6

Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 14.09.2015
Scan Time: 23:11:55
Logfile: 6.txt
Administrator: Yes
Version: 2.1.8.1057
Malware Database: v2015.09.14.05
Rootkit Database: v2015.08.16.01
License: Free
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: alina
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 305008
Time Elapsed: 32 min, 24 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled
Processes: 2
PUP.Optional.MultiPlug, C:\Documents and Settings\All Users\Application Data\{bf
891449-60a7-3bd9-bf89-9144960a5125}\Download Autocom 2008 realese 2 Torrent - Ki
ckassTorrents.exe, 1176, , [fdd0e44bc8c3c76ff982fa820ff23ec2]
PUP.Optional.ServiceRNDM, C:\Program Files\Nutty Search\Nutty Search.exe, 1316,
, [8e3f022d93f8e84e70fc05b9db261be5]
Modules: 0
(No malicious items detected)
Registry Keys: 37
PUP.Optional.ServiceRNDM, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Nutty Search, ,
[8e3f022d93f8e84e70fc05b9db261be5],
PUP.Optional.WProtectManager, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WdsManPro,
, [99342f005f2c64d2f9bcc4dddc293bc5],
PUP.Optional.MultiPlug, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003_Class
es\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}, , [0ac378b70b8083b35088469529d9
9967],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\CLSID\{C82C119A-9702-4CD6-9AEA
-F70A099E9F05}, , [e4e9052aec9f1a1cd137f1cce81931cf],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\PC82C119A_9702_4CD6_9AEA_F70A0
99E9F05_.PC82C119A_9702_4CD6_9AEA_F70A099E9F05_, , [e4e9052aec9f1a1cd137f1cce819
31cf],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\PC82C119A_9702_4CD6_9AEA_F70A0
99E9F05_.PC82C119A_9702_4CD6_9AEA_F70A099E9F05_.9, , [e4e9052aec9f1a1cd137f1cce8
1931cf],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\P
REAPPROVED\{C82C119A-9702-4CD6-9AEA-F70A099E9F05}, , [e4e9052aec9f1a1cd137f1cce8
1931cf],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\CLSID\{A72F6012-DC20-45D5-B72F
-8E382F535B6A}, , [5b7252dd5239ae88dc72a4115ea34bb5],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\PA72F6012_DC20_45D5_B72F_8E382
F535B6A_.PA72F6012_DC20_45D5_B72F_8E382F535B6A_, , [5b7252dd5239ae88dc72a4115ea3
4bb5],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\PA72F6012_DC20_45D5_B72F_8E382
F535B6A_.PA72F6012_DC20_45D5_B72F_8E382F535B6A_.9, , [5b7252dd5239ae88dc72a4115e
a34bb5],
REAPPROVED\{A72F6012-DC20-45D5-B72F-8E382F535B6A}, , [5b7252dd5239ae88dc72a4115e
a34bb5],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\CLSID\{B893D4D0-879F-41B9-9622
-82ACAB3E7F3A}, , [ede0022de1aa44f2d27cebca42bfd22e],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\PB893D4D0_879F_41B9_9622_82ACA
B3E7F3A_.PB893D4D0_879F_41B9_9622_82ACAB3E7F3A_, , [ede0022de1aa44f2d27cebca42bf
d22e],
PUP.Optional.MultiPlug.BHO, HKLM\SOFTWARE\CLASSES\PB893D4D0_879F_41B9_9622_82ACA
B3E7F3A_.PB893D4D0_879F_41B9_9622_82ACAB3E7F3A_.9, , [ede0022de1aa44f2d27cebca42
