp
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bestpriceninja.com
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\nps.pastaleads.com
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pastaleads.com
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\azlyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\computer-repair-f
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\foxi69.tlscdn.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\jobs.trovit.co.in
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\lyricsinbox.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\metrolyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pc-fix.en.softoni
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\revo-uninstaller.
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.azlyrics.c
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\tlscdn.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovilavoro.it
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovit.co.in
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\vlc-media-player.
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.azlyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\azlyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\computer-repair-free
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\foxi69.tlscdn.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\jobs.trovit.co.in
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\lyricsinbox.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\metrolyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pc-fix.en.softonic.c
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\revo-uninstaller.en.
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.azlyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\tlscdn.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovilavoro.it
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovit.co.in
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\vlc-media-player.en.
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.azlyrics.com
Key Found: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bestpriceninja.com
Key Found: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\nps.pastaleads.com
Key Found: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pastaleads.com
Key Found: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\azlyrics.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\computer-repair
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\foxi69.tlscdn.c
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\jobs.trovit.co.
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\lyricsinbox.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\metrolyrics.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pc-fix.en.softo
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\revo-uninstalle
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.azlyrics
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.c
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\tlscdn.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovilavoro.it
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovit.co.in
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\vlc-media-playe
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.azlyrics.co
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\azlyrics.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\computer-repair-fr
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\foxi69.tlscdn.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\jobs.trovit.co.in
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\lyricsinbox.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\metrolyrics.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\pc-fix.en.softonic
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\revo-uninstaller.e
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.azlyrics.co
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\softonic.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\solvusoft.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\tlscdn.com
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovilavoro.it
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\trovit.co.in
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\vlc-media-player.e
Key Found: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.azlyrics.com
Value Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [MalwareProtectionLive]
Value Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [gplyra]
Value Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [DiskPower]
Value Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [svchost0]
Value Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [app]
Key Found: HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\KuaiZip2ShlExt
Key Found: HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\KuaiZip2ShlExt

***** [ Web browsers ] *****
No malicious Firefox based browser items found.
Chrome pref Found: [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1\Secure Preferences ] - hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5j
Chrome pref Found: [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Secure Preferences] - hxxp://www.trotux.com/?z=6676c3bde8f0b0aa5258172g5z8mcw7qat2c4w1g2m&from=isr&uid=TOSHIBAXMQ01ABD100_X5M8SQ
Chrome pref Found: [C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Secure Preferences ] - chklaanhfefbnpoihckbnefhakgolnmc
*************************
C:\AdwCleaner\AdwCleaner[s0].txt - [24296 Bytes] - [09/12/2016 10:40:31]
########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [24370 Bytes] ##########

AdwCleaner [s1] :
# AdwCleaner v6.040 - Logfile created 09/12/2016 at 11:20:14
# Updated on 02/12/2016 by Malwarebytes
# Database : 2016-12-09.1 [Local]
# Operating System : Windows 10 Home (X64)
# Username : Sam - LAPTOP-DL6LJGA8
# Running from : C:\Users\Samson\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support
***** [ Services ] *****
No malicious services found.

***** [ Folders ] *****
Folder Found: C:\Users\Samson\AppData\Local\4C4C4544-1481123135-4E10-8048-B6C04F353632
Folder Found: C:\Users\Samson\AppData\Local\Microsoft\Performance\Monitor
Folder Found: C:\Users\Samson\AppData\Roaming\Kuaizip
Folder Found: C:\Users\Samson\AppData\Roaming\Softlink
Folder Found: C:\ProgramData\Quoteex
Folder Found: C:\ProgramData\quoteex
Folder Found: C:\ProgramData\ytd video downloader
Folder Found: C:\ProgramData\Application Data\Quoteex
Folder Found: C:\ProgramData\Application Data\quoteex
Folder Found: C:\ProgramData\Application Data\ytd video downloader
Folder Found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\B1 Free Archiver
Folder Found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Found: C:\Program Files (x86)\B1 Free Archiver
Folder Found: C:\Program Files (x86)\GreenTree Applications
Folder Found: C:\Program Files (x86)\DPower
Folder Found: C:\uninst
Folder Found: C:\Program Files (x86)\DPower
Folder Found: C:\Users\Samson\AppData\Roaming\GameLauncher
Folder Found: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\chklaanhfefbnpoihckbnefhakgolnmc

***** [ Files ] *****
File Found: C:\END
File Found: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\chrome-extension_fdckocnfhibclnnkifmjbbogcfkbijki_0.localstorage
File Found: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Local Storage\chrome-extension_fdckocnfhibclnnkifmjbbogcfkbijki_0.localstorage

***** [ DLL ] *****
No malicious DLLs found.

***** [ WMI ] *****
No malicious keys found.

***** [ Shortcuts ] *****
No infected shortcut found.

***** [ Scheduled Tasks ] *****
No malicious task found.

***** [ Registry ] *****
Key Found: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
Key Found: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
Key Found: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
Key Found: [x64] HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1
Key Found: HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{176F706B-5175-479C-A3DF-32420F6FB01A}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{38BE2BE8-EB8E-41D1-9D94-3B1697094D47}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{53C267B2-B01D-410F-A4DD-A32962EE55F4}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{8804A543-42D3-4D71-9685-B0243D5526F3}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{A0F322D5-6A13-4CAB-84CF-FABB5690618E}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{AC3E336C-B524-47F0-9AA2-5F67AA056086}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{C68E9BB6-3DBD-4C4B-910B-C5D84A7EBB03}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{F577A1BA-D82D-4BB2-8430-B767285D081D}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}
Key Found: HKLM\SOFTWARE\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}
Key Found: HKLM\SOFTWARE\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}
Key Found: HKLM\SOFTWARE\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}
Key Found: HKLM\SOFTWARE\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}
Key Found: HKLM\SOFTWARE\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}
Key Found: HKU\.DEFAULT\Software\jhtrsq
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\b1.org
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\DriverTuner
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\DriverTuner_Init
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\Installer
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\MICROSOFT\OTUT
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\SNDA
Key Found: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Software\GreenTree Applications
Key Found: HKU\S-1-5-18\Software\jhtrsq
Key Found: HKCU\Software\b1.org
Key Found: HKCU\Software\DriverTuner
Key Found: HKCU\Software\DriverTuner_Init
Key Found: HKCU\Software\Installer
Key Found: HKCU\Software\MICROSOFT\OTUT
Key Found: HKCU\Software\SNDA
Key Found: HKCU\Software\GreenTree Applications
Key Found: HKLM\SOFTWARE\b1.org
Key Found: HKLM\SOFTWARE\SkypeUpdateEx
Key Found: HKLM\SOFTWARE\jhtrsq
Key Found: HKLM\SOFTWARE\WMPNetworkAcSvc
Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Found: [x64] HKCU\Software\b1.org
Key Found: [x64] HKCU\Software\DriverTuner
Key Found: [x64] HKCU\Software\DriverTuner_Init
Key Found: [x64] HKCU\Software\Installer
Key Found: [x64] HKCU\Software\MICROSOFT\OTUT
Key Found: [x64] HKCU\Software\SNDA
Key Found: [x64] HKCU\Software\GreenTree Applications
Key Found: [x64] HKLM\SOFTWARE\b1.org
Key Found: [x64] HKLM\SOFTWARE\jhtrsq
Data Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHCxomeujIo3zSgXIL5jWuOgCjESMi4PwYKp
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\bestpriceninja.com
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\nps.pastaleads.com
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pastaleads.com
Key Found: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\pstatic.bestpriceninja.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\azlyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\computer-repair-f
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\foxi69.tlscdn.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\jobs.trovit.co.in
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\lyricsinbox.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\metrolyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\pc-fix.en.softoni
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\revo-uninstaller.
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.azlyrics.c
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\softonic.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\solvusoft.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\tlscdn.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovilavoro.it
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\trovit.co.in
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\vlc-media-player.
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.azlyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\azlyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\computer-repair-free
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\foxi69.tlscdn.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\jobs.trovit.co.in
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\lyricsinbox.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\metrolyrics.com
Key Found: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Int
Edited by Samson

