Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 8/07/2014 Scan Time: 13:50:17 Logfile: MBAM Scanlog(1).txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.08.04 Rootkit Database: v2014.07.07.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows Vista Service Pack 2 CPU: x86 File System: NTFS User: Joseph Scan Type: Threat Scan Result: Completed Objects Scanned: 282160 Time Elapsed: 20 min, 30 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 46 PUP.Optional.SweetPacks.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Web Assistant Updater, , [49cbcdd0a9d26accf43064a9ee13639d], Adware.SearchSpider, HKLM\SOFTWARE\CLASSES\APPID\{0687C398-65BF-4B81-B23B-A560D2BA8203}, , [080cc0dd82f9e551cc131d50a959d62a], Adware.SearchSpider, HKLM\SOFTWARE\CLASSES\APPID\{C3089DAE-8F34-4E75-9DB9-155CE654D15F}, , [74a06c314f2c4fe708da7eeffb07c63a], PUP.Optional.Babylon.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [4aca2578b7c40432ab6a70def60cc040], PUP.Optional.FunWebProducts.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, , [15ff69344a312e08ecf37018fb077e82], PUP.Optional.FunWebProducts.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, , [15ff69344a312e08ecf37018fb077e82], Adware.SearchSpider, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CA5B0823-5D3E-4333-B27A-E35E361E2179}, , [36deccd1c5b6f54108dbd499d82a26da], Adware.SearchSpider, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CA5B0823-5D3E-4333-B27A-E35E361E2179}, , [36deccd1c5b6f54108dbd499d82a26da], PUP.Optional.SaveSence.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2E32CFE5-DF92-4AE5-B0BE-609ED0DF74A6}, , [9282f4a94c2fbb7bd1d6aaa68181f709], PUP.Optional.SaveSence.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2E32CFE5-DF92-4AE5-B0BE-609ED0DF74A6}, , [9282f4a94c2fbb7bd1d6aaa68181f709], PUP.Optional.MindSpark.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{00A6FAF6-072E-44CF-8957-5838F569A31D}, , [19fb861773089c9a382f8a00649e956b], PUP.Optional.YTDToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [54c0fda0ea91d363d6aaada4927019e7], PUP.Optional.SoftwareUpdater.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SoftwareUpdater, , [bb59039a7ffcc670564f06e8e71c21df], PUP.Optional.InstallBrain.A, HKLM\SOFTWARE\InstallIQ, , [39dbff9e3b406fc70c573b9ab74b7c84], PUP.Optional.SaveSense.A, HKLM\SOFTWARE\SaveSense, , [1202c4d99fdc4ee86cc1748c9c68a55b], PUP.Optional.VuzeRemoteTB.A, HKLM\SOFTWARE\Vuze_Remote, , [57bd336a423996a0059a8d4226dc10f0], Adware.SearchSpider, HKLM\SOFTWARE\CLASSES\searchspider, , [e72dfda0aad1db5b478fda6cff043cc4], Adware.SearchSpider, HKLM\SOFTWARE\CLASSES\APPID\LibeventSvc.EXE, , [a56f990427540036ca6e31133cc7fd03], Adware.SearchSpider, HKLM\SOFTWARE\CLASSES\APPID\SearchSpider.DLL, , [ad67efaed3a8ac8a640afe4625de38c8], PUP.Optional.Complitly.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\defdhglnppeioeflggkmglipcecffkhk, , [32e25845a4d7c67006fd3ed423e19e62], PUP.Optional.Complitly.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlfienamagdnkekbbbocojppncdambda, , [66ae58455e1de0565a8e5f6217eb17e9], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\jbpkiefagocgkmemidfngdkamloieekf, , [25ef415c36452412abad694d4fb343bd], PUP.Optional.Hosts.A, HKLM\SOFTWARE\HOSTS\INSTALLER, , [68ac86172a51f73f8b8525b37f83649c], PUP.Optional.SoftwareUpdater.A, HKLM\SOFTWARE\SOFTWAREUPDATER, , [fa1a94095d1e71c5139638ba25def907], PUP.Optional.BundleInstaller.A, HKLM\SOFTWARE\VITTALIA\AxtanInstaller, , [24f04b5247342016498ce4f424dee020], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\defdhglnppeioeflggkmglipcecffkhk, , [28ecf2abe09b89ad08fb947e6e967888], PUP.Optional.Complitly.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlfienamagdnkekbbbocojppncdambda, , [04108a13f3889a9c499fbe0382804ab6], PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [c153831a95e6a4921a806c5c6c96d12f], PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\1ClickDownload, , [3ed69d008fecf046e3c226ccc73cfd03], PUP.Optional.DataMngr.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Datamngr, , [cf45f8a5512a3204c86468895ca71be5], PUP.Optional.Ividi.