bfd22e],
REAPPROVED\{B893D4D0-879F-41B9-9622-82ACAB3E7F3A}, , [ede0022de1aa44f2d27cebca42
bfd22e],
PUP.Optional.DigiCoupon, HKLM\SOFTWARE\CLASSES\TYPELIB\{9A44AB5B-B488-42A3-8D2B7A0DA772F3A4}, , [fad3ce617c0f69cdc611cec03cc8619f],
PUP.Optional.DigiCoupon, HKLM\SOFTWARE\CLASSES\INTERFACE\{2B95962A-90B8-4C79-BDD
4-3971D685FED9}, , [fad3ce617c0f69cdc611cec03cc8619f],
PUP.Optional.DigiCoupon, HKLM\SOFTWARE\CLASSES\INTERFACE\{475C3CD8-85F8-4A9A-88A
5-24BD59622BD3}, , [fad3ce617c0f69cdc611cec03cc8619f],
PUP.Optional.DigiCoupon, HKLM\SOFTWARE\CLASSES\INTERFACE\{79214141-1B23-4A0D-9B2
7-05E8383FEB45}, , [fad3ce617c0f69cdc611cec03cc8619f],
PUP.Optional.DigiCoupon, HKLM\SOFTWARE\CLASSES\INTERFACE\{CB9C9338-603C-4C1A-B8D
8-683D534EF189}, , [fad3ce617c0f69cdc611cec03cc8619f],
PUP.Optional.Happy2Save, HKLM\SOFTWARE\CLASSES\TYPELIB\{A336F17E-321F-43FA-9BE6873BBDFF418E}, , [6b62032c3c4f1f1795d0cacdef15b44c],
PUP.Optional.Happy2Save, HKLM\SOFTWARE\CLASSES\INTERFACE\{2704C5CE-6D55-4E23-9B0
F-CFE24AA97234}, , [6b62032c3c4f1f1795d0cacdef15b44c],
PUP.Optional.Happy2Save, HKLM\SOFTWARE\CLASSES\INTERFACE\{970836ED-AE00-478D-BDF
1-90D17713D3A2}, , [6b62032c3c4f1f1795d0cacdef15b44c],
PUP.Optional.Happy2Save, HKLM\SOFTWARE\CLASSES\INTERFACE\{B3321940-9C27-4ABD-9AE
F-F93D0B6E1238}, , [6b62032c3c4f1f1795d0cacdef15b44c],
PUP.Optional.Happy2Save, HKLM\SOFTWARE\CLASSES\INTERFACE\{B985E3F1-6AB3-49C6-B4B
E-DB354176C4DF}, , [6b62032c3c4f1f1795d0cacdef15b44c],
PUP.Optional.DoSearch.ShrtCln, HKLM\SOFTWARE\do-searchSoftware, , [725b3df2d0bb8
ea8ecea7acca85b2bd5],
PUP.Optional.FFPluginHp, HKLM\SOFTWARE\FFPluginHp, , [a02d4fe0c9c2d066a5402d6572
927a86],
PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\istartsurfSoftware, , [418c3ef148
435bdb053650ea0df68f71],
PUP.Optional.TermTrident, HKLM\SOFTWARE\TermTrident_1.10.0.22, , [cd009c935f2c34
020e4195253acaf20e],
PUP.Optional.WdsManPro, HKLM\SOFTWARE\WdsManPro, , [f4d9ba75b8d3f73f103db613659f
9e62],
PUP.Optional.TermTrident, HKLM\SOFTWARE\MICROSOFT\ESENT\PROCESS\TermTridentAutoU
pdateClient, , [606dff30117abe78a4a8c4f6976dd927],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE,
, [38954fe08407f541ad9b4b29b94b1de3],
PUP.Optional.Vitruvian, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TTRFD_VT_1_10_0_2
2, , [616c57d84348ce68fa26d7e7966e25db],
PUP.Optional.YahooVNM, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\SOFTWA
RE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA09130135
3}, , [8c412a05d7b4aa8cd3ff5d64df25a55b],
PUP.Optional.DeskCut, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\SOFTWAR
E\MOZILLA\EXTENDS, , [ba13230c0b80e35378262d612bd9e917],
PUP.Optional.ProductSetup, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\SO
FTWARE\PRODUCTSETUP, , [6d6054dbcac1b87e76f0c5e7b450f010],
PUP.Optional.SuperOptimizer, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\
SOFTWARE\SUPER OPTIMIZER, , [9f2ede51e4a755e1e32103b54eb69070],
Registry Values: 10