Share this post


Link to post
Share on other sites

CMD is still blinking sometimes, but not like before.. And one more thing, Windows Defender is turned off by group policy.. My browsers (Chrome and Opera) is not working.. It shows that internet is not connected, but the Edge and IE is working alright.. What should I do?

Share this post


Link to post
Share on other sites

going to move this to the HJT forum.

What antivirus are you using on this computer?, doesn't look like you had one?

Share this post


Link to post
Share on other sites

Let's see if you can download Firefox and we can use this temporarily.

 

https://www.mozilla.org/en-US/firefox/new/

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

 

All tools that I have you download should be placed on the desktop unless otherwise stated. If you are familiar with how to save files to the desktop then you can skip this step.

 

Firefox.JPGMozilla Firefox - Click the "Open Menu" button in the upper right-corner of the browser. Settings.JPG This should open a window for General Options

Scroll down to downloads section, click the Browse button, click on the Desktop, now all downloads should be located on desktop.

 

 

~~~~~~

xlK5Hdb.pngFarbar Recovery Scan Tool (FRST) Scan

  • Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
  • Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
  • Right-Click FRST.exe / FRST64.exe and select AVOiBNU.jpgRun as administrator to run the programme.
  • Click Yes to the disclaimer.
  • Ensure the Addition.txt box is checked.
  • Click the Scan button and let the programme run.
  • Upon completion, click OK, then OK on the Addition.txt pop up screen.
  • Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.

     

Share this post


Link to post
Share on other sites

No, I use windows defender.. Sometimes, I use bitdefender.. I don't have money this time to get it, but sure I'll buy it this time..

Edited by Samson

Share this post


Link to post
Share on other sites

Addition.txt

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2016
Ran by Sam (10-12-2016 12:41:17)
Running from C:\Users\Samson\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-27 15:53:20)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1043693715-1181851726-2221882957-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1043693715-1181851726-2221882957-503 - Limited - Disabled)
Guest (S-1-5-21-1043693715-1181851726-2221882957-501 - Limited - Disabled)
Sam (S-1-5-21-1043693715-1181851726-2221882957-1001 - Administrator - Enabled) => C:\Users\Samson

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 22 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CS (HKLM-x32\...\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}) (Version: CS - Adobe Systems, Inc.)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 4.1 64-bit (HKLM\...\{F7ADB493-B913-4D61-9A63-DA736C20C3F2}) (Version: 4.1.2 - Adobe)
B1 Free Archiver (HKLM-x32\...\B1FreeArchiver) (Version: 0.0.0.0 - Catalina Group Ltd)
BitTorrent (HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\BitTorrent) (Version: 7.9.9.42974 - BitTorrent Inc.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5627.59 - CyberLink Corp.)
Dell Data Vault (Version: 4.3.5.1 - Dell Inc.) Hidden
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.3.6855.61 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.1.14 - Dell)
Dell System Detect (HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\58d94f3ce2c27db0) (Version: 7.6.0.17 - Dell)
DriverIdentifier 5.1 (HKLM-x32\...\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1) (Version: - DriverIdentifier)
F1 2014 (HKLM-x32\...\RjEyMDE0_is1) (Version: 1 - )
GlassFish Server Open Source Edition 4.0 (HKLM\...\nbi-glassfish-mod-4.0.0.89.0) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.75 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Intel® Chipset Device Software (x32 Version: 10.1.1.7 - Intel® Corporation) Hidden
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4300 - Intel Corporation)
Intel® Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.253.0 - Intel Corporation)
Intel® WiDi (HKLM\...\{76FAF7E1-52D0-49F7-A627-E78303F9C7EF}) (Version: 6.0.39.0 - Intel Corporation)
Intel® WiDi Software Asset Manager (x32 Version: 1.1.347 - Intel Corporation) Hidden
Intel® Wireless Bluetooth® (HKLM-x32\...\{DC5673D2-228D-45BC-B9BB-9610CE67DFC0}) (Version: 17.1.1524.1353 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{4544164b-edf0-455c-b150-bed7109d751e}) (Version: 18.11.0 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java SE Development Kit 7 Update 40 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170400}) (Version: 1.7.0.400 - Oracle)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Maxx Audio Installer (x64) (Version: 2.6.6168.9 - Waves Audio Ltd.) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4693.1005 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 50.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 en-US)) (Version: 50.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NetBeans IDE 7.4 (HKLM\...\nbi-nb-base-7.4.0.0.201310111528) (Version: 7.4 - NetBeans.org)
NVIDIA PhysX (HKLM-x32\...\{9530AE42-DAE1-4619-9594-B23487285D17}) (Version: 9.11.1107 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation)
Opera beta 42.0.2393.78 (HKLM-x32\...\Opera 42.0.2393.78) (Version: 42.0.2393.78 - Opera Software)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PhotoInstrument 4.5 (HKLM-x32\...\{5A7A2AED-781B-45DC-AAF6-EAA3A9370C83}}_is1) (Version: - Fatykhov Timur)
Python 2.7.12 (64-bit) (HKLM\...\{9DA28CE5-0AA5-429E-86D8-686ED898C666}) (Version: 2.7.12150 - Python Software Foundation)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.31213 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7544 - Realtek Semiconductor Corp.)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SMADAV version 11.0 (HKLM-x32\...\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1) (Version: 11.0 - Smadsoft)
TorrentsTime Media Player (HKLM\...\TorrentsTime Media Player_is1) (Version: 1.1.6.8 - TorrentsTime)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02D415B0-03A3-4995-8921-BE8D4E9E0747} - System32\Tasks\Opera scheduled Autoupdate 1476690476 => C:\Program Files (x86)\Opera beta\launcher.exe [2016-12-07] (Opera Software)
Task: {1594B5FB-DCD8-4EEF-84B9-5224D97BD3AF} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-09-30] (Dell Inc.)
Task: {161DF4D4-B6DF-41F1-BD35-5D924A5C6473} - System32\Tasks\PCDoctorBackgroundMonitorTask-Retry => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2016-09-13] (PC-Doctor, Inc.)
Task: {476B9EEB-74D5-42EC-A9C7-8A6CA10E0A2A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-10] (Google Inc.)
Task: {48CDD171-440C-44A3-A67B-34E82E664A2B} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2015-06-06] (Intel Corporation)
Task: {4A17DC09-EF3D-49C1-AA10-F0847E6B3B08} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-12-08] (Microsoft Corporation)
Task: {4B6E9525-C7D9-4B7E-BF16-CA621D1AEFC8} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-06-17] (Intel Corporation)
Task: {4CBC8B73-883F-4A4A-9C42-C55DB1987839} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2016-09-13] (PC-Doctor, Inc.)
Task: {729C3E22-25F7-4FAC-A47F-2C3EB4701743} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel® Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-06-17] (Intel Corporation)
Task: {8F1D8DBA-EACD-414E-92AE-5646522FCA85} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-10] (Google Inc.)
Task: {91E22760-AF17-4BC6-8F1D-ECCEE9FA3F82} - System32\Tasks\{FFAD7D26-5D86-4698-8D97-3C1EDE66C8D8} => pcalua.exe -a "C:\Extras\sai games\Need for Speed The Run\Need For Speed The Run.exe" -d "C:\Extras\sai games\Need for Speed The Run"