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\iVIDI Plugin, , [ca4a4e4fe29976c0ced19d3e51b137c9], Malware.Trace, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MediaHoldings, , [da3abae32e4d13234cafdf6a7291a55b], PUP.Optional.SaveSense.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SaveSense, , [39db8914dc9fff37fa30b14f34d0b749], Adware.SearchSpider, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SearchSpider, , [40d4237ae39844f2353975df39ca6898], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [c84c68351e5d59dd9a1b06ff00045ca4], PUP.Optional.Spigot.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [21f3712ca1dabf778d0c1af7e91b47b9], PUP.Optional.SimplyTech.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SIMPLYTECH\Toolbar, , [a470c6d7e09bb4825a17dae4936fba46], PUP.Optional.FilesFrog.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BI, , [9480188533483204448939bd27dc7d83], PUP.Optional.Conduit.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [9a7aaeefbebd5fd7af1d47af0102867a], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CR_INSTALLER\35382, , [56be0f8e5f1c3501481dcf246d963fc1], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [68acb5e89fdcb284be89578444beac54], PUP.Optional.InstallCore.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [1cf8831ae299cb6baea19f52d82b6799], PUP.Optional.CrossRider.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Alex, , [38dccdd058236bcb4b1c52860bf70df3], PUP.Optional.Softonic.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [63b1a2fb4b30a59132eda525976bd030], PUP.Optional.SweetIM.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM, , [8e860598b6c5e74f2713dc1638cbc33d], PUP.Optional.SaveSense, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SaveSense, , [37ddaaf3cbb0b5817f97debeb54da65a], Registry Values: 13 PUP.Optional.YTDToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F3FEE66E-E034-436A-86E4-9690573BEE8A}, YouTube Downloader Toolbar, , [54c0fda0ea91d363d6aaada4927019e7] PUP.Optional.YTDToolbar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F3FEE66E-E034-436a-86E4-9690573BEE8A}, , [9e76d9c41a610c2a81ff9db41de550b0], PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{99079a25-328f-4bd4-be04-00955acaa0a7}, , [957fc8d5483345f1d319173d08fac937], PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Searchqu Toolbar, , [957fc8d5483345f1d319173d08fac937] PUP.Optional.Hosts.A, HKLM\SOFTWARE\HOSTS\INSTALLER|BundledIe, 1, , [68ac86172a51f73f8b8525b37f83649c] PUP.Optional.SearchCertified.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, , [ce46e0bd8eed152152247347af5324dc] PUP.Optional.CertifiedToolBar.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), http://search.certified-toolbar.com?si=42348&st=bs&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=%s, , [6ca8cecfb6c5b97d2828cdec05fd1ce4] PUP.Optional.CertifiedToolBar.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|(Default), http://search.certified-toolbar.com?si=42348&st=bs&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=%s, , [49cb207d28533bfb6be6c8f136cc6a96] PUP.Optional.SoftwareUpdater.A, HKLM\SOFTWARE\SOFTWAREUPDATER|partner_keyword, FEEDBURNER, , [fa1a94095d1e71c5139638ba25def907] PUP.Optional.FilesFrog.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\BI|ui_path_filesfrog, HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker, , [9480188533483204448939bd27dc7d83] PUP.Optional.InstallCore.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, zr2X2X1G1S1F2V1S2Q0V, , [1cf8831ae299cb6baea19f52d82b6799] PUP.Optional.SearchCertified.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, , [a272623b2457c0762a4a605a62a055ab] PUP.Optional.SweetIM.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SWEETIM|simapp_id, 11111111, , [8e860598b6c5e74f2713dc1638cbc33d] Registry Data: 15 Hijack.SearchPage, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, Good: (http://www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=),,[18fc4c517308f83e37b04e472adade22] Hijack.SearchPage, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, Good: (http://www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=),,[fb19bde0d9a23cfad6105045e420d12f] PUP.Optional.CertifiedToolBar.