PUP.Optional.DefaultSearchProtected, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|de
fsearchp@gmail.com, C:\Documents and Settings\alina\Application Data\Mozilla\Fir
efox\Profiles\garmn9or.default\extensions\defsearchp@gmail.com, , [5e6f9b94602b3
0066605e9a5768ef907]
PUP.Optional.DeskCut, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|deskCutv2@gmail.c
om, C:\Documents and Settings\alina\Application Data\Mozilla\Firefox\Profiles\ga
rmn9or.default\extensions\deskCutv2@gmail.com, , [22ab0c238407ff37a7f8830bb74dc0
40]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|D
isableAutoUpdateChecksCheckboxValue, 1, , [38954fe08407f541ad9b4b29b94b1de3]
PUP.Optional.Vitruvian, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ttrfd_vt_1_10_0_2
2|ImagePath, system32\drivers\ttrfd_vt_1_10_0_22.sys, , [616c57d84348ce68fa26d7e
7966e25db]
PUP.Optional.ProtectWindowsManager, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WdsMa
nPro|ImagePath, C:\Documents and Settings\All Users\Application Data\eWdsManProe
\WdsManPro.exe -service, , [4b820f209bf0d165fc5088a209fa31cf]
PUP.Optional.YahooVNM, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\SOFTWA
RE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA09130135
3}|URL, https://ro.search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__c
h_WCYID10099_swoc_campaign_150407__yaie&p={searchTerms}, , [8c412a05d7b4aa8cd3ff
5d64df25a55b]
PUP.Optional.DeskCut, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\SOFTWAR
E\MOZILLA\EXTENDS|appid, deskCutv2@gmail.com, , [ba13230c0b80e35378262d612bd9e91
7]
PUP.Optional.ProductSetup, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\SO
FTWARE\PRODUCTSETUP|tb, 1W1M1O1L, , [6d6054dbcac1b87e76f0c5e7b450f010]
SOFTWARE\SUPER OPTIMIZER|SetupName, C:\DOCUME~1\alina\LOCALS~1\Temp\152a7faf\347
95.ftf, , [9f2ede51e4a755e1e32103b54eb69070]
SOFTWARE\SUPER OPTIMIZER|AdsBuyNowURL, http://supc.superpctools.revenuewire.net/
spu/register?221002333_B3F8C9C3-06E8-4040-B894-063B88A373B1, , [5677210e513a96a0
6d966157729255ab]
Registry Data: 7
PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX
.EXE\SHELL\OPEN\COMMAND, "C:\Program Files\Mozilla Firefox\firefox.exe" http://w
ww.istartsurf.com/?type=sc&ts=1441741445&z=01032856afaff386db81abagdzez6gbm9z8g8
obq3e&from=cornl&uid=WDCXWD400BD-08JMC0_WD-WMAMC486257462574, Good: (firefox.exe
), Bad: ("C:\Program Files\Mozilla Firefox\firefox.exe" http://www.istartsurf.co
m/?type=sc&ts=1441741445&z=01032856afaff386db81abagdzez6gbm9z8g8obq3e&from=cornl
&uid=WDCXWD400BD-08JMC0_WD-WMAMC486257462574),,[3499e04fe5a68ea800dc510f47be9e62
]
PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLOR
E.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http:/
/www.istartsurf.com/?type=sc&ts=1441741445&z=01032856afaff386db81abagdzez6gbm9z8
g8obq3e&from=cornl&uid=WDCXWD400BD-08JMC0_WD-WMAMC486257462574, Good: (iexplore.
exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsur

f.com/?type=sc&ts=1441741445&z=01032856afaff386db81abagdzez6gbm9z8g8obq3e&from=c
ornl&uid=WDCXWD400BD-08JMC0_WD-WMAMC486257462574),,[765784abed9ecf67716c79e7f80d
4eb2]
PUP.Optional.DoSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|De
fault_Search_URL, http://do-search.com/web/?type=ds&ts=1428378354&from=cor&uid=W
DCXWD400BD-08JMC0_WD-WMAMC486257462574&q={searchTerms}, Good: (www.google.com),
Bad: (http://do-search.com/web/?type=ds&ts=1428378354&from=cor&uid=WDCXWD400BD-0
8JMC0_WD-WMAMC486257462574&q={searchTerms}),,[8f3e80af29621d19e10d0f5a27de2dd3]
PUP.Optional.DoSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Se
arch Page, http://do-search.com/web/?type=ds&ts=1428378354&from=cor&uid=WDCXWD40
0BD-08JMC0_WD-WMAMC486257462574&q={searchTerms}, Good: (www.google.com), Bad: (h
ttp://do-search.com/web/?type=ds&ts=1428378354&from=cor&uid=WDCXWD400BD-08JMC0_W
D-WMAMC486257462574&q={searchTerms}),,[35980b24bdce0f2769858edbe5204bb5]
PUP.Optional.GboxApp, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page,
http://search.gboxapp.com/, Good: (www.google.com), Bad: (http://search.gboxapp
.com/),,[a12c6fc02d5e85b1c23694d75da832ce]
PUP.Optional.GboxApp, HKU\S-1-5-21-1177238915-1960408961-1801674531-1003\SOFTWAR
E\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.gboxapp.com/, Good:
(www.google.com), Bad: (http://search.gboxapp.com/),,[c40988a7a4e738fee80e25469
075d927]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Inter
faces\{6E0A8C8E-CF07-42E7-BCE1-1B889160CA7B}|NameServer, 199.203.131.145,82.163.
143.167, Good: (), Bad: (199.203.131.145,82.163.143.167),,[84492906e4a767cfda01c
f9f4cb920e0]
Folders: 27
PUP.Optional.MultiPlug, C:\Documents and Settings\All Users\Application Data\gmf
cakdipcppfdcldkhabhlnknbmklmn, , [418cf23d098264d21ad86b0626de1be5],
PUP.Optional.MultiPlug, C:\Documents and Settings\All Users\Application Data\job
fdlonjkplgbgjbhgdablaoeldbcna, , [993457d81d6e66d0f8fa353c6d97936d],
PUP.Optional.MultiPlug.Gen, C:\Documents and Settings\All Users\Application Data
\5068758289060499563, , [9a33fa357d0e3402889ac4b39b690bf5],
PUP.Optional.BestSaveForYou, C:\Program Files\BestSaaaveFaorYeoou, , [ad20a08f84
0741f516f881009b699769],
PUP.Optional.DigiCoupon, C:\Program Files\DigiCoUppOn, , [fad3ce617c0f69cdc611ce
c03cc8619f],
PUP.Optional.DigiCoupon, C:\Program Files\DigiuCOuPoann, , [4588919eef9c4de98354
19755ea632ce],
PUP.Optional.DownSave, C:\Program Files\DDownSavee, , [0ac30f205338c37374710c836
2a20af6],
PUP.Optional.Happy2Save, C:\Program Files\HAeppy2Save, , [6b62032c3c4f1f1795d0ca
cdef15b44c],
PUP.Optional.Happy2Save, C:\Program Files\Happy2Sauve, , [27a6a18ed8b352e4cf967a
1d59ab08f8],
PUP.Optional.MultiPlug, C:\Documents and Settings\alina\Application Data\Mozilla
\Firefox\Profiles\garmn9or.default\extensions\lE@6LN.org\content, , [01cc052aacd
f4cea9f800a9b00046799],
\Firefox\Profiles\garmn9or.default\extensions\lE@6LN.org, , [01cc052aacdf4cea9f8
00a9b00046799],
\Firefox\Profiles\garmn9or.default\extensions\ls@1ql.org\content, , [fcd16fc0c0c
bd561da45bbea1aea8a76],
\Firefox\Profiles\garmn9or.default\extensions\ls@1ql.org, , [fcd16fc0c0cbd561da4
5bbea1aea8a76],
\Firefox\Profiles\garmn9or.default\extensions\rFxLK@BKWBQP.edu\content, , [25a82
906bfcc50e636e904a115ef7e82],