Task: {9E016BCB-A807-4E8E-A82A-434DB9F0768B} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {A7D75D42-80B4-4E81-9A59-EEB146885E11} - System32\Tasks\WinDriver => slp.exe
Task: {AE76811A-53AD-45C9-B496-5FC3FA68A971} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe
Task: {C581B295-9A6E-4771-8489-C4B90A2E6085} - System32\Tasks\WinVDA => slp.exe
Task: {C6F36D12-4E11-4C45-9CF9-AE82CF38162C} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2016-09-13] (PC-Doctor, Inc.)
Task: {DCE31DB1-4836-4CD8-B131-A8E5DAB76448} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {DF1D4514-3441-492B-A9F2-8759CCEEA20C} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-04-29] (Realtek Semiconductor)
Task: {E85BFF72-38CD-4959-BF21-5280C362250F} - System32\Tasks\smadav => C:\Program Files (x86)\Smadav\SMΔRTP.exe [2016-10-13] (Smadsoft)
Task: {EDACCBDD-5C43-4A21-BB87-48392CF52139} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Samson\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" --disable-quic

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 17:12 - 2016-07-16 17:12 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-10-03 16:09 - 2016-09-15 22:55 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-11-16 08:16 - 2015-11-16 08:16 - 00395368 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-10-03 16:09 - 2016-09-15 22:55 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-08 11:25 - 2016-12-08 11:25 - 01864384 _____ () C:\Users\Samson\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-09-28 10:12 - 2016-09-28 10:12 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-11-10 00:23 - 2016-11-02 16:00 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-10 00:22 - 2016-11-02 15:51 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-10 00:23 - 2016-11-02 15:45 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-10 00:23 - 2016-11-02 15:44 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-10 00:22 - 2016-11-02 15:45 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-10 00:22 - 2016-11-02 15:46 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-10 00:23 - 2016-11-02 15:47 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-03-10 10:46 - 2015-03-11 06:59 - 00454656 _____ () C:\Program Files (x86)\Reliance Wi-Pod\CheckNDISPort.exe
2016-02-13 18:43 - 2015-11-24 01:47 - 03843584 _____ () C:\Program Files (x86)\TorrentsTime Media Player\bin\torrent.dll
2016-12-08 11:25 - 2016-12-08 11:25 - 01383616 _____ () C:\Users\Samson\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll
2016-03-10 10:46 - 2015-03-11 06:58 - 00335872 _____ () C:\Program Files (x86)\Reliance Wi-Pod\Helper.dll
2016-03-10 10:46 - 2015-03-11 06:58 - 00851968 _____ () C:\Program Files (x86)\Reliance Wi-Pod\Runtime.dll
2016-03-10 10:46 - 2015-03-11 06:58 - 00026624 _____ () C:\Program Files (x86)\Reliance Wi-Pod\Threading.dll
2016-03-10 10:46 - 2015-03-04 12:17 - 00971776 _____ () C:\Program Files (x86)\Reliance Wi-Pod\libxml2.dll
2016-03-10 10:46 - 2015-03-04 12:17 - 00290904 _____ () C:\Program Files (x86)\Reliance Wi-Pod\libxslt.dll
2016-03-10 10:46 - 2015-03-04 12:17 - 00073728 _____ () C:\Program Files (x86)\Reliance Wi-Pod\zlib1.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-07-10 16:34 - 2016-12-07 14:31 - 00001006 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Samson\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{4745ae1b-74d6-4179-ac98-e4ef6dd3e4a0}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\StartupFolder: => "WinZip Preloader.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Update Notifier.lnk"
HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\StartupApproved\Run: => "IKIKMOIJ9H"
HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\StartupApproved\Run: => "98E1DZWTFF"
HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\StartupApproved\Run: => "D1SLWN76VW"
HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\StartupApproved\Run: => "Feeder"
HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\...\StartupApproved\Run: => "Mojorojoup"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [uDP Query User{E6E3CBAC-EA2A-4294-9EA0-CC8AF46E2C1F}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe] => C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe
FirewallRules: [TCP Query User{D22E7A06-D361-442A-9BC0-F555A7DE5D72}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe] => C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe
FirewallRules: [uDP Query User{6A693FEB-047B-48D5-BAA7-E0BFB22179D7}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe
FirewallRules: [TCP Query User{DB4F2383-C82F-4AA2-A95C-12BBBBB146CE}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe
FirewallRules: [uDP Query User{3FB83EF7-1B61-45B6-A859-8AD25A9E9199}C:\games\murdered.soul.suspect-kaos\binaries\win64\murdered.exe] => C:\games\murdered.soul.suspect-kaos\binaries\win64\murdered.exe
FirewallRules: [TCP Query User{9DD351E4-20D3-407A-A871-2695668EA999}C:\games\murdered.soul.suspect-kaos\binaries\win64\murdered.exe] => C:\games\murdered.soul.suspect-kaos\binaries\win64\murdered.exe
FirewallRules: [uDP Query User{47C653FB-6FA7-44EA-A69A-518B404D77AB}C:\program files (x86)\r.g. mechanics\enemy front\bin32\enemyfront.exe] => C:\program files (x86)\r.g. mechanics\enemy front\bin32\enemyfront.exe
FirewallRules: [TCP Query User{C1ACEE3C-2191-4BA3-A083-EB0F1FDDD8B5}C:\program files (x86)\r.g. mechanics\enemy front\bin32\enemyfront.exe] => C:\program files (x86)\r.g. mechanics\enemy front\bin32\enemyfront.exe
FirewallRules: [uDP Query User{F7ACE36C-BA5E-4522-8481-9D66305C5855}C:\users\samson\desktop\ipmsg new ver.exe] => C:\users\samson\desktop\ipmsg new ver.exe
FirewallRules: [TCP Query User{DC325447-3286-41B8-AA94-60544EDFE77E}C:\users\samson\desktop\ipmsg new ver.exe] => C:\users\samson\desktop\ipmsg new ver.exe
FirewallRules: [{7DD15DF0-3DD0-49DC-89A0-56BB784EC3AC}] => C:\Program Files (x86)\CyberLink\CyberLink Media Suite\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe
FirewallRules: [{65938AA9-6792-4C1C-B5ED-E9CAB235B29F}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{1515C8BA-CC7A-447F-BCBC-45868D057A85}] => C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{B41AF535-58DE-434C-A9CF-DB215C96AEF9}] => C:\Program Files\Intel Corporation\Intel WiDi\WiDiAppOld.exe
FirewallRules: [{19D0A017-5399-48C5-AB0F-453EA2787076}] => C:\Program Files\Intel Corporation\Intel WiDi\Next\WirelessDisplay.exe
FirewallRules: [{AF40A67E-6E39-4C2E-97F6-5E624E0CEF8C}] => C:\Program Files\Intel Corporation\Intel WiDi\SmartAgentTest.exe
FirewallRules: [{47FF4F18-39B2-427D-A450-4079C77A4C92}] => C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
FirewallRules: [TCP Query User{A1989828-8765-4D70-BEFF-237C0A7AB961}C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe] => C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [uDP Query User{4DC12A61-E699-40BE-A150-754D442BC324}C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe] => C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [{61F4A9E0-B217-4DB2-945E-1FCFCD15B35F}] => C:\Program Files (x86)\TorrentsTime Media Player\bin\chromecast\node.exe
FirewallRules: [{0A2C5BB7-F0A3-4802-827C-048D5828405A}] => C:\Program Files (x86)\TorrentsTime Media Player\bin\chromecast\node.exe
FirewallRules: [{9FFB5890-9F78-423A-A4FF-6EE4D55D6EC1}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{BC49DC96-E455-448B-9F3E-308B56A0DF26}C:\program files (x86)\battlefield 4\bf4.exe] => C:\program files (x86)\battlefield 4\bf4.exe
FirewallRules: [uDP Query User{D231069E-33EA-4B54-A3CD-D5C889FD31F0}C:\program files (x86)\battlefield 4\bf4.exe] => C:\program files (x86)\battlefield 4\bf4.exe
FirewallRules: [{5BBFB31D-18FA-41C7-A268-5C841517FD71}] => C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