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Default_Page_URL, http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B),,[8c88227b324964d2d7c04d3f9173ab55] PUP.Optional.CertifiedToolBar.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B),,[36de09943b40c86e217a3c506b99ab55] PUP.Optional.CertifiedToolBar.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B),,[d143138a3a416acc91092369f50fbb45] Hijack.SearchPage, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, Good: (http://www.google.com/), Bad: (http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=),,[3bd96835fb8037ff4c9cf1a4e61e06fa] PUP.Optional.CertifiedToolBar.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=),,[e133cad38cefba7cb0e8711b669e45bb] PUP.Optional.HelperBar.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.helperbar.com/?publisher=OC&dpid=OC&co=BE&userid=6d4ce2dc-4580-4193-982d-c8078e18c443&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.helperbar.com/?publisher=OC&dpid=OC&co=BE&userid=6d4ce2dc-4580-4193-982d-c8078e18c443&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),,[a470cfce1c5fe15583e71b725ca8956b] PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Default_Page_URL, http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B),,[ec286c31a5d64beb96fda3e932d2cd33] Hijack.SearchPage, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, Good: (http://www.google.com/), Bad: (http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=),,[3dd70499bbc01a1cc524eaab3cc851af] PUP.Optional.HelperBar.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://feed.helperbar.com/?publisher=OC&dpid=OC&co=BE&userid=6d4ce2dc-4580-4193-982d-c8078e18c443&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}, Good: (www.google.com), Bad: (http://feed.helperbar.com/?publisher=OC&dpid=OC&co=BE&userid=6d4ce2dc-4580-4193-982d-c8078e18c443&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}),,[f91b27765c1f85b12a46f59819eb39c7] PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B),,[2ee61d80bcbfb68031653d4f81832fd1] PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=home&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B),,[9480217cb4c71521e2b36d1f3cc842be] PUP.Optional.CertifiedToolBar.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=chrome&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=),,[a66ed0cd205b7db95440aededb29e61a] PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-2998025893-4089601738-2843362376-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), http://search.certified-toolbar.com?si=42348&st=bs&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=%s, Good: (www.google.com), Bad: (http://search.certified-toolbar.com?si=42348&st=bs&tid=3662&ver=2.9&ts=1368203505519&tguid=42348-3662-1368203505519-FE8A180767EDF2E9FF96624B8EC5868B&q=%s),,[73a1a7f66d0e6dc99c5e1780d034ad53] Folders: 26 PUP.Optional.SoftwareUpdater.A, C:\Program Files\SoftwareUpdater, , [bb59039a7ffcc670564f06e8e71c21df], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\16F1CAF717AC48C2BE2C8F1D04B8818B, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\17B7127E89514C14A4708306CDF2A2B8, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\26503489DBB7466CA983526106BABFEB, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\4FE5042920174E6EAA69071678DC13F7, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\56B6ACD7537B47C4B75E333B741E3B43, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\57A302515FF640E9B714899FB5077B6B, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\95B556AAD6B54581AF63402EC6B49B8F, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\C48CB9E9109C4D918401B8CB665149D1, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\E0E1E9373CF64693B142656D4F24B4C3, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.SaveSense, C:\Program Files\SaveSense, , [37ddaaf3cbb0b5817f97debeb54da65a], PUP.Optional.SaveSense, C:\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense, , [c84c0a936813d36397832b71c53d46ba], PUP.Optional.YTDToolbar.A, C:\Program Files\YouTube Downloader Toolbar\IE, , [1400a7f6c1ba56e00e27a2ff659df60a], PUP.Optional.YTDToolbar.A, C:\Program Files\YouTube Downloader