\Firefox\Profiles\garmn9or.default\extensions\rFxLK@BKWBQP.edu, , [25a82906bfcc5
0e636e904a115ef7e82],
\Firefox\Profiles\garmn9or.default\extensions\yC0Kf@jWKmnU.org\content, , [28a55
6d90d7e2313c15eb6ef768ec33d],
\Firefox\Profiles\garmn9or.default\extensions\yC0Kf@jWKmnU.org, , [28a556d90d7e2
313c15eb6ef768ec33d],
PUP.Optional.SuperOptimizer, C:\Documents and Settings\All Users\Application Dat
a\{38c4a05b-fe00-3287-38c4-4a05bfe0816f}, , [01ccc6695932bb7b38c22c8be91bda26],
PUP.Optional.IStartSurf.ShrtCln, C:\Documents and Settings\alina\Application Dat
a\istartsurf, , [5c71a48bb2d981b56f486f8a986a8d73],
PUP.Optional.Happy2Save, C:\Program Files\HaPpy2Save, , [775674bb75162b0b609f48c
920e3eb15],
PUP.Optional.VeggyAddon, C:\Documents and Settings\alina\Application Data\Mozill
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com, , [d1fc6ec1
9eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\chrome, , [d
1fc6ec19eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\chrome\conte
nt, , [d1fc6ec19eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\chrome\skin,
, [d1fc6ec19eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\modules, , [
d1fc6ec19eede254113782a3de2546ba],
PUP.Optional.ProtectWindowsManager, C:\Documents and Settings\All Users\Applicat
ion Data\eWdsManProe, , [9a337fb044478fa7f36590983ec5c63a],
ion Data\eWdsManProe\update, , [9a337fb044478fa7f36590983ec5c63a],
Files: 119
PUP.Optional.MultiPlug, C:\Documents and Settings\All Users\Application Data\{bf
891449-60a7-3bd9-bf89-9144960a5125}\Download Autocom 2008 realese 2 Torrent - Ki
ckassTorrents.exe, , [fdd0e44bc8c3c76ff982fa820ff23ec2],
PUP.Optional.ServiceRNDM, C:\Program Files\Nutty Search\Nutty Search.exe, , [8e3
f022d93f8e84e70fc05b9db261be5],
PUP.Optional.WProtectManager, C:\Documents and Settings\All Users\Application Da
ta\eWdsManProe\WdsManPro.exe, , [99342f005f2c64d2f9bcc4dddc293bc5],
PUP.Optional.MultiPlug.PND, C:\Documents and Settings\All Users\Application Data
\{00fc96d8-d842-eff5-00fc-c96d8d845b63}\2593565544784110891s.exe, , [933ab778f89
3e452a26a3a83b44d8977],
a\{38c4a05b-fe00-3287-38c4-4a05bfe0816f}\hqghumeaylnlf.exe, , [d5f81817f7941f170
bea7549c73af709],
PUP.Optional.MultiPlug, C:\Documents and Settings\All Users\Application Data\{43
2b0a30-f092-44a6-432b-b0a30f0928c3}\2866687083714691825b.exe, , [8e3f84ab711a61d
502fb10ac748def11],
PUP.Optional.OpenCandy, C:\Documents and Settings\alina\My Documents\Downloads\i
nstall_flashplayer17x32pp_mssd_aaa_aih (1).exe, , [b716f23d8704b284df3a8e0312f3c
f31],
nstall_flashplayer17x32pp_mssd_aaa_aih.exe, , [d4f94ee17a11270f849592ffd03549b7]
,
nstall_reader11_uk_mssa_aaa_aih.exe, , [814c60cf2b60d264eb2e058cab5afb05],
PUP.Optional.DLSecure, C:\Documents and Settings\alina\My Documents\Downloads\dl