FirewallRules: [TCP Query User{E5322061-65D6-4F5C-982D-247B733F35B5}C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe] => C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [uDP Query User{104B9AC1-28B7-4099-8AE6-63CA1B18D624}C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe] => C:\users\samson\appdata\roaming\bittorrent\bittorrent.exe
FirewallRules: [{3BEEF2E7-49A0-46CD-B551-9BB8D64DDC7E}] => C:\ProgramData\Microsoft\Network\Dsq\network\sysnetwk.exe
FirewallRules: [{35696B18-3DAC-4F0D-AEAA-4C61D48C2A0D}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D4ADB908-ACD9-4D41-88D9-A7191B7CEE2D}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{31AABD44-02F7-44C7-BDA6-6D255A0D4647}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: HID-compliant touch screen
Description: HID-compliant touch screen
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standard system devices)
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/10/2016 11:48:58 AM) (Source: ESENT) (EventID: 489) (User: )
Description: firefox (4648) An attempt to open the file "C:\Users\Samson\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ". The open file operation will fail with error -1032 (0xfffffbf8).

Error: (12/10/2016 11:17:49 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (12/09/2016 02:56:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP-DL6LJGA8)
Description: Package Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy+CortanaUI was terminated because it took too long to suspend.

Error: (12/09/2016 11:46:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Music.UI.exe, version: 10.16102.1034.0, time stamp: 0x582f5ce3
Faulting module name: Music.UI.exe, version: 10.16102.1034.0, time stamp: 0x582f5ce3
Exception code: 0x80000003
Fault offset: 0x0000000000046737
Faulting process id: 0x4a8
Faulting application start time: 0x01d251e25cd34369
Faulting application path: C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16102.10341.0_x64__8wekyb3d8bbwe\Music.UI.exe
Faulting module path: C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16102.10341.0_x64__8wekyb3d8bbwe\Music.UI.exe
Report Id: 7bb4c61f-c9fd-403b-8a45-b75fd31081ea
Faulting package full name: Microsoft.ZuneMusic_10.16102.10341.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: Microsoft.ZuneMusic

Error: (12/09/2016 11:20:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AdwCleaner.exe, version: 6.0.4.0, time stamp: 0x5841ceb4
Faulting module name: AdwCleaner.exe, version: 6.0.4.0, time stamp: 0x5841ceb4
Exception code: 0xc0000005
Fault offset: 0x00020fea
Faulting process id: 0x2544
Faulting application start time: 0x01d251dfd56300b5
Faulting application path: C:\Users\Samson\Downloads\AdwCleaner.exe
Faulting module path: C:\Users\Samson\Downloads\AdwCleaner.exe
Report Id: 5acc35f4-2b8e-4520-b9be-4654af17e76a
Faulting package full name:
Faulting package-relative application ID:

Error: (12/09/2016 09:50:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: CompatTelRunner.exe, version: 10.0.14913.1002, time stamp: 0x57d1070d
Faulting module name: devinv.dll, version: 10.0.14913.1002, time stamp: 0x57d10950
Exception code: 0xc0000005
Fault offset: 0x0000000000023c00
Faulting process id: 0x13c4
Faulting application start time: 0x01d251cce3b40a09
Faulting application path: C:\WINDOWS\system32\CompatTelRunner.exe
Faulting module path: C:\WINDOWS\system32\devinv.dll
Report Id: 4e611d9d-f7f1-4350-a6e1-5a3348460865
Faulting package full name:
Faulting package-relative application ID:

Error: (12/09/2016 12:51:27 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data section contains the Windows error code.

Error: (12/09/2016 12:51:23 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.

Error: (12/08/2016 07:02:36 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-DL6LJGA8)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (12/08/2016 06:56:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-DL6LJGA8)
Description: Activation of app Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.


System errors:
=============
Error: (12/10/2016 12:02:48 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (12/10/2016 11:54:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Cegoe service failed to start due to the following error:
The system cannot find the file specified.

Error: (12/10/2016 11:54:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The wscsvc service failed to start due to the following error:
The account specified for this service is different from the account specified for other services running in the same process.

Error: (12/10/2016 11:14:19 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (12/10/2016 02:02:00 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (12/10/2016 02:01:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The wscsvc service failed to start due to the following error:
The account specified for this service is different from the account specified for other services running in the same process.

Error: (12/10/2016 02:01:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Cegoe service failed to start due to the following error:
The system cannot find the file specified.

Error: (12/09/2016 10:27:55 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (12/09/2016 10:15:08 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (12/09/2016 10:13:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The wscsvc service failed to start due to the following error:
The account specified for this service is different from the account specified for other services running in the same process.


CodeIntegrity:
===================================
Date: 2016-12-09 22:11:43.681
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume3\Program Files\Windows Defender\NisSrv.exe that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-12-09 22:11:39.859
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-12-09 22:07:28.979
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-12-02 21:04:35.935
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-19 15:17:39.467
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-06 16:12:54.163
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-10-31 15:04:08.177
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-10-18 23:31:48.526
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-10-17 21:31:38.804
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-10-13 20:32:41.623
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Processor: Intel® Core i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 41%
Total physical RAM: 8108.61 MB
Available physical RAM: 4768.67 MB
Total Virtual: 30508.61 MB
Available Virtual: 27012.39 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.71 GB) (Free:53.81 GB) NTFS
Drive d: (Local Disk) (Fixed) (Total:200 GB) (Free:73.16 GB) NTFS
Drive e: (Local Disk) (Fixed) (Total:150 GB) (Free:28.08 GB) NTFS
Drive f: (Local Disk) (Fixed) (Total:114.36 GB) (Free:21.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 341B5912)

Partition: GPT.

==================== End of Addition.txt ============================

 

 

 

FRST.txt has almost 63k lines.. Can i upload the files here?

Share this post


Link to post
Share on other sites

 

FRST.txt has almost 63k lines.. Can i upload the files here?

I need to see that other log as well, make multiple post if needed, or if it will allow you to attach it as a file.

Share this post


Link to post
Share on other sites

Wow, alot to cover here.

 

How many antivirus programs do you have on the computer?

 

C:\Program Files (x86)\Avira

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMADAV Antivirus

C:\ProgramData\AVAST Software

 

Please downsize to just 1.

