Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 10-3-2015 Scan Time: 14:34:51 Logfile: Malwarebytes Anti-Malware log.txt Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.03.10.03 Rootkit Database: v2015.02.25.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Koen Scan Type: Threat Scan Result: Completed Objects Scanned: 452890 Time Elapsed: 1 hr, 47 min, 21 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 3 PUP.Optional.Conduit.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\cjofdnhdkbflacojpfpkchgafjahijbb, , [e3f84102e8a2142259f0a2136c974eb2], PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [4b906dd612786ccad20965c74eb7d12f], PUP.Optional.Conduit.A, HKU\S-1-5-21-2162189199-1631107133-265142415-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\cjofdnhdkbflacojpfpkchgafjahijbb, , [0ecdea591674989e8dbd9f16689b9070], Registry Values: 1 PUP.Optional.BProtector, HKU\S-1-5-21-2162189199-1631107133-265142415-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|BrowserMngr Start Page, http://www.google.com, , [627991b212783303165a63b5fd0858a8] Registry Data: 0 (No malicious items detected) Folders: 4 PUP.Optional.Datamngr.A, C:\Users\Koen\AppData\LocalLow\DataMngr, , [22b99da6b3d75dd9a890b0c0eb18ba46], PUP.Optional.Extutil.A, C:\Users\Koen\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B, , [657663e091f93303da4188f9ec1721df], PUP.Optional.Managera.A, C:\Users\Koen\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42, , [a43778cb71198ea8fd1f7d043ac9f20e], PUP.Optional.NoMoreAds.A, C:\ProgramData\NoMore Ads, , [7c5f9ba85e2cc373db2e2b67b053be42], Files: 35 PUP.Optional.Multiplug, C:\Program Files (x86)\SegmentAugmenter\SegmentAugmenter.dll, , [d902f44f33571521fadfc86453afcf31], Trojan.ELEX, C:\$RECYCLE.BIN\S-1-5-21-2162189199-1631107133-265142415-1001\$R5KC0WU.exe, , [706b01426d1de0567a576d056f92768a], PUP.Optional.Conduit.A, C:\Users\Koen\AppData\Local\Temp\SPSetup.exe, , [29b24102d7b3da5ca5a3341553ae48b8], PUP.Optional.SearchProtect.A, C:\Users\Koen\AppData\Local\Temp\nslEEB7.exe, , [746791b25d2daa8c92c2ea6aef12a25e], PUP.Optional.OutBrowse, C:\Users\Koen\AppData\Local\Temp\DownloadManager.exe, , [558691b2e7a39f97b1d543db7b85ed13], PUP.Optional.EZDownloader.A, C:\Users\Koen\AppData\Local\Temp\27bB345\temp\EzDownloader_setup.exe, , [72691c278ffba39332e0bf61ef11bf41], PUP.Optional.MultiPlug.A, C:\Users\Koen\AppData\Local\Temp\27bB345\temp\hpds_setup.exe, , [825975cedeac5fd7fe5137107c86e917], PUP.Optional.SearchProtect.A, C:\Windows\temp\nsi1D13.exe, , [dcff88bbbfcb5cda3e16b79df30ef10f], PUP.Optional.SearchProtect.A, C:\Windows\temp\nsn1F06.exe, , [cc0f5fe47e0c7cbabb99ef65c8390af6], PUP.Optional.SearchProtect.A, C:\Windows\temp\nsnF289.exe, , [fcdf6cd731590135bf95f0641be6847c], PUP.Optional.SearchProtect.A, C:\Windows\temp\nsnF28A.exe, , [aa3170d39eeca690fb59460ed72a06fa], PUP.Adware.Agent, C:\Users\Downloads\David-Baldacci-21-boeken-NL-Dutch-EPUB-Ebook-by-steffie (1).exe, , [c219f64dd6b4aa8c92a135afc838ec14], PUP.Optional.Amonetize, C:\Users\Koen\Downloads\Trapcode Form 2.0.rar__3515_i382965687_il3312100.exe, , [a13a5ce74b3fe650aaac5bda14ecea16], PUP.Optional.Conduit.A, C:\Users\Koen\Downloads\onlinetracks_cidNP_1051 (1).exe, , [bd1ee95ab9d1e94d0084fe4914ed39c7], PUP.Optional.Conduit.A, C:\Users\Koen\Downloads\onlinetracks_cidNP_1051.exe, , [ecefef542466ed498400c87f0ef3ad53], PUP.Optional.Bandoo, C:\Users\Koen\Downloads\iLividSetup (1).exe, , [c813b98a2268c472cee203312cd53bc5], PUP.Optional.Bandoo, C:\Users\Koen\Downloads\iLividSetup.exe, , [be1d3f04672394a2634d0d2761a08b75], PUP.Optional.InstallIQ, C:\Users\Koen\Downloads\coretemp_1236 (1).exe, , [ca1151f2414936001a5bc184c73a27d9], PUP.Optional.InstallIQ, C:\Users\Koen\Downloads\coretemp_1236.exe, , [904b8fb418722b0bb8bdeb5a956c8c74], PUP.Optional.Conduit.A, C:\Users\Koen\Downloads\PDFssoftware (1).exe, , [2bb023206d1dac8a2435680daa578c74], PUP.Optional.Conduit.A, C:\Users\Koen\Downloads\PDFssoftware.exe, , [0ccf91b29eec4cea5603db9aeb1626da], PUP.Optional.Solimba, C:\Users\Koen\Downloads\videoplayer.exe, , [30ab56edee9c8ea817cdc1f0f312c13f], PUP.Adware.Agent, C:\Users\Koen\Downloads\David-Baldacci-21-boeken-NL-Dutch-EPUB-Ebook-by-steffie (1).exe, , [a5366ad93852350170c3648025db956b], PUP.Adware.Agent, C:\Users\Koen\Downloads\David-Baldacci-21-boeken-NL-Dutch-EPUB-Ebook-by-steffie-EPUB-11-00M.exe, , [65762320c5c52214fe35f1f3ab55669a], PUP.Adware.Agent, C:\Users\Koen\Downloads\David-Baldacci-21-boeken-NL-Dutch-EPUB-Ebook-by-steffie.exe, , [4e8de0633f4bc17584afde063ec219e7], PUP.Optional.Softonic, C:\Users\Koen\Downloads\SoftonicDownloader_voor_sony-vegas.exe, , [e1fa56edabdf43f33b75012efb06ee12], PUP.Optional.OpenCandy, C:\Users\Koen\Downloads\PowerISO5.exe, , [e8f3c1827c0e96a0ce3f50b9f313629e], PUP.Optional.Searchqu.A, C:\Users\Koen\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}, , [d3083b08cbbf5bdb928cbd4f4fb605fb], PUP.Optional.Datamngr.A, C:\Users\Koen\AppData\LocalLow\DataMngr\{7CA1F051-A4FB-4143-B263-02B41E571EED}, , [22b99da6b3d75dd9a890b0c0eb18ba46], PUP.Optional.Extutil.A, C:\Users\Koen\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\bk.js, , [657663e091f93303da4188f9ec1721df], PUP.Optional.Extutil.A, C:\Users\Koen\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\cs.js, , [657663e091f93303da4188f9ec1721df], PUP.Optional.Extutil.A, C:\Users\Koen\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B\manifest.json, , [657663e091f93303da4188f9ec1721df], PUP.Optional.Managera.A, C:\Users\Koen\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\cs.js, , [a43778cb71198ea8fd1f7d043ac9f20e], PUP.Optional.Managera.A, C:\Users\Koen\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42\manifest.json, , [a43778cb71198ea8fd1f7d043ac9f20e], PUP.Optional.NoMoreAds.A, C:\ProgramData\NoMore Ads\NoMore Ads.exe, , [7c5f9ba85e2cc373db2e2b67b053be42], Physical Sectors: 0 (No malicious items detected) (end)