secureTb_1.0.4.1 (1).exe, , [be0ffc3368236acc719eb901be4340c0],
PUP.Optional.DLSecure, C:\Documents and Settings\alina\My Documents\Downloads\dl
secureTb_1.0.4.1.exe, , [359883ac73188aacba55befc6b9643bd],
PUP.Optional.OpenCandy, C:\Documents and Settings\alina\My Documents\Downloads\G
OMPLAYERENSETUP.EXE, , [b31af53a2e5daf87bb5e474afe079f61],
PUP.Optional.MultiPlug, C:\Documents and Settings\alina\My Documents\Downloads\D
ownload Autocom 2008 realese 2 Torrent - KickassTorrents.exe, , [329b0c23abe0b77
ff08b413b19e8df21],
PUP.Optional.MultiPlug, C:\Program Files\Mozilla Firefox\dbghelp.dll, , [c508c56
a3b50092d78609c20ba478080],
PUP.Optional.MultiPlug, C:\Program Files\sound on click\sound on click.exe, , [5
c71200f7516102617cec5f7946d44bc],
PUP.Optional.MultiPlug, C:\Program Files\Twitcher Twitter Account Switcher\Twit
cher Twitter Account Switcher.exe, , [f5d88ca3d6b566d0c223d6e6fc056898],
PUP.Optional.MultiPlug.BHO, C:\Program Files\DDownSavee\L3sVEJAeIXsoFQ.dll, , [e
4e9052aec9f1a1cd137f1cce81931cf],
PUP.Optional.MultiPlug, C:\Program Files\DDownSavee\L3sVEJAeIXsoFQ.exe, , [834ad
45b3b501323a14499239071b44c],
PUP.Optional.MultiPlug, C:\Program Files\DownnSSaVe\DownnSSaVe.exe, , [0ac3b7782
863e84e00e5ebd1837e16ea],
PUP.Optional.MultiPlug.BHO, C:\Program Files\HAeppy2Save\zO3VnxypbnaqZ7.dll, , [
5b7252dd5239ae88dc72a4115ea34bb5],
PUP.Optional.MultiPlug, C:\Program Files\HAeppy2Save\zO3VnxypbnaqZ7.exe, , [636a
fd32701b8aacad38427a41c058a8],
PUP.Optional.MultiPlug.BHO, C:\Program Files\Happy2Sauve\ODIYimquqqctOz.dll, , [
ede0022de1aa44f2d27cebca42bfd22e],
PUP.Optional.MultiPlug, C:\Program Files\Happy2Sauve\ODIYimquqqctOz.exe, , [cb02
e54a44471026ac394a72bc45ac54],
PUP.Optional.MultiPlug, C:\Program Files\HaPpy2Save\HaPpy2Save.exe, , [be0f82ad6
526b97d09dc4e6e41c08977],
PUP.Optional.MultiPlug, C:\Program Files\DDiggiCoupon\DDiggiCoupon.exe, , [02cb8
da2c0cbd75f35b02f8d6b9642be],
PUP.Optional.MultiPlug.PLY, C:\Documents and Settings\alina\Local Settings\Temp\
__tmp_290d4746, , [13bac867adde092d0bd46c53de234fb1],
CXLTGW.tmp\BIT174.tmp, , [b11cb9768cffbc7a9847338cd42dbf41],
HVXFWM.tmp\BIT18C.tmp, , [4c81a6898a01072fa93626994ab7c53b],
VJWSOM.tmp\BIT175.tmp, , [7b52fd321e6d65d127b8f7c82bd652ae],
AEPAXC.tmp\BIT17B.tmp, , [03ca72bd25661a1ccf10784713ee02fe],
Trojan.Agent.CK, C:\Documents and Settings\alina\Local Settings\Temp\Rar$EXa0.75
2\Crack\Eset Login Viewer.exe, , [15b899960784f54144ddfa834db846ba],
RiskWare.Tool.CK, C:\Documents and Settings\alina\Local Settings\Temp\Rar$EXa0.7
52\Crack\ESET_PureFix_V2b_0.rar, , [8d40c56ab7d40630e1de018e1ce4fd03],
Trojan.Agent.CK, C:\Documents and Settings\alina\Local Settings\Temp\Rar$EXa0.75
2\Crack\TNod_1_4_1.rar, , [577658d7157676c00e50532aec19f50b],
PUP.Optional.MultiPlug, C:\WINDOWS\Temp\tmp4zdjnl\UYWlrBDwEKa5TCa.exe, , [2da043
ecf794d2644a9b7c4016eb41bf],
PUP.Optional.MultiPlug, C:\WINDOWS\Temp\tmpj4llyj\dbghelp.dll, , [f5d88fa0fa912d
094890f2ca21e003fd],
PUP.Optional.MultiPlug, C:\WINDOWS\Temp\tmpnpphuo\dSmxXZtOqyIXc7W.exe, , [8f3ecd
62b7d4ef47f2f317a523de3ec2],
PUP.Optional.MultiPlug.BHO, C:\WINDOWS\Temp\tmpnpphuo\IDdiI92uKcUsjt.dll, , [913
c85aa2d5e6ec8cf393588e31e51af],
PUP.Optional.MultiPlug.BHO64, C:\WINDOWS\Temp\tmpnpphuo\IDdiI92uKcUsjt.x64.dll,
, [efde7cb30b8075c15baf6954e9186c94],
PUP.Optional.MultiPlug, C:\WINDOWS\Temp\tmppgx381\cdZ74bNsHWxaprk.exe, , [7c5118
1783088ea8dc09407c4cb53cc4],
PUP.Optional.MultiPlug, C:\WINDOWS\Temp\tmpqjqvwo\dbghelp.dll, , [10bdf23d612a46
f07c5c1aa26998ed13],
PUP.Optional.MultiPlug, C:\WINDOWS\Temp\tmpx0hga_\4knPIKLCGgB7TNT.exe, , [04c9b7
78464511255f861ca0728f0bf5],
PUP.Optional.DoSearch.ShrtCln, C:\Documents and Settings\alina\Local Settings\Ap
plication Data\Google\Chrome\User Data\Default\Local Storage\http_do-search.com_
0.localstorage, , [3f8eb37c95f6ea4c036d9b91c83b2dd3],