~~~

 

Uninstall

Java SE Development Kit 7 Update 40

 

~~

 

I cannot find info on these (their in unicode), you know what they might be?

 

C:\WINDOWS\潰睴崁o嵸o᜸3

C:\WINDOWS\峈āż

C:\WINDOWS\岈o尼o㌎睶屼oü3

C:\WINDOWS\尸o寬o㌎睶尬oü3

C:\WINDOWS\ꪑ⁺崄o᜺睳嵸o崰o峰o峬o᡼睳

C:\WINDOWS\ì

C:\WINDOWS\3崰o

C:\WINDOWS\3峠o

C:\WINDOWS\᜸3

C:\WINDOWS\᳞睳岔o崰oޠ

C:\WINDOWS\巬oៀ睳

C:\Program Files\TR6EEEKWWF

 

~~~~

 

goGMWSt.gifP2P Warning

I see you have peer-to-peer (P2P) file sharing software installed on your computer (BitTorrent). I advise you avoid P2P file sharing programmes; they are a security risk which can make your computer susceptible to malware. File sharing networks are thoroughly infected and infested with malware - worms, backdoor Trojans, IRCBots, and rootkits propagate via P2P file sharing networks, gaming, and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans, and spyware. The best way to reduce the risk of infection is to avoid these types of web sites and not use P2P applications. Please read the following articles for more information.

  • Risks of File-Sharing Technology
  • P2P Software User Advisories
  • More malware is traveling on P2P networks these days
  • Your P2P software can be removed by following the instructions below.
  • Press the Windows Key pdKOQKY.png + r on your keyboard at the same time. Type appwiz.cpl and click OK.
  • Search for the aforementioned programme(s), right-click and click Uninstall.
  • If you choose not to, please refrain from using the programme(s) during this process.

     

    Your machine has many torrents, this is going to kill your machine since most are posted with live infections.

     

    ~~~~~

     

    Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:

    To do this highlight the contents of the box and right click on it and select copy.

    Paste this into the open notepad. save it to the Desktop as fixlist.txt

    NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

    It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

     

     

    FRSTfix.JPG

     

     

    start

    CreateRestorePoint:

    CloseProcesses:

    Task: {DCE31DB1-4836-4CD8-B131-A8E5DAB76448} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION

    ShortcutWithArgument: C:\Users\Samson\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" --disable-quic

    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

    SearchScopes: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001 -> {40C54957-4028-43E2-8047-F02C6A57D31B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1

    SearchScopes: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001 -> {9891125E-B064-47C2-9E2E-BC1C79AE9BA0} URL =

    CHR Profile: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-12-07] <==== ATTENTION

    CHR Extension: (No Name) - C:\Users\Samson\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk [2016-10-13]

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - hxxps://clients2.google.com/service/update2/crx

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - hxxps://clients2.google.com/service/update2/crx

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - hxxps://clients2.google.com/service/update2/crx

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - hxxps://clients2.google.com/service/update2/crx

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gccplojjfpdbeidicabkegekmcplafee] - hxxps://clients2.google.com/service/update2/crx

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hkdmihdclhhoghpojiifklmegjnjkdlh] - hxxps://clients2.google.com/service/update2/crx

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ikdlehiegikpggplngbmpdgnidekfmjn] - hxxps://clients2.google.com/service/update2/crx

    CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pgoackgjjkpbkjoomkklkofbhpkbeboc] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [gccplojjfpdbeidicabkegekmcplafee] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [hkdmihdclhhoghpojiifklmegjnjkdlh] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [ikdlehiegikpggplngbmpdgnidekfmjn] - hxxps://clients2.google.com/service/update2/crx

    CHR HKLM-x32\...\Chrome\Extension: [pgoackgjjkpbkjoomkklkofbhpkbeboc] - hxxps://clients2.google.com/service/update2/crx

    S2 Cegoe; "C:\Users\Samson\AppData\Roaming\Xeeedxi\Xeeedxi.exe" -cms [X]

    C:\Users\Samson\AppData\Roaming\Xeeedxi

    R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

    S3 NAVENG; \??\C:\Program Files (x86)\Norton Security with Backup\NortonData\22.8.0.50\Definitions\SDSDefs\20161012.008\ENG64.SYS [X]

    S3 NAVEX15; \??\C:\Program Files (x86)\Norton Security with Backup\NortonData\22.8.0.50\Definitions\SDSDefs\20161012.008\EX64.SYS [X]

    C:\Program Files (x86)\SmartPCFixer

    C:\WINDOWS\SysWOW64\kz.exe

    C:\Users\Samson\AppData\Local\Temp\HD-LibraryHandler.dll

    C:\Users\Samson\AppData\Local\Temp\HD-Logger-Native.dll

    C:\Users\Samson\AppData\Local\Temp\ieframe.dll

    C:\Users\Samson\AppData\Local\Temp\jre-8u111-windows-au.exe

    C:\Users\Samson\AppData\Local\Temp\libeay32.dll

    C:\Users\Samson\AppData\Local\Temp\msvcr120.dll

    C:\Users\Samson\AppData\Local\Temp\setup_54CB.exe

    C:\Users\Samson\AppData\Local\Temp\setup_72A2.exe

    C:\Users\Samson\AppData\Local\Temp\setup_DF35.exe

    C:\Users\Samson\AppData\Local\Temp\SkypeSetup.exe

    C:\Users\Samson\AppData\Local\Temp\sqlite3.dll

    C:\Users\Samson\AppData\Local\Temp\10.tmp.exe

    C:\Users\Samson\AppData\Local\Temp\100.tmp.exe

    C:\Users\Samson\AppData\Local\Temp\1000.tmp.exe

    CMD: ipconfig /flushdns

    CMD: netsh winsock reset all

    CMD: netsh int ipv4 reset

    CMD: netsh int ipv6 reset

    EmptyTemp:

    Hosts:

    End

    Open FRST/FRST64 and press the > Fix < button just once and wait.

    If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

    When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

    ~~~~~~~~~~~~~~~~~~~~~~~

     

    See if you can locate

    C:\Users\Samson\AppData\Local\Temp

    There is a ridiculous amount of temp files inside. See if you can delete those, not the folder itself just the temp files inside.

     

    ~~~~~~~~~~~~~~~~~~~~~

     

    Please locate and delete the version of AdwCleaner you have on desktop.

     

    we'll download a fresh copy

     

    BY4dvz9.pngAdwCleaner

  • Please download AdwCleaner and save the file to your Desktop.

    In order to use AdwCleaner, you have to agree the Eula:

  • Right-click AdwCleaner.exe and select AVOiBNU.jpg Run as administrator to run the programme.
  • Follow the prompts.
  • Click A49sxPr.pngScan.