Toolbar\IE\4.5, , [1400a7f6c1ba56e00e27a2ff659df60a], PUP.Optional.PassShow.A, C:\Program Files\PassShow-soft, , [1ff54e4f27540b2b21f6416712f0a15f], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\SearchProtect, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\SearchProtect\rep, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\SearchProtect\STG, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\UI, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\UI\rep, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.Complitly.A, C:\Users\Joseph\AppData\Roaming\Complitly, , [21f3ebb24b301e187387f5be9a68df21], PUP.Optional.Complitly.A, C:\Users\Joseph\AppData\Roaming\Complitly\64, , [21f3ebb24b301e187387f5be9a68df21], Files: 71 PUP.Optional.SweetPacks.A, C:\Program Files\Web Assistant\ExtensionUpdaterService.exe, , [49cbcdd0a9d26accf43064a9ee13639d], PUP.Optional.Spigot.A, C:\ProgramData\YTD Video Downloader\ytd_installer.exe, , [f420039a2754c076c5d380a6758b768a], PUP.Optional.SnapDo.A, C:\Users\Joseph\AppData\Roaming\OpenCandy\E0E1E9373CF64693B142656D4F24B4C3\LinkuryInstaller.msi, , [1afa5c41ccaf59dd65a7008a4bb6f907], PUP.Optional.SmartBar, C:\Users\Joseph\AppData\Roaming\OpenCandy\E0E1E9373CF64693B142656D4F24B4C3\LinkuryInstaller_p1v16.exe, , [b65ea9f46f0c6bcb46eb8aa44cb40cf4], PUP.BundleInstaller.RKN, C:\Users\Joseph\Downloads\FLVToMP3Setup.exe, , [3ada4f4e45363df9a162821a31cff808], PUP.SmsPay.pns, C:\Users\Joseph\Downloads\installer_youtube_downloader_3_58_Nederlands_Dutch.exe, , [1301cad3a0dbff37e05c551b0df326da], PUP.Optional.Conduit, C:\Users\Joseph\Downloads\LiveRadio.exe, , [4ec6198479022b0b5e3ab57abe4201ff], PUP.Optional.FaceMoods.A, C:\Users\Joseph\AppData\Local\facemoods.exe, , [1400435add9e81b51828b111659f0bf5], PUP.Optional.BabylonToolBar.A, C:\Users\Joseph\AppData\Local\Babylon\Setup\MyBabylonTB.exe, , [f91b356865162f07ba5ead71b44d58a8], Malware.Trace, C:\Windows\System32\nodes.txt, , [a371dbc2067525119e174fdca75c8d73], PUP.Optional.SoftwareUpdater.A, C:\Program Files\SoftwareUpdater\KeyGen.dll, , [bb59039a7ffcc670564f06e8e71c21df], PUP.Optional.SoftwareUpdater.A, C:\Program Files\SoftwareUpdater\AppsUpdater.exe.config, , [bb59039a7ffcc670564f06e8e71c21df], PUP.Optional.SoftwareUpdater.A, C:\Program Files\SoftwareUpdater\Interop.Shell32.dll, , [bb59039a7ffcc670564f06e8e71c21df], PUP.Optional.SoftwareUpdater.A, C:\Program Files\SoftwareUpdater\uninstall.exe, , [bb59039a7ffcc670564f06e8e71c21df], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\16F1CAF717AC48C2BE2C8F1D04B8818B\pcspeedup_oc.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\17B7127E89514C14A4708306CDF2A2B8\DivXInstaller.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\26503489DBB7466CA983526106BABFEB\pcspeedup_oc.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\4FE5042920174E6EAA69071678DC13F7\TuneUpUtilities2013-2200335_nl-NL.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\56B6ACD7537B47C4B75E333B741E3B43\pcspeedup_oc.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\57A302515FF640E9B714899FB5077B6B\3555.ico, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\57A302515FF640E9B714899FB5077B6B\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\57A302515FF640E9B714899FB5077B6B\Installer.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\57A302515FF640E9B714899FB5077B6B\Linkury_ALL_p1v24.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\57A302515FF640E9B714899FB5077B6B\OCBrowserHelper_1.0.3.85.dll, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\95B556AAD6B54581AF63402EC6B49B8F\DivXInstaller.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\C48CB9E9109C4D918401B8CB665149D1\3704.ico, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\C48CB9E9109C4D918401B8CB665149D1\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\C48CB9E9109C4D918401B8CB665149D1\OCBrowserHelper_1.0.3.85.dll, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\C48CB9E9109C4D918401B8CB665149D1\SnapDo.