PUP.Optional.DoSearch.ShrtCln, C:\Documents and Settings\alina\Local Settings\Ap
plication Data\Google\Chrome\User Data\Default\Local Storage\http_do-search.com_
0.localstorage-journal, , [28a51c133c4f0531dd93cd5f679caf51],
cakdipcppfdcldkhabhlnknbmklmn\lsdb.js, , [418cf23d098264d21ad86b0626de1be5],
cakdipcppfdcldkhabhlnknbmklmn\background.html, , [418cf23d098264d21ad86b0626de1b
e5],
cakdipcppfdcldkhabhlnknbmklmn\content.js, , [418cf23d098264d21ad86b0626de1be5],
cakdipcppfdcldkhabhlnknbmklmn\IJuxFL8j3p.js, , [418cf23d098264d21ad86b0626de1be5
],
cakdipcppfdcldkhabhlnknbmklmn\manifest.json, , [418cf23d098264d21ad86b0626de1be5
],
fdlonjkplgbgjbhgdablaoeldbcna\lsdb.js, , [993457d81d6e66d0f8fa353c6d97936d],
fdlonjkplgbgjbhgdablaoeldbcna\background.html, , [993457d81d6e66d0f8fa353c6d9793
6d],
fdlonjkplgbgjbhgdablaoeldbcna\content.js, , [993457d81d6e66d0f8fa353c6d97936d],
fdlonjkplgbgjbhgdablaoeldbcna\manifest.json, , [993457d81d6e66d0f8fa353c6d97936d
],
fdlonjkplgbgjbhgdablaoeldbcna\SIDQLROz.js, , [993457d81d6e66d0f8fa353c6d97936d],
\5068758289060499563\0a0282babfc077ef91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\8f3308606f130acc91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\235ac3986e3193ba91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\238deaacf390461691b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\26923f6cf07c6a6f91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\37775abd6f6704a291b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\4775d99c57b1799e91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\60a745f6d39aa79091b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\852423c3a181c49891b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\954accd1ef18255b91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\989532115da3c5f091b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\a4cbef4530822e1591b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\ad5e6328e91d5a2591b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\b11955036dffc58f91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\bcecce8f0e24281691b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\be3984b559573fbe91b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\c5dda8811636467791b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\cd5b15e575e1c3d091b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\d1b823d8a4cc414991b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\d38e8734560118a991b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
\5068758289060499563\d6ae24e4beaa0e7291b1927a4aa5da67.ini, , [9a33fa357d0e340288
9ac4b39b690bf5],
PUP.Optional.BestSaveForYou, C:\Program Files\BestSaaaveFaorYeoou\VHk5mY2x7WJaAD
.tlb, , [ad20a08f840741f516f881009b699769],
PUP.Optional.BestSaveForYou, C:\Program Files\BestSaaaveFaorYeoou\VHk5mY2x7WJaAD
.dat, , [ad20a08f840741f516f881009b699769],
PUP.Optional.Boost, C:\Documents and Settings\alina\Local Settings\Application D
ata\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.
localstorage, , [29a4c46bc1ca6dc93114245e5ba98977],
PUP.Optional.Boost, C:\Documents and Settings\alina\Local Settings\Application D
ata\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.
localstorage-journal, , [527b3df2a9e2c76fa69f7111b351827e],
PUP.Optional.DigiCoupon, C:\Program Files\DigiCoUppOn\knAhOOyDoSxNVq.tlb, , [fad
3ce617c0f69cdc611cec03cc8619f],
PUP.Optional.DigiCoupon, C:\Program Files\DigiCoUppOn\knAhOOyDoSxNVq.dat, , [fad
3ce617c0f69cdc611cec03cc8619f],
PUP.Optional.DigiCoupon, C:\Program Files\DigiuCOuPoann\O6T01TQGchgSjd.tlb, , [4
588919eef9c4de9835419755ea632ce],
PUP.Optional.DigiCoupon, C:\Program Files\DigiuCOuPoann\O6T01TQGchgSjd.dat, , [4
588919eef9c4de9835419755ea632ce],
PUP.Optional.DownSave, C:\Program Files\DDownSavee\L3sVEJAeIXsoFQ.tlb, , [0ac30f
205338c37374710c8362a20af6],
PUP.Optional.DownSave, C:\Program Files\DDownSavee\L3sVEJAeIXsoFQ.dat, , [0ac30f

