Malwarebytes Anti-Malware (Trial) 1.70.0.1100 www.malwarebytes.org Database version: v2013.01.10.

02 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Alexandra Maria :: ALEXANDRA [administrator] Protection: Enabled 1/10/2013 11:32:09 AM MBAM-log-2013-01-10 (11-54-26).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Ext ra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 239200 Time elapsed: 18 minute(s), 54 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 3 HKCU\SOFTWARE\CROSSRIDER (Adware.GamePlayLab) -> No action taken. HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 APPS (PUP.CrossFire.SA) -> No actio n taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e 6-368b0023d831} (PUP.Adware.RelevantKnowledge) -> No action taken. Registry Values Detected: 2 HKCU\Software\Crossrider|215AppVerifier (Adware.GamePlayLab) -> Data: f192fcd155 a1cd9f806ec161ef2d8ed9 -> No action taken. HKCU\Software\InstalledBrowserExtensions\215 Apps|4479 (PUP.CrossFire.SA) -> Dat a: Giant Savings -> No action taken. Registry Data Items Detected: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.MyWebsearch) -> B ad: (http://home.mywebsearch.com/index.jhtml?n=77DE8857&p2=^HJ^xdm073^YY^ro&ptb= 77732285-ABC2-4E9E-B48D-9DE0DA2FBEA8&si=pconverter) Good: (http://www.google.com ) -> No action taken. Folders Detected: 2 C:\Program Files\RelevantKnowledge (PUP.Spyware.MarketScore) -> No action taken. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge (PUP.S pyware.MarketScore) -> No action taken. Files Detected: 16 C:\Documents and Settings\Alexandra Maria\My Documents\Downloads\installer_adobe _photoshop.exe (PUP.BundleInstaller.BEN) -> No action taken. C:\Documents and Settings\Alexandra Maria\Local Settings\Temp\Rar$EXa0.385\Keyma ker\w00t.exe (Dont.Steal.Our.Software) -> No action taken. C:\Documents and Settings\Alexandra Maria\Local Settings\TempDIR\BetterInstaller .exe (PUP.BundleInstaller.Somoto) -> No action taken. C:\Program Files\RelevantKnowledge\ncncf.dat (PUP.Spyware.MarketScore) -> No act ion taken.

C:\Program Files\RelevantKnowledge\nscf.dat (PUP.Spyware.MarketScore) -> No acti on taken. C:\Program Files\RelevantKnowledge\rlls.dll (PUP.Spyware.MarketScore) -> No acti on taken. C:\Program Files\RelevantKnowledge\rlls64.dll (PUP.Spyware.MarketScore) -> No ac tion taken. C:\Program Files\RelevantKnowledge\rloci.bin (PUP.Spyware.MarketScore) -> No act ion taken. C:\Program Files\RelevantKnowledge\rlservice.exe (PUP.Spyware.MarketScore) -> No action taken. C:\Program Files\RelevantKnowledge\rlvknlg.exe (PUP.Spyware.MarketScore) -> No a ction taken. C:\Program Files\RelevantKnowledge\rlvknlg64.exe (PUP.Spyware.MarketScore) -> No action taken. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk (PUP.Spyware.MarketScore) -> No action taken. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Member of GRID - Goodware Repository Information Database.lnk (PUP.Spyware.MarketScor e) -> No action taken. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Privac y Policy and User License Agreement.lnk (PUP.Spyware.MarketScore) -> No action t aken. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Suppor t.lnk (PUP.Spyware.MarketScore) -> No action taken. C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Uninst all Instructions.lnk (PUP.Spyware.MarketScore) -> No action taken. (end)