  • Upon completion, click 6cyn5v5.pngLogfile. A log (AdwCleaner[s1].txt) will open. Briefly check the log for anything you know to be legitimate.
  • Return to AdwCleaner. Ensure anything you know to be legitimate does not have a checkmark under the corresponding tab.
  • Click MqHawIb.pngClean.
  • Follow the prompts and allow your computer to reboot.
  • After the reboot, a log (AdwCleaner[C1].txt) will open. Copy the contents of the log and paste in your next reply.
  • -- File and folder backups are made for items removed using this programme. Should a legitimate file or folder be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the item. Please do not overly concern yourself with the contents of AdwCleaner[C1].txt.

     

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

     

    Please download Junkware Removal Tool

    or from here http://downloads.malwarebytes.org/file/jrt

    to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
  • ~~~

    please post

    Fixlog.txt

    AdwCleaner[C1].txt

    JRT.txt

     

     

     

Share this post


Link to post
Share on other sites

Let's continue.

 

Other questions can be answered later.

 

I can remove remnants of the other antivirus programs later.

Share this post


Link to post
Share on other sites

Hi,

Here are the things you asked.

 

Fixlog :

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 07-12-2016
Ran by Sam (10-12-2016 22:05:56) Run:1
Running from C:\Users\Samson\Desktop
Loaded Profiles: Sam (Available Profiles: Sam)
Boot Mode: Normal
==============================================

fixlist content:
*****************
start
CreateRestorePoint:
CloseProcesses:
Task: {DCE31DB1-4836-4CD8-B131-A8E5DAB76448} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
ShortcutWithArgument: C:\Users\Samson\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" --disable-quic
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
SearchScopes: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001 -> {40C54957-4028-43E2-8047-F02C6A57D31B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-1043693715-1181851726-2221882957-1001 -> {9891125E-B064-47C2-9E2E-BC1C79AE9BA0} URL =
CHR Profile: C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-12-07] <==== ATTENTION
CHR Extension: (No Name) - C:\Users\Samson\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk [2016-10-13]
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gccplojjfpdbeidicabkegekmcplafee] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hkdmihdclhhoghpojiifklmegjnjkdlh] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ikdlehiegikpggplngbmpdgnidekfmjn] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pgoackgjjkpbkjoomkklkofbhpkbeboc] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [akhdblbjebmbllhinponghfmaekhlhob] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cckdoammdligdedbakcgnmegjljgipjb] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clmghkfhfkcfhpccgbafbailibgogkbi] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eoepodkgpakekgncgnfnijcippobokhp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gccplojjfpdbeidicabkegekmcplafee] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [hkdmihdclhhoghpojiifklmegjnjkdlh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ikdlehiegikpggplngbmpdgnidekfmjn] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pgoackgjjkpbkjoomkklkofbhpkbeboc] - hxxps://clients2.google.com/service/update2/crx
S2 Cegoe; "C:\Users\Samson\AppData\Roaming\Xeeedxi\Xeeedxi.exe" -cms [X]
C:\Users\Samson\AppData\Roaming\Xeeedxi
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S3 NAVENG; \??\C:\Program Files (x86)\Norton Security with Backup\NortonData\22.8.0.50\Definitions\SDSDefs\20161012.008\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton Security with Backup\NortonData\22.8.0.50\Definitions\SDSDefs\20161012.008\EX64.SYS [X]
C:\Program Files (x86)\SmartPCFixer
C:\WINDOWS\SysWOW64\kz.exe
C:\Users\Samson\AppData\Local\Temp\HD-LibraryHandler.dll
C:\Users\Samson\AppData\Local\Temp\HD-Logger-Native.dll
C:\Users\Samson\AppData\Local\Temp\ieframe.dll
C:\Users\Samson\AppData\Local\Temp\jre-8u111-windows-au.exe
C:\Users\Samson\AppData\Local\Temp\libeay32.dll
C:\Users\Samson\AppData\Local\Temp\msvcr120.dll
C:\Users\Samson\AppData\Local\Temp\setup_54CB.exe
C:\Users\Samson\AppData\Local\Temp\setup_72A2.exe
C:\Users\Samson\AppData\Local\Temp\setup_DF35.exe
C:\Users\Samson\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Samson\AppData\Local\Temp\sqlite3.dll
C:\Users\Samson\AppData\Local\Temp\10.tmp.exe
C:\Users\Samson\AppData\Local\Temp\100.tmp.exe
C:\Users\Samson\AppData\Local\Temp\1000.tmp.exe
CMD: ipconfig /flushdns
CMD: netsh winsock reset all
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
Hosts:
End
*****************

Restore point was successfully created.
Processes closed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DCE31DB1-4836-4CD8-B131-A8E5DAB76448}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DCE31DB1-4836-4CD8-B131-A8E5DAB76448}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => key removed successfully
C:\Users\Samson\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk => Shortcut argument removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => key removed successfully
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{40C54957-4028-43E2-8047-F02C6A57D31B}" => key removed successfully
HKCR\CLSID\{40C54957-4028-43E2-8047-F02C6A57D31B} => key not found.
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9891125E-B064-47C2-9E2E-BC1C79AE9BA0}" => key removed successfully
HKCR\CLSID\{9891125E-B064-47C2-9E2E-BC1C79AE9BA0} => key not found.
C:\Users\Samson\AppData\Local\Google\Chrome\User Data\ChromeDefaultData => moved successfully
C:\Users\Samson\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk => moved successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\akhdblbjebmbllhinponghfmaekhlhob" => key removed successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\cckdoammdligdedbakcgnmegjljgipjb" => key removed successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\clmghkfhfkcfhpccgbafbailibgogkbi" => key removed successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\eoepodkgpakekgncgnfnijcippobokhp" => key removed successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\gccplojjfpdbeidicabkegekmcplafee" => key removed successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\hkdmihdclhhoghpojiifklmegjnjkdlh" => key removed successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\ikdlehiegikpggplngbmpdgnidekfmjn" => key removed successfully
"HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\Google\Chrome\Extensions\pgoackgjjkpbkjoomkklkofbhpkbeboc" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\akhdblbjebmbllhinponghfmaekhlhob" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cckdoammdligdedbakcgnmegjljgipjb" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\clmghkfhfkcfhpccgbafbailibgogkbi" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eoepodkgpakekgncgnfnijcippobokhp" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gccplojjfpdbeidicabkegekmcplafee" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hkdmihdclhhoghpojiifklmegjnjkdlh" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ikdlehiegikpggplngbmpdgnidekfmjn" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgoackgjjkpbkjoomkklkofbhpkbeboc" => key removed successfully
Cegoe => service removed successfully
C:\Users\Samson\AppData\Roaming\Xeeedxi => moved successfully
ibtsiva => service removed successfully
NAVENG => service removed successfully
NAVEX15 => service removed successfully
C:\Program Files (x86)\SmartPCFixer => moved successfully
C:\WINDOWS\SysWOW64\kz.exe => moved successfully
"C:\Users\Samson\AppData\Local\Temp\HD-LibraryHandler.dll" => not found.
"C:\Users\Samson\AppData\Local\Temp\HD-Logger-Native.dll" => not found.
"C:\Users\Samson\AppData\Local\Temp\ieframe.dll" => not found.
"C:\Users\Samson\AppData\Local\Temp\jre-8u111-windows-au.exe" => not found.
"C:\Users\Samson\AppData\Local\Temp\libeay32.dll" => not found.
"C:\Users\Samson\AppData\Local\Temp\msvcr120.dll" => not found.
"C:\Users\Samson\AppData\Local\Temp\setup_54CB.exe" => not found.
"C:\Users\Samson\AppData\Local\Temp\setup_72A2.exe" => not found.
"C:\Users\Samson\AppData\Local\Temp\setup_DF35.exe" => not found.
"C:\Users\Samson\AppData\Local\Temp\SkypeSetup.exe" => not found.
"C:\Users\Samson\AppData\Local\Temp\sqlite3.dll" => not found.
"C:\Users\Samson\AppData\Local\Temp\10.tmp.exe" => not found.
"C:\Users\Samson\AppData\Local\Temp\100.tmp.exe" => not found.
"C:\Users\Samson\AppData\Local\Temp\1000.tmp.exe" => not found.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


========= netsh winsock reset all =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= End of CMD: =========


========= netsh int ipv4 reset =========

Resetting Global, OK!
Resetting Interface, OK!
Resetting Unicast Address, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting Route, OK!
Resetting , failed.
Access is denied.

Resetting , OK!
Restart the computer to complete this action.


========= End of CMD: =========


========= netsh int ipv6 reset =========

Resetting Interface, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting , failed.
Access is denied.

Resetting , OK!
Resetting , OK!
Restart the computer to complete this action.


========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 461555637 B
Java, Flash, Steam htmlcache => 55277 B
Windows/system/drivers => 0 B
Edge => 192241754 B
Chrome => 16739532 B
Firefox => 266384211 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 19758 B
NetworkService => 329540 B
Samson => 11516918 B

RecycleBin => 1632239846 B
EmptyTemp: => 2.4 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 22:10:20 ====

 

 

AdwCleaner :

 

# AdwCleaner v6.040 - Logfile created 10/12/2016 at 22:29:08
# Updated on 02/12/2016 by Malwarebytes
# Database : 2016-12-02.1 [Local]
# Operating System : Windows 10 Home (X64)
# Username : Sam - LAPTOP-DL6LJGA8
# Running from : C:\Users\Samson\Desktop\AdwCleaner.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Folders ] *****

[#] Folder deleted on reboot: C:\Users\Samson\AppData\Local\Microsoft\Performance\Monitor


***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****

[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
[-] Key deleted: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
[#] Key deleted on reboot: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com


***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2685 Bytes] - [10/12/2016 22:29:08]
C:\AdwCleaner\AdwCleaner[s0].txt - [2924 Bytes] - [10/12/2016 22:26:31]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2831 Bytes] ##########

 

JRT :

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 10 Home x64
Ran by Sam (Administrator) on 10-12-2016 at 23:10:19.84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 14

Successfully deleted: C:\ProgramData\1473003670.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1481112663.bdinstall.bin (File)
Successfully deleted: C:\ProgramData\1481124870.bdinstall.bin (File)
Successfully deleted: C:\Users\Samson\AppData\Local\{B5F70934-5E12-42d2-882D-62D42EA1FA67} (Empty Folder)
Successfully deleted: C:\Users\Samson\Appdata\LocalLow\company (Folder)
Successfully deleted: C:\Users\Samson\Documents\add-in express (Folder)
Successfully deleted: C:\WINDOWS\fiddlercore4.dll (File)
Successfully deleted: C:\WINDOWS\system32\Tasks\PCDEventLauncherTask (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\PCDoctorBackgroundMonitorTask-Retry (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\PCDoctorBackgroundMonitorTask (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\WinDriver (Task)
Successfully deleted: C:\WINDOWS\prefetch\DRIVERIDENTIFIER.EXE-3EF218FC.pf (File)
Successfully deleted: C:\WINDOWS\prefetch\DRIVERTUNER.EXE-B15988C2.pf (File)
Successfully deleted: C:\WINDOWS\prefetch\DRIVERTUNER_SETUP.TMP-014089E5.pf (File)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10-12-2016 at 23:12:13.40
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Share this post


Link to post
Share on other sites

Looks like slowly but surely.....

 

You should see some improvement by now?

 

Let's update Malwarebytes Anti-Malware and run a new scan.

 

Open Malwarebytes Anti-Malware

  • On the Dashboard click on Update Now
  • Go to the Setting Tab
  • Under Setting go to Detection and Protection
  • Under PUP and PUM make sure both are set to show Treat Detections as Malware
  • Go to Advanced setting and make sure Automatically Quarantine Detected Items is checked
  • Then on the Dashboard click on Scan
  • Make sure to select THREAT SCAN
  • Then click on Scan
  • Note: You may see the following message, "Could not load DDA driver". Click Yes, allow your PC to reboot and continue afterwards.
  • If threats are detected, click Remove Selected. If you are prompted to reboot, click Yes.
  • Upon completion of the scan (or after the reboot), click the History tab.
  • Click Application Logs, followed by the first Scan Log.
  • Click Export, followed by Copy to Clipboard. Paste the log in your next reply.

     