205338c37374710c8362a20af6],
PUP.Optional.FreeSearches, C:\Documents and Settings\alina\Local Settings\Applic
ation Data\Google\Chrome\User Data\Default\Local Storage\http_websearch.freesear
ches.info_0.localstorage, , [57764de2c4c7e94d6041365e3cc89e62],
PUP.Optional.FreeSearches, C:\Documents and Settings\alina\Local Settings\Applic
ation Data\Google\Chrome\User Data\Default\Local Storage\http_websearch.freesear
ches.info_0.localstorage-journal, , [775637f8e3a8a78f29785c38679d09f7],
PUP.Optional.Happy2Save, C:\Program Files\HAeppy2Save\zO3VnxypbnaqZ7.tlb, , [6b6
2032c3c4f1f1795d0cacdef15b44c],
PUP.Optional.Happy2Save, C:\Program Files\HAeppy2Save\zO3VnxypbnaqZ7.dat, , [6b6
2032c3c4f1f1795d0cacdef15b44c],
PUP.Optional.Happy2Save, C:\Program Files\Happy2Sauve\ODIYimquqqctOz.tlb, , [27a
6a18ed8b352e4cf967a1d59ab08f8],
PUP.Optional.Happy2Save, C:\Program Files\Happy2Sauve\ODIYimquqqctOz.dat, , [27a
6a18ed8b352e4cf967a1d59ab08f8],
\Firefox\Profiles\garmn9or.default\extensions\lE@6LN.org\content\bg.js, , [01cc0
52aacdf4cea9f800a9b00046799],
\Firefox\Profiles\garmn9or.default\extensions\lE@6LN.org\bootstrap.js, , [01cc05
2aacdf4cea9f800a9b00046799],
\Firefox\Profiles\garmn9or.default\extensions\lE@6LN.org\chrome.manifest, , [01c
c052aacdf4cea9f800a9b00046799],
\Firefox\Profiles\garmn9or.default\extensions\lE@6LN.org\install.rdf, , [01cc052
aacdf4cea9f800a9b00046799],
\Firefox\Profiles\garmn9or.default\extensions\ls@1ql.org\content\bg.js, , [fcd16
fc0c0cbd561da45bbea1aea8a76],
\Firefox\Profiles\garmn9or.default\extensions\ls@1ql.org\bootstrap.js, , [fcd16f
c0c0cbd561da45bbea1aea8a76],
\Firefox\Profiles\garmn9or.default\extensions\ls@1ql.org\chrome.manifest, , [fcd
16fc0c0cbd561da45bbea1aea8a76],
\Firefox\Profiles\garmn9or.default\extensions\ls@1ql.org\install.rdf, , [fcd16fc
0c0cbd561da45bbea1aea8a76],
\Firefox\Profiles\garmn9or.default\extensions\rFxLK@BKWBQP.edu\content\bg.js, ,
[25a82906bfcc50e636e904a115ef7e82],
\Firefox\Profiles\garmn9or.default\extensions\rFxLK@BKWBQP.edu\bootstrap.js, , [
25a82906bfcc50e636e904a115ef7e82],
\Firefox\Profiles\garmn9or.default\extensions\rFxLK@BKWBQP.edu\chrome.manifest,
, [25a82906bfcc50e636e904a115ef7e82],
\Firefox\Profiles\garmn9or.default\extensions\rFxLK@BKWBQP.edu\install.rdf, , [2
5a82906bfcc50e636e904a115ef7e82],
\Firefox\Profiles\garmn9or.default\extensions\yC0Kf@jWKmnU.org\content\bg.js, ,
[28a556d90d7e2313c15eb6ef768ec33d],
\Firefox\Profiles\garmn9or.default\extensions\yC0Kf@jWKmnU.org\bootstrap.js, , [
28a556d90d7e2313c15eb6ef768ec33d],
\Firefox\Profiles\garmn9or.default\extensions\yC0Kf@jWKmnU.org\chrome.manifest,
, [28a556d90d7e2313c15eb6ef768ec33d],
\Firefox\Profiles\garmn9or.default\extensions\yC0Kf@jWKmnU.org\install.rdf, , [2
8a556d90d7e2313c15eb6ef768ec33d],
PUP.Optional.MultiPlug, C:\WINDOWS\Tasks\Bidaily Synchronize Task[pr].job, , [86
47a689385361d53a06acf936ce59a7],
PUP.Optional.Superclean, C:\WINDOWS\Tasks\Superclean.job, , [4d8087a88dfe31052cb
21d9a13f102fe],
a\{38c4a05b-fe00-3287-38c4-4a05bfe0816f}\hqghumeaylnlf.dat, , [01ccc6695932bb7b3
8c22c8be91bda26],
a\{38c4a05b-fe00-3287-38c4-4a05bfe0816f}\5b8f24e961a31033, , [01ccc6695932bb7b38
c22c8be91bda26],
a\{38c4a05b-fe00-3287-38c4-4a05bfe0816f}\6c2ff21098d31b63, , [01ccc6695932bb7b38
c22c8be91bda26],
PUP.Optional.Vitruvian, C:\Documents and Settings\alina\Local Settings\Temp\vitr
uvian-installer-uninstall-v0002, , [f3da210e5437e65069b6f7c70cf84ab6],
PUP.Optional.Happy2Save, C:\Program Files\HaPpy2Save\HaPpy2Save.dat, , [775674bb
75162b0b609f48c920e3eb15],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\chrome.manif
est, , [d1fc6ec19eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\install.rdf,
, [d1fc6ec19eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\chrome\conte
nt\main.xul, , [d1fc6ec19eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\chrome\skin\
icon.png, , [d1fc6ec19eede254113782a3de2546ba],
a\Firefox\Profiles\garmn9or.default\extensions\veggy@veggyAddon.com\modules\XCip
her.js, , [d1fc6ec19eede254113782a3de2546ba],
ion Data\eWdsManProe\updateconf, , [9a337fb044478fa7f36590983ec5c63a],
Physical Sectors: 0
(No malicious items detected)
(end)

6

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

6

Transféré par

Droits d'auteur :

Formats disponibles

Malwarebytes Anti-Malware

exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsur

PUP.Optional.MultiPlug, C:\Documents and Settings\alina\Application Data\Mozilla

PUP.Optional.DLSecure, C:\Documents and Settings\alina\My Documents\Downloads\dl

PUP.Optional.DownSave, C:\Program Files\DDownSavee\L3sVEJAeIXsoFQ.dat, , [0ac30f

Vous aimerez peut-être aussi