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\C48CB9E9109C4D918401B8CB665149D1\SnapDo_ALL_p1v4.exe, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\E0E1E9373CF64693B142656D4F24B4C3\3555.ico, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\E0E1E9373CF64693B142656D4F24B4C3\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.OpenCandy, C:\Users\Joseph\AppData\Roaming\OpenCandy\E0E1E9373CF64693B142656D4F24B4C3\OCBrowserHelper_1.0.3.85.dll, , [c054cfce7cffe05669433f5bb64c0bf5], PUP.Optional.SaveSense, C:\Program Files\SaveSense\icon.ico, , [37ddaaf3cbb0b5817f97debeb54da65a], PUP.Optional.SaveSense, C:\Program Files\SaveSense\SaveSense.crx, , [37ddaaf3cbb0b5817f97debeb54da65a], PUP.Optional.SaveSense, C:\Program Files\SaveSense\SaveSense.xpi, , [37ddaaf3cbb0b5817f97debeb54da65a], PUP.Optional.SaveSense, C:\Program Files\SaveSense\SaveSenseIE.dll, , [37ddaaf3cbb0b5817f97debeb54da65a], PUP.Optional.SaveSense, C:\Program Files\SaveSense\SaveSenseIE64.dll, , [37ddaaf3cbb0b5817f97debeb54da65a], PUP.Optional.SaveSense, C:\Program Files\SaveSense\uninst.exe, , [37ddaaf3cbb0b5817f97debeb54da65a], PUP.Optional.SaveSense, C:\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\SaveSense Help.url, , [c84c0a936813d36397832b71c53d46ba], PUP.Optional.SaveSense, C:\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\SaveSense.url, , [c84c0a936813d36397832b71c53d46ba], PUP.Optional.SaveSense, C:\Users\Joseph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense\Uninstall SaveSense.lnk, , [c84c0a936813d36397832b71c53d46ba], PUP.Optional.YTDToolbar.A, C:\Program Files\YouTube Downloader Toolbar\IE\4.5\config.ini, , [1400a7f6c1ba56e00e27a2ff659df60a], PUP.Optional.YTDToolbar.A, C:\Program Files\YouTube Downloader Toolbar\IE\4.5\youtubedownloaderToolbarIE.dll, , [1400a7f6c1ba56e00e27a2ff659df60a], PUP.Optional.PassShow.A, C:\Program Files\PassShow-soft\170.dll, , [1ff54e4f27540b2b21f6416712f0a15f], PUP.Optional.PassShow.A, C:\Program Files\PassShow-soft\170.xpi, , [1ff54e4f27540b2b21f6416712f0a15f], PUP.Optional.PassShow.A, C:\Program Files\PassShow-soft\a.db, , [1ff54e4f27540b2b21f6416712f0a15f], PUP.Optional.PassShow.A, C:\Program Files\PassShow-soft\b.db, , [1ff54e4f27540b2b21f6416712f0a15f], PUP.Optional.PassShow.A, C:\Program Files\PassShow-soft\Sqlite3.dll, , [1ff54e4f27540b2b21f6416712f0a15f], PUP.Optional.PassShow.A, C:\Program Files\PassShow-soft\Uninstall.exe, , [1ff54e4f27540b2b21f6416712f0a15f], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\000005.ldb, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\000018.log, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\CURRENT, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\LOCK, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\LOG, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\LOG.old, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj\MANIFEST-000017, , [29eb85183744c07642d5b9f57f830df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\000005.ldb, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\000018.log, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\CURRENT, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\LOCK, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\LOG, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\LOG.old, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.Spigot.A, C:\Users\Joseph\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp\MANIFEST-000017, , [3fd51f7e78031422f424327cbe440df3], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\SearchProtect\rep\UserRepository.dat, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\SearchProtect\rep\UserSettings.dat, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.SearchProtect.A, C:\Users\Joseph\AppData\Local\SearchProtect\UI\rep\UIRepository.dat, , [4bc96736c9b254e20c85545ca16142be], PUP.Optional.Complitly.A, C:\Users\Joseph\AppData\Roaming\Complitly\Complitly.dll, , [21f3ebb24b301e187387f5be9a68df21], PUP.Optional.Complitly.A, C:\Users\Joseph\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [21f3ebb24b301e187387f5be9a68df21], PUP.Optional.Complitly.A, C:\Users\Joseph\AppData\Roaming\Complitly\64\Complitly64.dll, , [21f3ebb24b301e187387f5be9a68df21], PUP.Optional.Complitly.A, C:\Users\Joseph\AppData\Roaming\Complitly\64\KeepMeUpdated.exe, , [21f3ebb24b301e187387f5be9a68df21], Physical Sectors: 0 (No malicious items detected) (end)