~~~~~

 

Please download Emsisoft Emergency Kit and save it to your desktop.

Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop.

  • Leave all settings as they are and click the Extract button at the bottom.
  • A folder named EEK will be created in the root of the drive (usually c:\).
  • After extraction please double-click on the new Start Emsisoft Emergency Kit icon on your desktop.
  • The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates.
  • Please click Yes so that it downloads the latest database updates.
  • When the update process is complete, a new button will appear in the lower-left corner that says Back. Click on this button to return to the Overview screen.
  • Click on Scan to be taken to the scan options.
  • If you are asked if you want the scanner to scan for Potentially Unwanted Programs, then click Yes.
  • Click on the Malware Scan button to start the scan.
  • When the scan is completed click the Quarantine selected objects button. Note, this option is only available if malicious objects were detected during the scan.
  • When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad.
  • Please save the log in Notepad on your desktop, and copy it to your next reply.
  • When you close Emsisoft Emergency Kit, it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.

Share this post


Link to post
Share on other sites

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 11-12-2016
Scan Time: 11:08
Logfile:
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.12.11.02
Rootkit Database: v2016.11.20.01
License: Trial
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 10
CPU: x64
File System: NTFS
User: Sam

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 304155
Time Elapsed: 24 min, 52 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 1
PUP.Optional.VulnerableDellSystemDetect, HKU\S-1-5-21-1043693715-1181851726-2221882957-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|DellSystemDetect, C:\Users\Samson\AppData\Local\Apps\2.0\2KRD71CW.65W\82P8WH81.08D\dell..tion_6d0a76327dca4869_0007.000b_df227eeaae3cac0d\DellSystemDetect.exe 4zZn5oeQk9WMM5ZBt7fsYA==, Quarantined, [da34b82ef2a896a0e52571f118ebe719]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Share this post


Link to post
Share on other sites

Emsisoft Emergency Kit - Version 12.0
Last update: 11-12-2016 12:17:27
User account: LAPTOP-DL6LJGA8\Sam
Computer name: LAPTOP-DL6LJGA8
OS version: Windows 10x64

Scan settings:

Scan type: Malware Scan
Objects: Rootkits, Memory, Traces, Files

Detect PUPs: On
Scan archives: Off
ADS Scan: On
File extension filter: Off
Direct disk access: Off

Scan start: 11-12-2016 12:18:36
C:\Users\Samson\Downloads\TheTruthSpy_7.9.apk -> AndroidManifest.xml detected: Android.Monitor.Agent.A (B) [krnl.xmd]

Scanned 82637
Found 1

Scan end: 11-12-2016 12:26:50
Scan time: 0:08:14

C:\Users\Samson\Downloads\TheTruthSpy_7.9.apk Android.Monitor.Agent.A (B)

Quarantined 1

Share this post


Link to post
Share on other sites

Yea, it is working well. But, i can't access windows defender. It says, it is turned off by group policy.

Edited by Samson

Share this post


Link to post
Share on other sites

Yea, it is working well. But, i can't access windows defender. It says, it is turned off by group policy.

Yes, by design it's not going to run because you also have

Smadav AV Antivirus

A simple security software solution that provides real-time antivirus protection

By design to stop interference and allow tools to run, Microsoft created the tool to do this.

And there were a few remnant files from other antivirus applications on your machine but those are not enough to stop Windows Defender.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.
Sign in to follow this  

×
×
  • Create New...